Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/Gb2YoThzgzuEwwUQn50ZCfIuh5I.roa
File: Gb2YoThzgzuEwwUQn50ZCfIuh5I.roa (raw, json)
Hash identifier: BjYb7vC1iRL0c3bSlyx+s7jGpwZ2/8Mp6wFr0VjlRD4=
Subject key identifier: 19:BD:98:A1:38:73:83:3B:84:C3:05:10:9F:9D:19:09:F2:2E:87:92
Certificate issuer: /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial: 0186FE9C155D85042D2B445680A93B9B93B8
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/Gb2YoThzgzuEwwUQn50ZCfIuh5I.roa
Signing time: Mon 20 Mar 2023 10:41:27 +0000
ROA not before: Mon 20 Mar 2023 10:41:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211095
IP address blocks: 185.68.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Mar 2023 16:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:9c:15:5d:85:04:2d:2b:44:56:80:a9:3b:9b:93:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Validity
Not Before: Mar 20 10:41:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19bd98a13873833b84c305109f9d1909f22e8792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:a1:e7:90:fe:b5:1f:bd:57:9a:13:2f:0d:
9d:0d:a5:3e:be:d5:58:d0:2e:c5:d8:67:a3:86:57:
e4:d9:7c:65:ef:6c:83:4d:86:72:8c:09:3f:1e:b9:
fe:a0:5c:35:ba:cc:21:79:a4:91:3f:df:cc:f6:c7:
ec:30:7b:60:86:43:75:eb:a6:62:4d:e5:aa:e6:b8:
52:af:1e:12:f4:85:e7:5f:6b:01:3b:eb:c7:cf:b1:
18:c9:4c:36:38:c6:4e:9a:85:01:d1:f4:69:e1:78:
79:70:ec:f3:45:7f:39:bb:70:fd:00:2b:87:1a:e2:
5a:22:d0:20:73:b8:b0:b9:ff:3b:9a:c6:93:8f:e4:
cb:45:1b:56:eb:ec:8f:5a:f8:fd:1b:6a:14:8c:4c:
c8:fa:8b:bd:51:13:e0:75:17:47:e9:00:f2:c7:08:
d6:2f:52:36:c5:6e:f3:1b:54:b5:c8:9e:2a:58:98:
b9:25:e2:8c:81:b6:74:ff:06:59:8c:57:36:e3:79:
59:af:21:03:80:48:34:a0:76:a0:13:16:2c:41:53:
2b:e8:16:63:33:bf:1f:4d:46:9e:0f:9a:1c:9d:f8:
0d:16:2e:54:ac:99:1d:32:5f:be:2e:cf:c1:53:ea:
26:b9:f4:6d:f5:8d:a2:7d:20:80:0a:76:e5:7e:cd:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BD:98:A1:38:73:83:3B:84:C3:05:10:9F:9D:19:09:F2:2E:87:92
X509v3 Authority Key Identifier:
keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/Gb2YoThzgzuEwwUQn50ZCfIuh5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.235.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a8:9d:62:c8:83:b0:01:07:21:d7:32:a9:29:ff:86:42:6c:
47:2b:5a:f4:61:24:25:e8:e3:7f:a6:1a:f1:8d:ff:ef:67:9a:
aa:5e:5b:d6:d5:6b:6d:87:5d:d1:fd:01:bd:24:76:22:dc:f4:
c2:14:e4:b4:9c:72:3c:94:75:45:e2:bf:17:13:9e:d5:73:75:
33:19:ec:31:49:e0:e0:05:19:04:70:b4:c7:b3:2f:ef:b4:b7:
cf:1a:7c:09:7f:96:2e:fd:77:bb:92:49:ab:34:ee:f5:40:91:
26:c4:11:47:40:fe:08:cb:5d:68:00:5b:63:eb:88:0b:6b:e6:
4e:ec:8d:6d:36:e0:fd:b1:23:44:68:ce:f9:4c:fa:1c:43:50:
85:e6:91:aa:63:16:53:3a:44:c3:18:cc:60:2f:44:8e:ff:bc:
13:0e:6d:6a:02:64:c7:55:28:c7:0c:ec:ec:54:1b:af:c2:2c:
9a:56:db:2a:2e:dc:e9:72:45:7c:ea:5d:41:48:41:8b:00:33:
79:1a:b6:e8:de:5e:bd:b5:cb:65:d9:69:5b:d4:c1:78:b0:6a:
55:d0:b7:f7:c6:f5:0e:5c:61:a4:c7:56:a9:ef:30:9b:f0:76:
ee:91:51:38:ef:7b:60:a7:3a:af:f2:6e:1d:cf:2f:2f:0d:66:
f6:1f:05:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:40 2024 by rpki-client on console-ams.rpki-client.org