Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GWYTjWS71E0iBjAWrQruoWzV2WQ.roa
File: GWYTjWS71E0iBjAWrQruoWzV2WQ.roa (raw, json)
Hash identifier: uOQUIgXBW0f/Vokrii4xzl51WqN5ombYPLWFW2OZf5s=
Subject key identifier: 19:66:13:8D:64:BB:D4:4D:22:06:30:16:AD:0A:EE:A1:6C:D5:D9:64
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A02BEFDAD085834675732814AB138451F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GWYTjWS71E0iBjAWrQruoWzV2WQ.roa
Signing time: Thu 17 Aug 2023 09:06:25 +0000
ROA not before: Thu 17 Aug 2023 09:06:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197071
IP address blocks: 185.221.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Aug 2023 12:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:02:be:fd:ad:08:58:34:67:57:32:81:4a:b1:38:45:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 17 09:06:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1966138d64bbd44d22063016ad0aeea16cd5d964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:fa:2a:8d:1d:93:82:27:33:86:78:fe:e7:
aa:1e:b5:55:92:90:95:94:8d:be:36:0d:e1:ca:c4:
f1:85:9f:b3:14:ab:91:a0:ab:3c:33:c0:c7:69:0d:
4f:e2:9f:cc:a2:96:31:60:2e:f6:79:a5:d9:dc:42:
47:98:fe:29:96:e8:35:7b:26:61:e5:c7:f4:ce:31:
8f:96:fe:9f:73:b0:fe:5f:38:17:fe:0d:83:63:f3:
cf:5b:83:08:34:98:5d:1b:c2:87:1f:a5:38:b3:5f:
75:aa:24:3a:4c:f8:d7:d7:b7:d1:e5:04:6b:9d:40:
b7:81:30:03:76:10:a9:60:77:3f:ac:9b:23:6c:d2:
92:25:60:6b:8b:1e:49:10:3a:82:cd:9a:7c:eb:51:
62:f7:7a:be:40:b7:e1:6a:73:6c:8f:c5:ad:6c:1c:
5e:b3:d8:99:16:2d:62:6a:6c:ad:ac:a5:01:a4:fe:
83:ec:2a:f8:9d:f9:4f:49:24:5f:71:58:a8:a1:be:
e9:76:ec:0d:21:a4:d2:fd:47:d6:b1:40:b3:b2:92:
ec:16:1f:c5:59:38:22:da:33:00:4c:dc:c3:a7:2d:
92:0e:e3:cb:17:bd:94:b4:b6:f2:46:80:89:12:c9:
27:9e:b8:24:ea:b7:eb:4d:92:8f:43:31:b4:50:35:
e5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:66:13:8D:64:BB:D4:4D:22:06:30:16:AD:0A:EE:A1:6C:D5:D9:64
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GWYTjWS71E0iBjAWrQruoWzV2WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.21.0/24
Signature Algorithm: sha256WithRSAEncryption
31:eb:15:b4:0b:37:85:30:02:6f:31:01:8d:c4:5c:f5:14:ad:
d6:a6:c0:9e:b9:3f:34:fc:f2:76:c3:eb:e7:b1:9d:c2:91:62:
24:65:88:70:b7:bc:04:5c:b0:c0:c2:24:05:b3:f4:14:cc:14:
3a:c2:f6:ff:b5:1b:2f:b5:55:bf:34:85:c6:f7:56:8c:12:e0:
59:56:7b:1c:b9:7b:79:de:60:db:94:86:2d:fa:cd:8e:57:a6:
04:ae:d5:67:0c:58:2a:94:5b:3b:4d:74:06:1f:30:b9:d3:a3:
0c:76:ec:a3:bc:78:29:7d:a3:13:e9:aa:62:99:55:0d:c3:c5:
44:df:a0:b7:4d:b9:83:b1:71:ca:3b:69:3b:a3:af:ce:ce:68:
b2:59:1c:32:c5:b7:cd:57:73:32:32:82:54:1c:c4:e7:b3:15:
35:e7:07:75:9d:7e:97:ff:1a:c1:f1:4d:14:47:d0:61:c7:97:
3f:b3:a3:e6:2c:89:55:ed:46:df:c4:21:db:be:ab:0b:12:0b:
59:65:4f:84:3e:89:70:af:ce:6c:38:e5:79:58:01:53:55:84:
a5:80:1d:1e:3c:00:bc:ac:c5:e1:2c:fc:a3:9c:39:c5:8f:d4:
e9:72:be:37:b3:ca:72:12:75:6c:f9:42:3c:f6:90:f4:cc:18:
c2:ae:68:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org