Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/gtotxydUxiGhT3wkDKNKX5J6m2Q.roa
File: gtotxydUxiGhT3wkDKNKX5J6m2Q.roa (raw, json)
Hash identifier: Pj0tE3QW707zOF5k0xMM7NrdPGe9arCONLmyal1tV3Y=
Subject key identifier: 82:DA:2D:C7:27:54:C6:21:A1:4F:7C:24:0C:A3:4A:5F:92:7A:9B:64
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 018C7244E24A62DB31FEAF7B03550AC4EFC2
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/gtotxydUxiGhT3wkDKNKX5J6m2Q.roa
Signing time: Sat 16 Dec 2023 10:56:06 +0000
ROA not before: Sat 16 Dec 2023 10:56:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202269
IP address blocks: 185.8.172.0/24 maxlen: 24
185.8.173.0/24 maxlen: 24
185.8.175.0/24 maxlen: 24
185.8.174.0/24 maxlen: 24
130.185.73.0/24 maxlen: 24
130.185.72.0/24 maxlen: 24
130.185.77.0/24 maxlen: 24
130.185.76.0/24 maxlen: 24
130.185.75.0/24 maxlen: 24
130.185.74.0/24 maxlen: 24
130.185.78.0/23 maxlen: 23
130.185.78.0/24 maxlen: 24
130.185.79.0/24 maxlen: 24
2a03:2dc0:3000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:72:44:e2:4a:62:db:31:fe:af:7b:03:55:0a:c4:ef:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: Dec 16 10:56:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82da2dc72754c621a14f7c240ca34a5f927a9b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:f9:11:c1:d6:dc:68:51:93:5f:c7:93:d7:
6f:1a:79:63:d3:e1:60:f8:68:ee:52:ca:87:07:b8:
13:55:78:f6:63:10:bd:24:72:52:fc:ae:9c:07:a2:
87:3c:c0:28:04:8d:95:a1:20:b7:b2:89:ba:d8:da:
02:20:ea:24:a7:36:a1:bf:cb:99:e6:43:1e:6c:e7:
09:05:f7:96:57:17:94:80:95:b5:57:e4:9a:9b:10:
8b:9e:45:14:f0:0d:91:8d:61:0c:13:16:2c:7d:57:
5c:70:75:0b:8d:f2:07:23:bf:5f:07:c0:df:59:c9:
ea:4f:39:f6:a1:9a:40:6a:2a:b4:a3:a8:97:15:6d:
c4:e8:4b:a0:4c:5f:e4:a6:d8:e2:7a:0e:6f:7c:a5:
3a:5c:ca:e1:37:38:0c:fa:82:43:c7:79:ea:ae:e2:
fb:78:5d:6d:d5:6f:4c:da:d0:62:39:b7:5f:58:d6:
0c:c3:d9:ac:4b:7a:a1:52:34:ad:17:8b:5e:cc:1c:
98:f7:d6:56:66:8e:f5:4e:79:f0:66:70:40:56:b5:
86:74:c3:ad:5e:93:ca:8c:21:4b:61:af:d6:73:7a:
88:9e:b2:09:44:5d:55:7f:a3:e9:d1:7a:a1:7d:7c:
4a:84:f3:b2:40:24:94:9e:b8:60:aa:af:ab:d0:d9:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DA:2D:C7:27:54:C6:21:A1:4F:7C:24:0C:A3:4A:5F:92:7A:9B:64
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/gtotxydUxiGhT3wkDKNKX5J6m2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.72.0/21
185.8.172.0/22
IPv6:
2a03:2dc0:3000::/36
Signature Algorithm: sha256WithRSAEncryption
01:0d:88:d0:d5:41:42:db:d0:94:a0:92:12:a4:f4:a3:b3:83:
8c:8c:ff:d8:23:a5:59:a6:3f:2e:c6:df:83:bf:fe:01:96:26:
35:d2:a5:dc:60:74:bf:2c:9a:0d:da:19:27:cf:71:3c:09:c6:
8f:67:6d:0d:6c:23:be:63:9f:b9:3c:cc:6d:d3:6d:fc:bd:7f:
cf:b7:30:0d:13:4c:cf:f4:b9:d2:aa:a2:a3:87:4c:16:1b:75:
36:ad:df:df:d5:aa:73:f6:ac:dd:9e:95:8b:6b:f6:d6:9e:a6:
0f:72:cb:c9:7e:02:f2:3a:dc:70:3e:ac:eb:2c:88:78:f5:e3:
ff:47:3a:91:1e:18:6b:99:ad:e9:4b:02:7a:0a:58:f9:a4:78:
52:71:41:22:d5:97:2d:0d:7a:5a:f8:91:70:1e:8e:bb:43:80:
92:ad:09:d3:66:9c:d0:53:85:70:de:01:d9:ed:00:5e:2b:73:
61:e7:d3:55:5b:67:aa:e0:cf:e6:05:5d:86:d2:ab:97:30:0c:
d7:66:df:1a:b2:7b:8d:6a:7f:23:1a:c7:34:a6:93:cf:d2:a8:
31:c9:1a:a9:70:c2:8c:db:fd:89:16:71:03:39:5f:ab:1f:bd:
78:f1:9c:2b:37:61:f9:d7:6d:27:9a:2b:36:81:1d:b1:eb:74:
e8:ed:81:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:39 2024 by rpki-client on console-fra.rpki-client.org