Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GBQX32IBK-Zr_ZtgthBaFoM-nYQ.roa
File: GBQX32IBK-Zr_ZtgthBaFoM-nYQ.roa (raw, json)
Hash identifier: wnc28fD3tVs3FDK2EwzDhASHfvMK8gzLTXqUgRJGIvw=
Subject key identifier: 18:14:17:DF:62:01:2B:E6:6B:FD:9B:60:B6:10:5A:16:83:3E:9D:84
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0186BB3A3B5C0BA7997F719D49C6DDD76008
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GBQX32IBK-Zr_ZtgthBaFoM-nYQ.roa
Signing time: Tue 07 Mar 2023 08:40:00 +0000
ROA not before: Tue 07 Mar 2023 08:40:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 185.251.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Aug 2023 13:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:3a:3b:5c:0b:a7:99:7f:71:9d:49:c6:dd:d7:60:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 7 08:40:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=181417df62012be66bfd9b60b6105a16833e9d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:34:ad:a4:ba:06:4e:51:2c:03:cc:48:d1:c3:
cf:f8:d5:4b:d4:c5:7c:38:80:68:4b:b9:aa:e1:16:
41:c7:94:30:94:f3:ea:87:71:c1:04:96:c5:61:90:
93:c1:35:19:66:ab:a9:bc:2e:30:86:a9:84:5c:e5:
16:c8:a7:58:4b:8a:21:60:3a:6b:2b:76:22:92:69:
b6:f6:14:ce:98:3c:be:e6:6f:16:1a:57:6a:ff:55:
a6:7e:5a:06:f1:3c:fb:08:b7:b4:11:e8:6a:f1:78:
3f:23:2d:b9:81:70:ce:a1:7f:42:1d:f2:9f:c6:b7:
2a:fc:f8:b0:96:f8:2b:6c:c2:06:13:12:40:1c:7f:
a6:b4:fe:1f:c2:99:c1:f3:eb:80:41:70:79:8e:af:
a4:67:ef:cd:72:b9:37:52:19:d2:89:6c:5d:c6:5c:
1a:e7:b9:20:16:8e:06:83:6e:14:b2:10:8f:38:85:
91:eb:0b:42:32:26:ca:d4:01:d6:55:49:40:b5:bc:
1f:ad:17:77:52:13:d9:db:19:19:95:6c:87:ed:85:
77:96:7a:a4:97:c4:1f:8d:30:7a:ea:da:d3:3a:34:
15:2b:c4:22:68:64:cd:e5:f2:65:1a:83:90:9f:4a:
05:f6:be:9b:47:b5:39:7f:ba:6a:86:dc:ee:07:27:
8c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:14:17:DF:62:01:2B:E6:6B:FD:9B:60:B6:10:5A:16:83:3E:9D:84
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GBQX32IBK-Zr_ZtgthBaFoM-nYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.230.0/24
Signature Algorithm: sha256WithRSAEncryption
40:23:1e:b8:35:bb:47:54:0c:2e:3b:30:af:f6:6b:4e:71:f8:
98:ce:b2:d6:56:77:f0:9a:33:14:fe:ea:92:5c:b1:27:bd:37:
c8:44:84:c1:95:df:4d:d8:84:b1:72:5e:27:2c:9b:15:5a:21:
92:83:70:84:0c:99:49:63:de:e4:d4:a6:6a:8f:ae:29:0d:6f:
11:26:34:92:84:9f:c8:22:62:0f:63:57:51:bc:83:f6:4d:81:
4f:af:59:12:df:ac:b4:d2:f4:ec:63:ae:9a:93:9f:f7:3e:e0:
1a:4e:fa:bd:60:89:f2:6e:01:d5:02:53:40:86:a1:7e:1c:cc:
59:08:dc:d0:d8:d4:d1:8f:c2:8d:4d:80:77:06:ae:46:1b:1d:
4b:1d:a8:05:cb:a3:ea:67:9f:3d:fe:aa:a7:8c:9d:9c:4f:d8:
6d:0c:b3:de:d4:34:1e:d3:bf:56:06:31:c0:a6:51:55:e2:6b:
7c:a6:f9:89:30:6d:08:42:4d:3e:7a:a0:76:95:ba:7b:30:e6:
1c:f1:e9:d1:36:f1:7a:43:bd:f0:d5:4e:d1:5e:2a:cd:f0:02:
c6:36:59:47:25:5f:42:89:03:b1:d7:27:81:2d:bf:c5:f2:a6:
96:f1:2c:08:bd:e5:93:36:34:58:81:53:25:2b:0a:1f:fc:ca:
91:76:d8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org