Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gg1eyCLuSqcK0WQMAFI_TtNL7x8.roa
File: gg1eyCLuSqcK0WQMAFI_TtNL7x8.roa (raw, json)
Hash identifier: XwpDzYxEo0oRJK6kBOxYIzgkosrjAUtAA0B+qYUhHAs=
Subject key identifier: 82:0D:5E:C8:22:EE:4A:A7:0A:D1:64:0C:00:52:3F:4E:D3:4B:EF:1F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A40CA28041B65DB2F3DFF409772F8B12A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gg1eyCLuSqcK0WQMAFI_TtNL7x8.roa
Signing time: Tue 29 Aug 2023 10:15:04 +0000
ROA not before: Tue 29 Aug 2023 10:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 185.230.52.0/24 maxlen: 24
185.218.23.0/24 maxlen: 24
185.223.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Aug 2023 11:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:ca:28:04:1b:65:db:2f:3d:ff:40:97:72:f8:b1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 29 10:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=820d5ec822ee4aa70ad1640c00523f4ed34bef1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:ca:6a:50:5b:d9:7a:e5:64:a5:f2:91:f0:
ab:73:68:3c:6b:58:7c:23:f4:83:e1:4a:b5:2e:f9:
3b:6d:cc:e2:20:b7:a4:86:1a:7a:fb:04:e5:3c:08:
f9:1b:49:5e:2d:d1:46:51:37:07:d0:43:ac:b2:a3:
1a:98:5d:4f:64:ae:ff:87:6a:20:89:e3:c2:0a:58:
b5:0f:32:57:f0:fb:7c:8c:95:0e:c7:cf:81:59:af:
12:72:cc:4a:57:00:7a:f9:9d:5b:a0:fe:27:38:6d:
7a:02:3a:0a:e7:ca:57:47:e8:9b:3c:80:9d:77:0b:
af:9b:40:f1:d4:a9:00:3f:99:54:d2:a4:6c:71:f8:
30:37:4a:10:29:e8:4c:71:1c:54:c6:12:12:85:cb:
f6:ba:23:b0:d5:15:ca:50:7c:f9:2a:a6:bc:91:6c:
e9:a1:64:76:b8:5e:3c:d3:38:fc:15:5b:32:4d:6a:
78:ef:96:6d:ba:03:ef:e7:58:d1:90:4c:88:b7:da:
25:01:af:08:f7:a7:10:6b:9d:de:0b:17:bf:ca:f0:
83:91:71:f9:c6:8b:28:22:2f:ef:80:44:85:c2:1a:
ba:cf:a9:d4:d1:5f:49:07:32:65:40:68:b5:fa:db:
1a:df:39:83:d1:c5:aa:51:75:0e:d3:1e:46:89:2a:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0D:5E:C8:22:EE:4A:A7:0A:D1:64:0C:00:52:3F:4E:D3:4B:EF:1F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gg1eyCLuSqcK0WQMAFI_TtNL7x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.23.0/24
185.223.79.0/24
185.230.52.0/24
Signature Algorithm: sha256WithRSAEncryption
be:4c:57:ae:8b:92:04:e3:5d:79:0a:37:b0:d4:4f:59:60:e1:
33:a0:4d:3d:56:80:38:24:00:c1:f4:ff:5a:72:f5:24:60:ee:
cb:25:83:85:76:9d:9d:41:21:00:f9:06:e0:ec:48:16:03:3b:
5b:7e:4d:fb:e8:ee:54:a3:98:44:20:33:16:71:94:21:57:58:
3a:fc:26:7f:94:e3:49:d9:6b:39:42:45:06:2a:d9:47:0d:40:
2e:76:dc:ab:75:18:99:87:92:69:d1:b2:bc:d1:78:fe:42:77:
4a:d6:c1:1e:2d:56:d4:e6:c5:b8:13:07:d6:a8:ca:f9:34:72:
0b:aa:4f:29:59:cb:9f:c6:61:e0:ea:6f:74:f3:ec:18:be:a0:
74:bb:9d:ee:7b:37:33:31:40:d7:c2:b1:3b:27:81:79:bc:9a:
69:0d:22:69:02:a7:3e:55:13:71:9b:b6:fe:b5:9f:cc:0c:bf:
21:37:af:8c:b1:c6:45:7d:57:b8:51:a4:dc:aa:d4:78:d1:62:
06:15:44:ea:d6:6f:08:5b:9d:07:23:f8:fa:cd:e9:95:a0:97:
84:a8:a2:e3:9b:91:90:f4:c1:63:d2:de:2d:85:a5:3b:f8:d1:
26:18:ae:9f:7b:d5:c6:c4:9c:d0:d2:9a:24:55:f1:7d:c8:ff:
4d:b2:33:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org