Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/cg6K_GuReVanbuRxSj2YGD19-RQ.roa
File: cg6K_GuReVanbuRxSj2YGD19-RQ.roa (raw, json)
Hash identifier: LxexpAbEixFBPZT62oRFcySzX45VppPfNW25dpz0B58=
Subject key identifier: 72:0E:8A:FC:6B:91:79:56:A7:6E:E4:71:4A:3D:98:18:3D:7D:F9:14
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CDAF3EFC747E963503A55C51BC0E3EA43
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/cg6K_GuReVanbuRxSj2YGD19-RQ.roa
Signing time: Fri 05 Jan 2024 18:47:48 +0000
ROA not before: Fri 05 Jan 2024 18:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.222.30.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 18:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:da:f3:ef:c7:47:e9:63:50:3a:55:c5:1b:c0:e3:ea:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 5 18:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=720e8afc6b917956a76ee4714a3d98183d7df914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c6:f3:4e:93:83:38:76:c4:8c:ab:e6:29:d3:
45:fd:00:79:6b:bd:04:28:40:5d:cd:a6:ff:ce:8f:
a5:f3:dd:57:0b:8e:0c:e3:05:f6:d4:d6:de:b9:7b:
cb:4b:4b:5b:1f:d8:2a:35:bd:35:2e:1f:9b:9a:54:
3e:59:91:20:ad:d1:33:9e:66:4b:0e:42:56:47:bf:
47:1b:30:3e:6c:05:21:db:b7:38:05:4d:72:55:85:
d9:e9:a1:96:4e:9a:70:f7:d4:bb:be:0d:8f:95:ae:
cd:66:80:f7:6a:33:01:34:7c:cc:c8:12:c6:3c:8f:
5c:f4:2f:0c:61:f3:b8:65:6b:7c:a5:9c:9d:35:4a:
93:62:f8:2b:0b:e9:41:2b:e5:ac:de:51:e8:df:49:
c5:20:d1:96:d6:0b:c2:9e:ea:c6:d6:97:d4:74:96:
9e:75:a1:24:b4:12:75:4c:a6:4f:a2:da:22:45:d3:
af:ef:7f:71:31:d6:f2:61:33:f5:96:d9:3f:c0:c7:
3d:8e:46:e7:14:d2:58:aa:e6:02:57:04:ec:cb:af:
1e:c7:45:39:d5:e7:d1:f1:3d:2d:15:a2:1f:d5:23:
8a:51:f5:78:88:31:4c:b2:99:55:92:cf:27:b7:42:
2a:9f:96:3e:3d:5c:e2:94:2b:37:71:2e:7b:7c:18:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0E:8A:FC:6B:91:79:56:A7:6E:E4:71:4A:3D:98:18:3D:7D:F9:14
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/cg6K_GuReVanbuRxSj2YGD19-RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.224.0/24
185.222.30.0/24
194.5.67.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:fb:ba:6f:95:13:49:cc:35:25:74:9e:84:e1:a8:cc:78:e0:
8c:37:e7:3e:40:b6:bb:aa:89:a7:8c:75:47:34:57:b5:a1:1c:
4b:ec:c9:50:66:5c:35:4f:b6:cf:53:0e:a7:cc:d3:49:67:88:
40:5e:12:a2:14:20:08:95:92:67:c0:62:41:95:63:af:fc:d3:
ac:8e:c1:9d:dd:b8:03:05:14:3a:36:1c:c5:8f:65:cf:e1:43:
40:3c:12:95:37:35:60:00:f6:17:72:9d:78:7f:12:d5:37:c9:
ed:a7:ea:eb:15:a5:96:d1:f3:b7:b5:c8:bc:f0:c9:e4:4f:91:
40:34:53:b9:bc:bc:cb:8f:05:76:30:b9:5d:92:2c:ac:3e:5c:
0b:c0:84:3b:eb:f0:00:a0:22:44:d0:a6:e3:68:b7:8f:66:fb:
1a:15:4e:6c:93:5b:8a:8e:50:31:f1:c3:58:b6:8f:2b:7c:c3:
ff:2e:26:7f:40:4c:0f:a0:d3:a8:a3:1e:d1:a6:97:a4:12:a2:
f1:76:39:e4:1d:82:ba:4d:96:a8:ef:28:0b:37:69:7d:e2:68:
6c:c8:32:b5:b7:47:20:d7:39:e4:0e:55:ad:40:28:12:c4:e8:
f3:4c:fb:ca:e0:a7:dc:c0:ce:c0:ef:8b:02:a5:33:01:d9:04:
43:46:36:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org