Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GUSdzOxXkvm-LsUiXh-XxcGZzkU.roa
File: GUSdzOxXkvm-LsUiXh-XxcGZzkU.roa (raw, json)
Hash identifier: pd5nWuXKVX+P1tL/Fj82YoFFg3W3wvB87of4OjSm2CU=
Subject key identifier: 19:44:9D:CC:EC:57:92:F9:BE:2E:C5:22:5E:1F:97:C5:C1:99:CE:45
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189E44474FAF07364E5FEF3D7990ADA0A37
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GUSdzOxXkvm-LsUiXh-XxcGZzkU.roa
Signing time: Fri 11 Aug 2023 11:03:58 +0000
ROA not before: Fri 11 Aug 2023 11:03:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 185.210.233.0/24 maxlen: 24
185.210.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Sep 2023 00:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:44:74:fa:f0:73:64:e5:fe:f3:d7:99:0a:da:0a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 11 11:03:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19449dccec5792f9be2ec5225e1f97c5c199ce45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:5e:d9:c5:a1:ef:71:0c:4a:09:70:4a:e9:
e8:65:35:7d:a4:45:ee:e4:db:96:26:ff:21:16:88:
4e:ea:8a:74:51:20:34:23:1c:ea:5a:83:2c:44:2e:
ab:89:3e:89:15:ed:ca:e3:0b:53:93:ba:84:23:0b:
9a:38:f7:4a:7b:7f:c1:84:14:f4:42:26:31:bf:8b:
9d:25:e9:25:2a:ed:de:da:90:e5:76:4b:72:83:d9:
84:37:f0:0b:f9:4c:ce:89:4a:e3:e4:73:63:47:01:
43:97:63:4c:03:e4:e6:0d:97:0e:3a:95:4c:22:43:
bb:6d:b7:d2:ab:ce:8f:67:bb:18:52:b3:f4:86:3d:
81:43:72:30:60:80:5d:2c:42:b9:56:f0:0c:7b:f7:
ad:bb:7d:48:3e:6f:d0:53:f4:c3:df:01:50:9a:b6:
56:ca:5f:d9:6a:c4:ac:6b:5e:fe:13:43:80:83:26:
d6:88:97:64:ec:0e:12:35:ff:af:2c:d5:89:d1:6a:
ea:8f:22:da:95:72:fc:66:f4:f1:39:9c:8d:ec:a4:
08:19:24:04:ef:7b:32:21:ca:15:3f:8f:27:01:83:
82:56:6b:00:92:ac:33:fd:7d:d1:d7:42:c0:d4:8e:
2f:a8:27:1a:a3:6b:b1:a3:b4:78:a7:6f:84:ad:00:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:44:9D:CC:EC:57:92:F9:BE:2E:C5:22:5E:1F:97:C5:C1:99:CE:45
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GUSdzOxXkvm-LsUiXh-XxcGZzkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.233.0-185.210.234.255
Signature Algorithm: sha256WithRSAEncryption
95:f7:ea:07:4a:75:6f:03:ea:ab:54:e1:1b:8d:4f:07:d1:9a:
ef:d3:a4:92:13:b7:f6:86:7a:e4:bf:cd:0e:e6:7b:28:bc:57:
70:de:ed:40:fc:00:5d:10:2c:bd:0c:1e:ff:84:fd:56:44:0d:
8c:b8:0d:c1:41:ca:8c:ae:9b:ee:60:c5:f7:54:23:da:b9:f6:
eb:47:cd:d6:ce:68:13:b9:24:1f:e5:f8:73:d5:44:72:0a:2d:
a4:8b:94:0c:99:a1:72:99:95:40:9f:5e:f1:e2:94:6c:29:0b:
6c:f8:3e:2b:26:df:73:36:4b:12:d2:63:7f:f2:ec:3a:d1:8a:
b7:cc:36:60:38:b1:18:ab:63:15:d6:3c:4f:c4:f4:b3:ab:91:
7e:19:fa:c2:ec:12:27:b1:cc:b6:20:92:99:eb:bb:85:e3:d7:
08:0f:b5:2d:7f:79:c6:d5:63:ac:14:63:72:a5:b9:a0:d4:ce:
19:f0:8c:86:fd:4e:bc:2c:b4:84:09:22:6b:2f:7f:a6:f0:fd:
d1:c9:13:da:e9:0d:01:48:7b:f6:6a:12:92:34:ce:88:a3:3f:
64:e9:cc:4f:25:14:b8:3d:f3:9d:18:9f:2c:da:8d:dd:e5:ed:
fb:3f:39:d5:8f:56:85:46:1f:76:54:e1:7f:de:22:ff:5a:6d:
a4:b4:a2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org