Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/GrXosjIeQUxPhfrybqaJLuhuF8g.roa
File: GrXosjIeQUxPhfrybqaJLuhuF8g.roa (raw, json)
Hash identifier: xjyAAJ3tau0moko8+N/HYwW+Z0Q270CEQuXK6HUHkIY=
Subject key identifier: 1A:B5:E8:B2:32:1E:41:4C:4F:85:FA:F2:6E:A6:89:2E:E8:6E:17:C8
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 018572A6F41CFF2A9367B8398AD919054CB3
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/GrXosjIeQUxPhfrybqaJLuhuF8g.roa
Signing time: Mon 02 Jan 2023 13:23:42 +0000
ROA not before: Mon 02 Jan 2023 13:23:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 193.92.8.0/24 maxlen: 24
193.92.8.0/22 maxlen: 22
193.92.10.0/24 maxlen: 24
193.92.9.0/24 maxlen: 24
193.92.11.0/24 maxlen: 24
213.16.192.0/20 maxlen: 20
185.4.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Apr 2023 14:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a6:f4:1c:ff:2a:93:67:b8:39:8a:d9:19:05:4c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Jan 2 13:23:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ab5e8b2321e414c4f85faf26ea6892ee86e17c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:cb:33:d6:67:65:d0:a6:fc:56:d4:d8:29:
3c:5b:85:be:3e:45:d8:39:ef:c6:7a:44:ad:d9:25:
a1:c3:1b:88:9f:8c:de:ce:a0:b6:7c:75:06:d3:62:
0b:19:99:ee:8f:0f:0d:ec:10:c0:21:02:ea:a2:b6:
b8:e9:4f:5c:30:c3:d9:6c:a2:a9:50:b4:1d:70:b9:
85:fc:48:76:2f:a7:f8:82:11:43:8d:de:48:95:67:
51:2a:ae:2f:e8:c4:74:ff:32:01:53:82:a2:19:ce:
06:66:0d:13:b5:b7:a9:71:f0:81:db:50:40:67:81:
37:ce:17:52:fe:ec:4d:0b:18:5d:65:5d:f4:38:b8:
0c:5c:7b:a5:75:79:65:17:1c:15:de:81:7f:b7:77:
70:ee:ab:34:6a:9b:b9:0d:df:0b:35:39:03:3e:50:
f4:62:33:5a:30:bc:26:cf:ac:e3:9d:a7:66:98:d1:
f0:8b:27:03:c3:86:95:ca:bf:83:09:0b:ba:41:e9:
b4:cf:95:2d:36:8b:f0:df:22:2f:dd:93:78:72:81:
b4:19:d5:1b:f1:4e:83:98:46:b0:f4:62:ec:a1:3d:
84:88:eb:15:aa:da:b9:90:03:d9:36:df:26:69:45:
d0:1f:71:1d:0f:be:14:2d:0b:72:a1:b2:61:56:5f:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B5:E8:B2:32:1E:41:4C:4F:85:FA:F2:6E:A6:89:2E:E8:6E:17:C8
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/GrXosjIeQUxPhfrybqaJLuhuF8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.88.0/22
193.92.8.0/22
213.16.192.0/20
Signature Algorithm: sha256WithRSAEncryption
78:14:0f:bc:40:34:7f:d7:19:bb:65:fd:0e:7e:b6:72:13:de:
be:fd:08:dc:59:a4:9c:bd:8b:f9:3b:c0:61:62:4b:d6:fc:6c:
f0:c2:f9:63:98:dd:11:9b:96:b4:cc:53:c2:e8:ba:77:d8:54:
7c:25:2a:63:84:89:a2:c8:99:2b:30:0d:ba:29:b3:b3:e3:ea:
9d:5d:f0:fd:67:9e:81:01:e3:ae:c3:5a:61:6b:72:de:5b:87:
9a:3a:f2:36:78:fb:95:5f:0c:d1:e5:75:e5:03:82:01:27:48:
66:86:18:5b:77:0e:00:11:a9:84:3a:dd:2f:f5:78:2c:cd:54:
0c:6e:79:e5:ba:1b:3c:a4:ca:b9:ba:c1:5c:dd:42:55:cf:48:
72:95:fa:b2:39:3e:a2:ca:e6:2c:d1:5e:22:4e:fe:b3:6d:f1:
44:59:fd:f5:e1:b0:b0:bc:43:62:e6:fc:a8:10:28:be:5d:07:
e4:06:4a:2a:f3:aa:92:f5:cb:d4:59:33:75:a5:d9:27:b3:21:
a0:2b:58:cc:8e:9a:42:33:8e:81:c1:63:1b:b2:fc:45:b9:15:
be:92:56:e9:1a:14:c4:b9:46:23:e0:6d:51:ca:97:83:86:3b:
b0:19:fd:7f:8e:ab:55:76:7f:9a:0b:33:64:c7:15:c8:8b:f0:
59:f7:2e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:32 2024 by rpki-client on console-ams.rpki-client.org