Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GDwcNG5VNDPK1KcTkDk8bYROV7I.roa
File: GDwcNG5VNDPK1KcTkDk8bYROV7I.roa (raw, json)
Hash identifier: lPdjXEbylMOedPmOQWkqZsHMrcf+cYlLWZYD2PXZmGU=
Subject key identifier: 18:3C:1C:34:6E:55:34:33:CA:D4:A7:13:90:39:3C:6D:84:4E:57:B2
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0185772C307BFD2D8EC51808125E7D3554A8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GDwcNG5VNDPK1KcTkDk8bYROV7I.roa
Signing time: Tue 03 Jan 2023 10:27:42 +0000
ROA not before: Tue 03 Jan 2023 10:27:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.194.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:2c:30:7b:fd:2d:8e:c5:18:08:12:5e:7d:35:54:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 3 10:27:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=183c1c346e553433cad4a71390393c6d844e57b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:54:96:a6:d7:c9:49:08:88:64:c6:88:2b:e1:
77:63:bd:28:4e:54:25:04:25:07:de:2a:7a:2f:a8:
8d:7d:9b:e1:69:ba:12:c7:95:68:20:bf:8e:44:44:
00:31:62:8a:fa:e2:60:74:70:bb:24:f9:14:7c:77:
9e:4a:48:75:8d:3c:8b:d7:d9:79:68:c4:15:96:d0:
c9:dd:cf:ea:d6:97:e0:0b:00:a1:3f:01:f4:0a:17:
9e:38:18:4c:af:51:19:b9:98:47:ea:2a:8f:3b:b1:
c4:6a:f6:d7:13:97:24:0e:3b:9a:f3:6e:77:12:5f:
b9:1a:82:db:d1:10:0d:ef:85:97:1c:c8:18:2f:46:
ac:55:af:e6:d9:0f:fa:60:0d:11:b0:4a:9f:f3:94:
dd:d6:ee:6b:b3:b1:fd:a1:c9:94:9e:9f:a1:10:56:
ff:f9:7d:25:54:83:a3:a8:1d:72:f0:c7:e7:80:95:
45:39:11:bd:95:3f:eb:04:12:20:28:9a:80:8c:6d:
7a:27:c2:be:5c:01:bf:ec:c0:a4:c0:ed:a2:53:d8:
1d:ef:e0:50:59:d2:e4:e2:de:44:d0:82:28:38:9f:
44:58:51:65:47:9f:96:d4:9d:08:99:12:ba:64:b4:
10:5b:3e:a0:87:df:f3:f5:15:fc:4b:c7:db:00:b5:
19:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3C:1C:34:6E:55:34:33:CA:D4:A7:13:90:39:3C:6D:84:4E:57:B2
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GDwcNG5VNDPK1KcTkDk8bYROV7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.176.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2b:22:75:d8:9d:ba:de:4d:cc:67:ee:0b:84:80:3c:f8:33:
ba:71:b4:6b:f9:30:e3:cd:21:1d:ed:bc:a7:f8:9e:12:d9:cc:
a6:d9:38:10:ba:a3:ec:d3:0f:1c:04:2e:91:61:0f:a3:d3:64:
0e:49:7b:e5:bc:9d:b6:96:b0:81:66:1c:47:54:48:5f:96:b8:
05:17:28:41:b6:23:67:bb:87:4a:ae:d7:cd:84:9f:cf:41:7c:
fc:8e:cd:1f:b6:e6:fd:ca:68:84:ac:14:63:23:aa:c9:85:5a:
2f:24:01:f3:97:82:3a:9f:2f:20:86:cb:c1:22:48:86:95:3f:
14:0d:27:af:81:3c:dd:f0:7e:6a:42:c5:3f:55:c1:b5:95:99:
e2:53:3f:33:10:78:a7:f6:91:ae:cc:cc:ad:7f:b4:99:58:ad:
64:2b:ef:db:e2:97:6f:ce:7d:0f:4d:89:d8:3a:8d:ef:16:de:
26:e8:b8:11:7b:a3:23:fc:0b:e2:be:c1:09:fd:c4:08:1b:b8:
61:f0:84:88:42:ef:d3:35:4d:e9:54:36:5f:e4:77:aa:f5:4c:
a9:8f:6e:2e:a7:0c:8f:ba:1c:ba:19:94:64:1a:66:a9:64:b2:
5c:e2:0d:51:f2:41:8e:80:35:79:bd:fd:9a:08:c4:f9:89:ad:
82:14:b5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:15 2023 by rpki-client on console-fra.rpki-client.org