Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/GP2KT1vhpk1EQu03Dx19VfvIvCY.roa
File: GP2KT1vhpk1EQu03Dx19VfvIvCY.roa (raw, json)
Hash identifier: Okw0iz9o64DW6/mAKW8ydd1+GayL5I6dbIRz75kPUTY=
Subject key identifier: 18:FD:8A:4F:5B:E1:A6:4D:44:42:ED:37:0F:1D:7D:55:FB:C8:BC:26
Certificate issuer: /CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
Certificate serial: 018A79939F49F2C27DC2E481179B67F95711
Authority key identifier: BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/GP2KT1vhpk1EQu03Dx19VfvIvCY.roa
Signing time: Sat 09 Sep 2023 10:53:52 +0000
ROA not before: Sat 09 Sep 2023 10:53:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 185.245.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 09 Sep 2023 11:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:79:93:9f:49:f2:c2:7d:c2:e4:81:17:9b:67:f9:57:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
Validity
Not Before: Sep 9 10:53:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18fd8a4f5be1a64d4442ed370f1d7d55fbc8bc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:c7:3a:d6:ac:be:7f:b0:83:ea:05:d0:2c:
b1:a6:2f:7a:91:3a:28:93:b8:8e:a0:8d:09:ce:5d:
51:a5:95:b3:64:92:3a:39:91:6a:33:d1:8d:3f:a6:
6b:84:19:f5:97:f1:b0:4a:25:e8:07:4b:5f:a8:cb:
03:14:77:34:72:3e:ea:f9:13:de:86:63:dd:30:d5:
24:5d:29:5d:0f:57:64:19:d8:b8:fe:2c:00:0a:4e:
48:bc:b3:df:54:a6:f9:27:5b:f6:4a:18:76:27:0b:
c3:24:93:2e:98:04:c9:f1:3a:70:ae:8b:9d:1e:d8:
00:4a:eb:67:81:cd:ef:26:a2:a5:4c:f6:0f:6e:09:
6d:ff:94:cb:e5:cf:d2:f0:ca:da:91:b7:fa:21:c4:
12:f5:fd:16:47:dc:e2:4a:09:18:37:7a:00:3a:3b:
b0:39:4d:68:5c:ee:3e:51:34:4f:80:00:49:00:ce:
b9:41:a6:eb:fe:a0:e2:32:fc:34:8a:21:56:d8:d2:
7a:c1:22:bb:a8:cd:2f:86:59:e7:1a:58:74:45:2c:
dc:a6:8b:23:8f:f9:02:3f:1f:94:df:17:37:51:88:
9a:45:b1:f1:98:b0:a0:f0:b0:c3:03:c3:64:83:68:
a5:82:3c:b7:51:d1:ab:8a:a9:2d:e1:bd:40:b6:96:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FD:8A:4F:5B:E1:A6:4D:44:42:ED:37:0F:1D:7D:55:FB:C8:BC:26
X509v3 Authority Key Identifier:
keyid:BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/GP2KT1vhpk1EQu03Dx19VfvIvCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.124.0/22
Signature Algorithm: sha256WithRSAEncryption
96:8a:d7:8b:07:85:5b:34:7a:60:81:47:24:99:83:52:96:5e:
34:aa:75:ba:e1:e1:04:5f:71:f6:51:4c:40:8a:7f:cf:c6:dd:
2f:f6:2b:8c:0f:09:bf:27:c8:2d:1e:d1:a8:22:a4:c9:16:1a:
70:b3:a8:2d:24:c8:f5:da:5c:9e:1f:0c:cf:8b:25:d6:62:2a:
84:c7:cc:58:3f:ed:c9:76:06:67:1d:99:5a:bc:1c:c3:e0:46:
ec:dc:07:ab:1c:d9:8e:56:29:33:2d:2a:ea:d5:96:cd:9b:1d:
88:32:96:14:41:1c:4d:79:94:d3:f2:f0:af:67:82:f2:bd:63:
35:cb:6b:81:ae:50:ae:7b:75:c6:5e:6e:1a:0a:f4:9c:fd:8d:
07:c9:57:d6:d1:d5:8b:d8:d9:c9:7d:30:4f:09:5d:c0:76:38:
85:78:2f:9d:f1:83:33:a0:9e:45:0a:a8:bf:e4:5d:30:dd:26:
e1:7e:c3:86:df:b1:5b:d1:2b:10:f8:78:56:72:82:e2:1a:84:
c9:fb:a4:e7:31:d5:51:c3:c1:23:53:e1:2c:57:8a:a1:3f:bd:
21:fc:95:bb:9a:b6:0b:92:f0:60:8e:03:07:85:1a:46:43:49:
cd:45:d3:30:eb:67:c5:40:ad:32:f0:ca:49:f7:1e:5b:93:19:
d3:d8:fd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:52 2024 by rpki-client on console-fra.rpki-client.org