Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GsFluRpJ7LuqXK4QHYxkGUe1c_8.roa
File: GsFluRpJ7LuqXK4QHYxkGUe1c_8.roa (raw, json)
Hash identifier: dyZFj1vkqCTXUWJDkiPdr0v7jCn8R116TsKvhl+jbpo=
Subject key identifier: 1A:C1:65:B9:1A:49:EC:BB:AA:5C:AE:10:1D:8C:64:19:47:B5:73:FF
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0186E0553A7B682955FFCD6A253A189A8F01
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GsFluRpJ7LuqXK4QHYxkGUe1c_8.roa
Signing time: Tue 14 Mar 2023 13:35:27 +0000
ROA not before: Tue 14 Mar 2023 13:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29066
IP address blocks: 185.255.125.0/24 maxlen: 24
185.255.126.0/24 maxlen: 24
185.194.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Nov 2023 10:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:55:3a:7b:68:29:55:ff:cd:6a:25:3a:18:9a:8f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 14 13:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ac165b91a49ecbbaa5cae101d8c641947b573ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:79:13:2e:ff:2c:61:56:2a:00:8e:84:3c:b9:
e1:08:96:a6:06:26:32:c9:69:17:f8:e7:70:4a:7a:
7a:26:10:1d:29:1e:47:f1:8e:b0:81:3a:9f:a6:18:
c1:60:35:00:ac:bc:01:65:10:e2:1a:c0:0d:85:45:
0b:63:24:68:c6:4f:95:2c:db:c4:fd:56:b5:df:51:
f7:16:85:87:11:f6:24:6c:07:ad:4b:6c:7c:6f:f7:
e0:89:0b:f6:f5:10:37:35:1e:e0:52:5d:f3:c1:0f:
0b:b4:41:36:4e:91:90:2c:cf:17:cf:8b:ff:e8:86:
5a:a8:3d:34:72:4a:80:06:5d:67:75:e0:25:49:cb:
32:1f:42:af:1a:0f:2a:50:19:9b:1a:f2:a3:f1:43:
cd:af:2b:4b:01:bc:ba:83:74:cd:54:8c:df:33:6b:
4b:0d:a3:e7:63:69:21:74:98:14:5f:b6:56:9b:f4:
0b:17:89:c5:a7:23:a2:a6:11:1b:85:dd:77:74:ef:
f9:79:bc:2d:65:cd:d0:25:d3:f4:31:eb:b9:d8:b2:
e7:f5:4e:c8:8e:ff:72:08:11:1d:06:d3:d2:25:fa:
68:91:ea:82:8a:49:1f:14:51:52:42:28:ba:c7:5a:
ca:1f:73:15:f0:50:6e:9a:23:a6:c0:b5:24:ff:79:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C1:65:B9:1A:49:EC:BB:AA:5C:AE:10:1D:8C:64:19:47:B5:73:FF
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GsFluRpJ7LuqXK4QHYxkGUe1c_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.178.0/24
185.255.125.0-185.255.126.255
Signature Algorithm: sha256WithRSAEncryption
6f:e4:c9:de:2d:7d:03:ca:14:c4:96:7d:8f:eb:bd:1b:3d:13:
46:66:75:a9:07:63:be:28:85:4c:34:11:ef:9e:82:41:1d:48:
5f:6d:08:47:9f:8d:94:35:83:e9:b7:fa:79:fe:6b:c4:80:d1:
aa:89:01:2f:ff:36:45:b9:78:4c:c5:e7:93:17:f6:ba:28:82:
7d:13:d5:fa:dd:f9:d9:f7:16:e8:e9:ca:91:7b:31:1c:22:6e:
c3:54:20:df:f9:92:b2:ed:69:b4:b0:d1:ba:53:a8:b0:94:ee:
b9:09:e3:dd:9a:f8:a1:77:57:aa:75:59:19:5b:a8:22:99:69:
dd:05:02:59:36:e7:f2:8b:73:5a:16:17:50:b0:4b:18:82:7a:
fc:be:8f:56:42:25:9f:29:98:b6:30:df:8a:ea:1f:00:07:b2:
bf:70:43:a1:59:b7:22:6b:89:bb:77:54:e4:dc:99:c8:89:7f:
8f:af:79:a2:15:79:49:40:8b:d5:81:fa:ac:a3:6a:5e:a2:56:
90:31:25:fa:8b:44:d0:8f:ec:a1:7a:53:c4:b1:bf:91:2a:2b:
38:be:e3:72:36:c0:b4:43:9e:14:3a:b0:74:68:97:0f:19:92:
c5:58:33:06:e6:e1:5c:98:1a:ba:a8:8e:f8:64:8b:82:93:39:
9a:3d:7c:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org