Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_gc223sEN_aQeWYXCsOaL1pPtQY.roa
File: _gc223sEN_aQeWYXCsOaL1pPtQY.roa (raw, json)
Hash identifier: jd4Jr1R4Dl8AIqa/1CRZFRO8I5GzZ84U4XJX1pwg830=
Subject key identifier: FE:07:36:DB:7B:04:37:F6:90:79:66:17:0A:C3:9A:2F:5A:4F:B5:06
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A2C72F34FF50C5E44290FAFB06802D835
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_gc223sEN_aQeWYXCsOaL1pPtQY.roa
Signing time: Fri 25 Aug 2023 11:27:25 +0000
ROA not before: Fri 25 Aug 2023 11:27:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32159
IP address blocks: 185.227.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:72:f3:4f:f5:0c:5e:44:29:0f:af:b0:68:02:d8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 25 11:27:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe0736db7b0437f6907966170ac39a2f5a4fb506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ea:11:a3:91:b1:55:80:63:1b:cb:0f:c4:2b:
ca:ef:2a:2f:d3:6b:60:d6:49:4a:fb:8f:a2:e9:84:
20:50:eb:67:4c:da:a4:d2:85:f7:71:bd:ed:00:35:
63:04:08:02:6b:ac:e2:e5:32:64:cd:64:6f:b9:80:
bb:fb:01:65:a7:10:c7:4e:6b:2b:79:49:da:18:db:
fe:8f:a2:fd:6f:ee:b4:14:83:0f:14:c6:7c:96:06:
04:c5:c7:9e:b8:74:db:6d:92:32:81:22:04:42:6a:
da:db:57:80:f2:c6:ad:e6:93:e9:5b:80:e7:f1:d1:
7d:d4:18:58:af:10:74:51:52:04:41:3a:1e:b7:fa:
ba:b6:72:d2:b0:5e:cc:81:15:db:f1:0a:57:83:b1:
4a:32:fb:20:28:30:59:1c:55:de:fb:7d:11:9d:77:
d0:84:c5:94:2c:71:ab:fc:f4:2a:a7:8d:69:a8:a9:
0f:5c:7d:29:ab:bc:d7:56:ac:e1:1b:2b:34:f7:92:
ca:47:08:3d:bc:28:a0:2f:99:9a:51:37:b4:67:9f:
31:9c:d2:f0:64:c5:1f:76:75:1a:b0:a7:1b:e7:dc:
c0:4c:8e:5e:23:ee:0c:7b:8f:dc:4e:07:c4:11:aa:
ea:1f:99:e1:79:f0:e9:d2:e8:72:93:06:e4:d0:fb:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:07:36:DB:7B:04:37:F6:90:79:66:17:0A:C3:9A:2F:5A:4F:B5:06
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_gc223sEN_aQeWYXCsOaL1pPtQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.144.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:c8:40:13:26:03:b1:14:14:bc:2d:05:09:3f:2c:51:8a:c6:
cb:09:ff:ae:4b:5d:ab:c4:82:7e:bd:76:17:6e:43:ef:04:5e:
53:56:fe:5c:18:27:85:a3:d3:a1:19:79:30:49:00:cd:4a:f7:
95:83:b2:58:ed:91:52:51:03:1b:15:28:fd:b9:38:3f:36:32:
7a:ff:b6:e9:ef:2a:0e:6a:52:f4:d7:ee:15:b2:24:b7:9a:ee:
81:10:49:81:2e:42:80:28:40:e2:56:06:3b:3b:02:32:21:a6:
bd:d9:91:70:88:80:82:41:0d:22:63:20:47:f2:03:16:92:32:
1b:3d:13:f9:72:1d:e6:b2:6c:57:2c:0f:a0:3f:5b:f6:62:72:
f2:d5:22:df:c7:ef:7a:bb:44:e8:07:6d:cb:91:3f:93:b5:1f:
40:9e:52:b2:46:60:c6:64:c6:b8:80:6b:6d:97:dc:36:09:24:
4f:16:07:09:d7:aa:32:ee:c1:bd:3d:a1:c9:42:de:fa:90:a2:
c6:54:43:a3:ba:f7:e1:9e:9e:d8:c4:0a:75:f1:8b:74:25:d7:
cd:cf:95:a6:92:e0:4e:f0:ac:41:2b:d0:f8:93:df:7f:d4:83:
aa:41:cd:a0:c6:e4:43:c3:92:96:71:6b:4b:7c:a5:b6:37:20:
43:fd:cb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org