Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/gGbCw3mTXlaqhnfFuGDGmaIygIU.roa
File: gGbCw3mTXlaqhnfFuGDGmaIygIU.roa (raw, json)
Hash identifier: KNTJrC9AeaAzZOwJ3GaA8O14ZMPUlmmPA97K6qO63u8=
Subject key identifier: 80:66:C2:C3:79:93:5E:56:AA:86:77:C5:B8:60:C6:99:A2:32:80:85
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01870907519E371A727E96D675F1FF64F6D4
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/gGbCw3mTXlaqhnfFuGDGmaIygIU.roa
Signing time: Wed 22 Mar 2023 11:14:47 +0000
ROA not before: Wed 22 Mar 2023 11:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213369
IP address blocks: 185.180.229.0/24 maxlen: 24
185.180.228.0/23 maxlen: 23
185.180.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:07:51:9e:37:1a:72:7e:96:d6:75:f1:ff:64:f6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 22 11:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8066c2c379935e56aa8677c5b860c699a2328085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:63:96:62:76:98:8b:83:93:77:f4:1c:66:47:
39:36:3a:ad:9d:c3:7d:a7:69:c1:1d:d4:a2:8b:ee:
4c:b2:2c:ee:54:ac:4f:d9:44:d0:d7:e0:c7:4d:df:
67:fa:d4:7a:8f:4f:6d:4d:1e:c5:d6:10:b0:33:d9:
b3:38:43:df:9f:68:b7:4f:ea:50:a8:de:0f:e2:86:
be:6e:d6:da:7c:e1:10:30:7f:e4:79:3e:0d:66:3f:
a1:4a:c9:f3:a2:46:7a:ae:c7:d8:bb:5c:bc:ad:48:
ee:9c:7f:01:65:22:75:46:b3:eb:52:3e:53:1d:73:
d3:50:41:1e:55:19:ce:8c:84:96:cb:f1:77:38:f7:
28:44:3f:70:0b:55:62:39:97:f8:d8:8f:cf:0c:9f:
54:57:d6:bf:2f:2a:3c:a4:f4:8a:6b:ef:4d:98:26:
ec:b6:f4:d6:e0:0a:7f:86:2f:ff:9f:ea:f3:f4:75:
d9:15:26:73:50:6e:d0:ec:d1:7f:24:7e:83:20:84:
01:e4:40:ff:ec:86:ce:f6:b7:09:90:6a:36:71:fd:
84:e2:0a:76:b8:5e:51:4d:12:98:f9:58:58:6f:e2:
40:4c:ab:bd:52:1c:8e:ed:70:f6:06:d2:37:28:74:
fc:cf:9c:74:8f:8a:de:3e:33:9e:4c:f2:70:b0:ac:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:66:C2:C3:79:93:5E:56:AA:86:77:C5:B8:60:C6:99:A2:32:80:85
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/gGbCw3mTXlaqhnfFuGDGmaIygIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.228.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:65:e2:a3:c0:bc:89:a8:26:29:89:fc:65:bd:46:74:f1:17:
a6:0e:fe:3d:57:a5:2f:86:4d:ce:c9:35:17:b3:62:3a:22:dc:
4f:3d:d7:7c:0e:fd:2a:a7:0c:87:2b:38:ff:e5:c5:b4:69:e4:
de:f2:35:6b:1a:7f:02:14:c1:16:b6:11:e2:ce:0e:64:38:00:
23:e8:4d:69:cc:c3:b9:b3:31:06:f6:e1:9f:74:6c:af:59:b3:
28:d2:19:81:1a:7d:4a:e5:da:7b:89:37:e6:52:ce:9f:48:52:
4d:d6:88:d6:20:5b:a7:c4:47:f1:a7:bf:c0:55:ad:81:bb:1e:
66:37:d6:c1:de:07:b4:d1:86:5c:e3:00:6e:a4:2f:8b:36:07:
6a:ac:48:b7:a2:dd:8c:59:53:49:6b:43:33:2f:5f:cf:9e:0d:
ff:e5:fc:db:41:6c:b5:7c:b6:cf:f7:93:0d:a0:8f:4b:07:45:
36:e9:b2:11:f5:d1:30:f7:4e:0a:d6:24:ef:59:78:45:f8:5f:
ab:a1:7d:10:d2:c4:d5:9e:51:03:7d:db:81:75:22:1c:8b:cb:
cd:c2:22:5e:fb:d1:70:96:13:36:02:83:78:9e:f3:5d:4e:54:
b5:e2:03:91:d4:96:a2:85:45:16:ba:7e:f6:15:0f:bd:1f:b9:
0e:88:ae:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org