Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GMVy7V2r5AGpSIjmg1filcE9ATk.roa
File: GMVy7V2r5AGpSIjmg1filcE9ATk.roa (raw, json)
Hash identifier: gL0bnqoos393SN6vlTL7I2Rw8h1L4KYlxGHP3m143o4=
Subject key identifier: 18:C5:72:ED:5D:AB:E4:01:A9:48:88:E6:83:57:E2:95:C1:3D:01:39
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B62F84352A9161574662E68CAD2892
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GMVy7V2r5AGpSIjmg1filcE9ATk.roa
Signing time: Mon 02 Jan 2023 09:00:43 +0000
ROA not before: Mon 02 Jan 2023 09:00:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33387
IP address blocks: 185.226.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:2f:84:35:2a:91:61:57:46:62:e6:8c:ad:28:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18c572ed5dabe401a94888e68357e295c13d0139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:f3:fa:3c:e7:ce:b6:7d:fc:98:fd:a1:09:
1b:61:25:29:20:f6:e3:77:7f:84:b0:85:cd:c8:11:
56:8e:2f:67:44:6b:22:71:43:02:24:00:ee:8a:51:
29:7f:da:23:26:53:02:26:aa:26:41:86:5f:38:c8:
d9:25:38:37:4e:d0:52:2e:21:a2:ae:86:bb:95:78:
04:fe:27:3a:8b:8d:8f:0f:b2:8b:21:a5:17:41:0d:
64:ed:f9:46:8b:80:a9:a8:c1:32:73:9a:fc:88:e3:
ef:9f:57:27:6e:f1:60:8b:e7:cc:79:6f:db:bb:43:
d8:d3:2d:eb:56:07:09:5f:db:9e:af:6c:0a:e8:f0:
b5:da:6f:f5:a5:c8:ed:f2:4c:f5:84:68:d5:11:e6:
11:9a:b5:fe:e8:bc:b8:36:5a:d8:d1:20:2a:63:69:
16:df:5c:e5:e0:74:f1:ce:9e:30:92:64:ed:8b:7b:
b2:73:65:94:83:11:29:dc:ed:8b:83:0d:c5:a8:81:
f4:49:57:08:e3:8f:7a:39:26:5a:4f:61:e3:03:dc:
f8:1f:31:84:0d:dd:36:7a:50:bb:fe:b0:a3:2b:81:
c5:00:b7:82:75:c7:5b:82:36:4e:a1:02:4f:99:42:
16:6c:13:9c:27:b0:cb:74:b4:49:93:f8:6c:83:4a:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C5:72:ED:5D:AB:E4:01:A9:48:88:E6:83:57:E2:95:C1:3D:01:39
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GMVy7V2r5AGpSIjmg1filcE9ATk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.105.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c1:16:a2:b8:bb:b9:b0:d5:00:85:a0:a9:cd:ec:32:7b:3e:
88:6f:56:5a:44:59:64:0c:07:f6:29:7e:af:87:28:09:b0:b0:
62:d3:fe:21:70:f8:82:38:95:29:78:29:00:22:fe:1a:ae:a4:
63:d5:9f:16:95:40:a2:aa:d8:50:28:9e:2d:db:35:4e:94:7d:
a6:7a:93:a9:9a:3b:50:63:1c:e0:86:cf:7e:f1:85:ce:b2:da:
9f:37:da:26:a2:09:c1:69:29:cb:a6:6b:cc:a9:ff:1e:3d:b8:
92:9d:bb:5a:cd:dd:e2:a9:a9:21:26:3a:02:12:f7:fe:fd:92:
fd:4c:05:d6:3e:37:0a:db:b0:ff:2c:f0:c9:3a:31:43:1e:40:
28:ac:94:db:74:36:83:19:f5:19:67:43:c1:d0:63:51:66:54:
52:19:5d:c2:58:0d:bc:0a:63:ad:1a:94:78:26:f8:e0:73:69:
e2:ee:e6:e3:36:fd:8d:e3:d3:75:da:f3:f8:ab:db:16:cc:22:
3e:20:40:19:0b:f1:d3:ad:67:15:04:b6:fb:32:7a:f7:0d:f3:
7a:88:18:7c:4c:96:11:d8:f3:eb:52:41:cb:38:6e:de:4c:01:
ad:4f:c1:2e:f3:86:f6:db:33:06:12:37:20:84:ae:9c:68:ee:
0e:d5:11:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org