Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GJHwxnwfRkwnhOvqlKkWwb6f4TM.roa
File: GJHwxnwfRkwnhOvqlKkWwb6f4TM.roa (raw, json)
Hash identifier: 59t2vp1ldX/ZVDz/uG0JajsNBJjTMgkFmtdJrnG0GNo=
Subject key identifier: 18:91:F0:C6:7C:1F:46:4C:27:84:EB:EA:94:A9:16:C1:BE:9F:E1:33
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01867E854286E466C8C1FC8BE54F7D2C208E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GJHwxnwfRkwnhOvqlKkWwb6f4TM.roa
Signing time: Thu 23 Feb 2023 13:45:07 +0000
ROA not before: Thu 23 Feb 2023 13:45:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210531
IP address blocks: 185.194.29.0/24 maxlen: 24
185.126.81.0/24 maxlen: 24
185.246.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:85:42:86:e4:66:c8:c1:fc:8b:e5:4f:7d:2c:20:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 23 13:45:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1891f0c67c1f464c2784ebea94a916c1be9fe133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:2a:02:df:f9:d0:52:0e:63:4e:66:05:15:
70:37:0a:f8:f9:1d:25:45:e1:7a:60:e9:9c:fe:18:
ae:db:89:ca:18:78:95:71:ee:35:41:eb:52:50:4d:
73:2f:02:c1:1f:21:b9:c0:4a:f3:77:9a:75:16:5f:
9a:90:34:25:98:96:72:bb:f7:c1:1e:64:54:53:49:
dd:7c:46:2e:21:6b:40:90:37:bd:f6:86:b4:ab:73:
4d:7c:71:1e:fa:d8:df:74:e1:ed:c8:8b:a4:47:af:
80:90:a7:9a:86:9f:72:2c:18:97:ca:d3:b3:40:76:
85:1d:3d:bf:b3:c4:8b:dd:1b:f7:33:8b:c7:8e:01:
54:9a:c5:f2:ab:85:cb:3b:c7:c0:82:09:41:bc:82:
90:f6:19:74:a6:b5:1d:a0:ef:31:66:88:07:f5:11:
f9:66:d4:d2:70:d1:59:92:c4:8e:c7:8c:2d:d7:e1:
b2:23:f8:b7:92:1d:d0:50:b4:de:a3:20:98:9b:b6:
89:c8:c6:6b:ba:c2:e2:08:95:57:e2:77:ee:ea:62:
31:4f:ff:79:72:f5:8a:55:06:f1:b9:89:59:b0:de:
b7:cb:92:56:67:07:3e:61:1c:d7:d7:51:5b:f4:82:
6b:b3:b2:6a:b5:83:2a:65:82:76:94:03:e7:c0:92:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:91:F0:C6:7C:1F:46:4C:27:84:EB:EA:94:A9:16:C1:BE:9F:E1:33
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GJHwxnwfRkwnhOvqlKkWwb6f4TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.81.0/24
185.194.29.0/24
185.246.113.0/24
Signature Algorithm: sha256WithRSAEncryption
57:be:b8:8b:8d:f1:fe:38:f2:4f:b4:ce:b0:0c:af:c1:ca:ba:
e5:06:e4:2c:0d:1c:dd:50:cf:ad:ea:91:f7:2b:cf:66:17:66:
a0:36:96:47:f5:09:33:31:7e:85:b4:a3:41:ab:4d:f7:74:14:
e2:36:d6:aa:49:63:81:e3:a2:58:40:af:f3:88:41:b5:ad:ce:
ce:9d:38:64:db:45:76:ad:9e:79:2b:13:82:a3:f1:8e:13:83:
2a:8e:bd:4b:6f:8c:f3:2d:b1:b9:d1:c2:26:c1:cc:be:cc:4b:
0f:e5:eb:e4:73:ef:1c:c2:32:7f:bf:9c:08:5e:f3:4a:ea:0a:
47:fa:eb:1d:e1:6e:f8:c4:10:02:e0:73:58:fd:66:d9:07:d9:
7b:0e:78:6c:00:6a:13:1f:6e:23:cd:6b:d7:e3:dd:bd:64:d4:
6e:e0:8b:bd:ee:11:f5:c6:2d:0a:b9:52:ed:f3:a3:42:9c:37:
a1:5e:5e:48:68:68:6f:b8:84:3f:b6:b0:61:97:34:28:c5:b0:
ce:d8:37:4f:82:97:7c:a0:c9:3c:d7:24:d1:1d:78:98:d3:cd:
f0:89:37:50:61:c3:f3:2f:5f:7c:d3:4d:db:a3:71:7e:b6:ae:
fe:a5:11:6e:6a:4c:c2:cd:a9:90:47:f6:ca:9f:17:a3:79:2e:
c0:7e:26:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org