Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/GiK-61X7_VN5ITjx600SyMNTC1Y.roa
File: GiK-61X7_VN5ITjx600SyMNTC1Y.roa (raw, json)
Hash identifier: VGCa0IIofwMJf90aBUTDktEUgh841HiEYOuHdC3CPpw=
Subject key identifier: 1A:22:BE:EB:55:FB:FD:53:79:21:38:F1:EB:4D:12:C8:C3:53:0B:56
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 018843683CE0C1EB4E4A730644BB43AE44DC
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/GiK-61X7_VN5ITjx600SyMNTC1Y.roa
Signing time: Mon 22 May 2023 12:21:24 +0000
ROA not before: Mon 22 May 2023 12:21:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211970
IP address blocks: 188.72.56.0/24 maxlen: 24
185.234.245.0/24 maxlen: 24
188.72.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Dec 2023 10:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:43:68:3c:e0:c1:eb:4e:4a:73:06:44:bb:43:ae:44:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: May 22 12:21:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a22beeb55fbfd53792138f1eb4d12c8c3530b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:a4:96:a9:71:c3:6a:9d:42:7a:49:01:13:
bd:3e:1f:a7:9a:f3:8f:5d:e1:06:56:af:25:e1:ba:
bf:9a:63:37:29:15:78:23:3c:5f:57:a7:c9:e8:08:
ea:49:22:14:1c:0d:35:3c:05:a3:9e:ae:03:10:3c:
c3:7b:18:9b:86:9d:6b:b4:4f:4f:f8:2c:b9:46:92:
6e:4c:df:d5:77:49:8e:e5:4c:8b:03:de:ae:26:5c:
7e:b4:4d:28:a5:a3:57:0d:3e:93:65:79:79:ea:0c:
21:73:4c:8f:49:04:4f:ac:ea:bc:f2:8f:35:95:af:
6a:d6:dc:d5:cf:79:c8:dc:80:a3:65:81:f2:76:da:
01:71:2c:5f:b7:9c:a6:16:e6:b8:75:35:c8:e5:e6:
1c:2e:94:d9:12:bf:49:9b:e8:d9:e3:69:1e:b3:eb:
e9:f8:d2:a5:b4:a3:db:91:d5:9a:0a:cb:5f:59:83:
62:d7:90:47:d8:9b:8b:03:65:77:2c:1d:83:03:03:
25:7a:e6:8b:da:31:3e:db:49:89:d5:d5:a4:46:b6:
f4:13:de:20:27:bf:f0:28:a3:3c:66:94:d2:18:2f:
b0:30:20:be:85:3d:71:98:d0:aa:94:01:59:35:37:
a4:87:a0:84:e4:f6:9b:9d:2c:c6:43:eb:7b:79:f9:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:22:BE:EB:55:FB:FD:53:79:21:38:F1:EB:4D:12:C8:C3:53:0B:56
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/GiK-61X7_VN5ITjx600SyMNTC1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.245.0/24
188.72.3.0/24
188.72.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:ec:83:d6:ea:73:6b:c4:c9:8f:2c:ca:2b:cd:57:57:4a:7a:
e1:7f:5b:6f:3a:ae:69:e3:7f:54:fe:6b:0a:91:9f:24:d4:2f:
f9:1b:1b:30:ea:e5:7c:85:d4:57:a1:4a:fe:c5:bf:30:56:ab:
01:90:d5:43:17:c5:41:65:ff:cc:0f:71:ed:a3:4a:9b:62:0b:
ce:1f:97:97:2c:b4:27:6e:9c:20:c4:f0:9b:68:11:7d:e6:88:
0e:b4:e4:a7:6c:94:25:0d:a5:9d:b3:3c:bf:aa:78:b5:02:c8:
b5:6e:b8:48:ea:d4:d7:37:28:9d:1a:e6:59:d9:db:7b:6f:4c:
dc:0e:9f:d4:4e:ff:d9:c8:23:50:21:b0:97:24:d8:83:e5:3b:
da:bf:4d:fc:38:63:30:f1:d5:2c:5c:37:b7:e4:a2:a4:1e:9c:
af:48:0c:a7:db:a0:19:be:63:08:38:50:62:00:a6:c4:9d:8e:
2c:c7:2c:ad:9f:2a:37:e7:45:7d:05:97:86:58:7b:b6:83:01:
2b:07:ec:cb:4d:55:49:0f:f1:11:83:a3:fd:a2:68:32:76:3a:
69:66:d7:b1:b7:f6:f1:4f:89:6e:cd:c8:df:27:24:16:c2:87:
0e:87:35:53:d2:7b:e6:d5:4f:11:da:77:fb:a3:ee:f1:60:d7:
7e:7a:31:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:06 2024 by rpki-client on console-fra.rpki-client.org