Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/GfwRjfIvWs9pwy-ojSZjz_AQ-ho.roa
File: GfwRjfIvWs9pwy-ojSZjz_AQ-ho.roa (raw, json)
Hash identifier: JTydbu6Uk0R+Bp9L1gUbfLzSRxwDIOp4VWJmP0rBtDE=
Subject key identifier: 19:FC:11:8D:F2:2F:5A:CF:69:C3:2F:A8:8D:26:63:CF:F0:10:FA:1A
Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial: 0186E55437A674112CEF263AD4A8E239E2E7
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/GfwRjfIvWs9pwy-ojSZjz_AQ-ho.roa
Signing time: Wed 15 Mar 2023 12:52:27 +0000
ROA not before: Wed 15 Mar 2023 12:52:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48391
IP address blocks: 185.115.168.0/24 maxlen: 24
185.115.171.0/24 maxlen: 24
185.115.170.0/24 maxlen: 24
185.115.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:54:37:a6:74:11:2c:ef:26:3a:d4:a8:e2:39:e2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Validity
Not Before: Mar 15 12:52:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19fc118df22f5acf69c32fa88d2663cff010fa1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:c2:2b:49:c3:99:a8:82:ed:de:d1:db:fb:
fe:ef:40:f3:5d:ad:35:ca:fa:71:83:f4:dc:cf:3e:
3f:64:3e:dc:48:82:9f:4a:55:75:1f:0c:25:91:c1:
2a:e0:dc:db:f5:be:63:32:04:f4:ad:d8:50:60:6d:
a6:14:97:b1:e1:5e:2a:b4:09:5c:3f:ae:6d:c1:ff:
6e:7b:e1:d9:bb:16:ef:d1:aa:85:74:b7:27:55:e3:
36:b7:3b:c1:57:ca:55:c5:40:5b:bf:dd:f8:75:64:
e6:f6:ce:2c:ed:0f:d7:a1:5b:c5:c6:ad:3e:40:66:
7f:e7:d0:82:c8:75:7f:7a:ec:04:ad:dd:7e:64:fc:
c7:ec:d2:3d:9d:1c:16:e0:4a:a0:aa:64:42:11:24:
f5:71:91:fd:75:80:29:77:06:68:f9:da:88:7f:88:
2d:d1:cc:c1:8b:a3:fa:6f:54:51:76:a3:80:35:9d:
9f:14:ee:dd:48:ac:56:46:b6:60:4d:84:a1:99:c9:
15:5a:32:f0:cc:7d:df:bb:3a:09:a7:78:8e:06:0a:
3c:90:b1:de:12:19:a8:c3:5d:92:3d:55:ed:da:4f:
50:7b:8d:a4:ea:7d:a0:76:d7:08:bb:94:6e:80:99:
b4:78:29:68:8b:4a:da:b3:90:f9:01:b8:93:3a:66:
4d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FC:11:8D:F2:2F:5A:CF:69:C3:2F:A8:8D:26:63:CF:F0:10:FA:1A
X509v3 Authority Key Identifier:
keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/GfwRjfIvWs9pwy-ojSZjz_AQ-ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.168.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:9f:a5:41:26:66:1a:f2:a0:0e:70:bb:2b:be:eb:e2:46:e9:
f5:d9:8b:6c:ac:e1:fe:fb:d3:0b:e7:c9:44:6b:f9:e0:d7:96:
c7:7e:c9:bc:bd:0e:96:4b:58:fe:31:5b:3b:6c:ef:6f:a6:46:
02:98:25:9f:9b:09:36:34:70:a3:ad:2a:62:6f:99:fe:16:59:
b0:9e:11:f4:05:05:17:86:e5:be:f5:91:05:57:88:67:0a:5f:
eb:19:65:85:84:fb:bd:40:2b:98:4e:c6:b6:b0:81:74:5b:f9:
a6:1e:b4:55:3c:7e:3f:6c:bd:68:59:69:89:73:1c:b2:0f:7b:
2b:c5:93:2f:7b:8b:0a:57:cf:f1:a7:be:b2:76:2f:44:d4:83:
c5:9e:cb:08:e6:2d:f3:0f:40:8f:64:b6:ac:0e:37:56:d4:ab:
a6:15:f3:2d:70:d8:7d:a1:04:0b:f0:1a:46:17:79:ab:22:fd:
01:c9:16:e2:35:2c:63:81:2b:cc:85:0c:15:f5:d0:cc:e4:ea:
35:ac:19:a4:d6:48:69:97:fb:79:83:4c:01:05:37:a3:27:ad:
b5:5d:53:f3:6b:06:01:b5:5f:24:4e:8d:14:4c:40:b6:08:12:
13:46:00:c3:ea:78:f5:a2:40:23:b7:4c:b4:b6:25:b2:0c:57:
9f:e0:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:01 2023 by rpki-client on console-ams.rpki-client.org