Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GCwEDQAVnKMslgcQSUEXcK6otVI.roa
File: GCwEDQAVnKMslgcQSUEXcK6otVI.roa (raw, json)
Hash identifier: AgUfgqMX/YoSBOHJuyX4XPfQoYicY1S9ymyf/Kk/Uos=
Subject key identifier: 18:2C:04:0D:00:15:9C:A3:2C:96:07:10:49:41:17:70:AE:A8:B5:52
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C540A1E2EB4669323A09B9ED7068636
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GCwEDQAVnKMslgcQSUEXcK6otVI.roa
Signing time: Sun 01 Jan 2023 07:55:25 +0000
ROA not before: Sun 01 Jan 2023 07:55:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201106
IP address blocks: 185.193.37.0/24 maxlen: 32
2a06:82c1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:0a:1e:2e:b4:66:93:23:a0:9b:9e:d7:06:86:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=182c040d00159ca32c96071049411770aea8b552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:02:88:0a:60:92:1d:7e:6d:49:18:17:4c:9d:
f7:4e:f2:61:1a:3e:94:2e:5e:c2:47:d8:aa:ba:ba:
4f:67:bb:ae:67:1d:52:5f:66:f1:6d:25:57:02:d1:
a6:2d:1a:3c:08:94:8d:cd:80:c3:e9:2d:64:c7:50:
cc:2e:35:be:69:20:05:96:20:41:8d:83:15:43:34:
40:56:df:3c:41:8f:06:ec:c1:94:49:e5:f6:04:c6:
7c:ff:a9:b5:23:2c:cc:1a:7f:d4:af:3f:02:5e:9b:
b7:d1:1b:d6:d6:39:d7:48:36:93:99:bf:5f:d5:bc:
72:f9:de:36:49:70:65:34:0d:fa:cc:20:e7:ef:43:
b2:03:b7:3a:13:27:14:8d:fa:34:50:de:12:40:81:
e0:35:ba:d6:69:92:2a:ed:68:9e:3f:39:dc:72:1e:
79:89:23:ff:79:22:c9:3f:61:74:d4:55:f5:9c:df:
f9:fc:28:16:96:25:de:34:a6:66:b3:5f:7b:2d:36:
27:b7:7e:46:51:9c:17:22:a8:e8:ea:7e:8b:6a:d1:
e9:39:97:17:c7:34:8c:9d:e0:38:39:83:b1:17:c1:
fc:08:e8:4d:23:50:7e:a3:dc:d7:57:43:b2:f1:b9:
d4:6a:f8:e7:71:5e:38:47:b9:ec:58:3d:fc:c1:ea:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2C:04:0D:00:15:9C:A3:2C:96:07:10:49:41:17:70:AE:A8:B5:52
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/GCwEDQAVnKMslgcQSUEXcK6otVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.37.0/24
IPv6:
2a06:82c1::/48
Signature Algorithm: sha256WithRSAEncryption
22:64:dc:7a:3f:24:f2:57:7c:9e:7e:15:5f:4d:3b:78:a6:43:
7d:ef:a4:fa:15:3f:86:55:50:be:ba:4e:74:8f:2b:be:2c:0d:
96:1b:d3:db:ce:28:cf:d0:98:cd:5b:01:b8:5e:35:19:7c:17:
77:a6:dc:f2:57:af:99:29:a3:c8:0a:af:92:1f:e4:2e:7f:ea:
c8:f6:5f:2c:5c:82:51:97:e7:ea:e5:52:48:fd:65:87:f3:bf:
dd:97:ae:57:e6:b6:6d:c0:c3:7f:f5:f3:41:a1:df:d9:a2:c9:
09:1b:fe:02:cc:1c:7e:62:be:30:27:d6:9e:7c:35:6e:b4:18:
a9:81:28:38:8e:c0:da:a2:1f:cc:9b:d8:21:dd:bc:8b:2e:0c:
e8:97:77:d5:2f:8b:93:f6:3c:7c:1a:40:e9:94:dc:79:d7:53:
30:11:8e:2b:a8:56:33:dd:44:3f:cc:20:3b:01:8b:6f:8f:6a:
67:29:06:2c:91:76:4e:3f:23:91:d8:e7:10:4e:47:2b:07:16:
c4:14:60:ee:8c:b5:96:1c:60:26:d9:ce:14:1d:38:86:cb:2d:
a0:e2:a3:69:5e:24:70:f1:f1:18:01:ef:57:89:bb:da:13:95:
33:73:a3:e3:2f:4a:12:38:46:5d:0f:e6:8f:e2:6d:20:0d:13:
62:0e:aa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:55 2024 by rpki-client on console-fra.rpki-client.org