Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/gn8Jld7CiSzBJhvNHQOjxlyl5PQ.roa
File: gn8Jld7CiSzBJhvNHQOjxlyl5PQ.roa (raw, json)
Hash identifier: 3yy/1FyBstjt31bik4P1ltxxd5tS+wX9XVX//2w4sKU=
Subject key identifier: 82:7F:09:95:DE:C2:89:2C:C1:26:1B:CD:1D:03:A3:C6:5C:A5:E4:F4
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 018CC5012623DA3D16D8348A08E3FE4DAAB5
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/gn8Jld7CiSzBJhvNHQOjxlyl5PQ.roa
Signing time: Mon 01 Jan 2024 12:30:36 +0000
ROA not before: Mon 01 Jan 2024 12:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.191.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 15:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:26:23:da:3d:16:d8:34:8a:08:e3:fe:4d:aa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Jan 1 12:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=827f0995dec2892cc1261bcd1d03a3c65ca5e4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:60:8c:72:7b:48:7a:2d:3c:f8:44:e2:96:5d:
c4:db:e7:d6:be:42:b0:bd:90:d1:b9:63:60:4a:85:
7a:b7:bc:ad:9c:a3:20:ec:d2:7d:5c:2d:ca:b2:f4:
aa:7a:d4:9f:7b:82:4d:8f:c0:f8:74:95:2e:95:a9:
1b:d6:a9:a2:c5:18:ae:37:27:83:25:e7:d8:7c:d7:
3e:c5:61:f0:e7:41:8a:a3:38:cf:b0:a7:c6:16:b0:
b6:46:ea:08:12:9c:1e:d6:d6:63:2a:09:c2:70:fe:
1e:7b:bc:40:5a:4a:ba:9e:d4:82:41:7d:e4:1e:cf:
c0:47:21:a5:7a:31:96:22:39:42:2a:70:66:25:db:
08:f5:0e:42:d3:05:d5:14:ab:95:04:00:7a:83:c2:
3c:55:56:33:23:69:ed:07:12:e5:3e:98:00:25:03:
25:10:a2:c6:ea:05:8b:3a:26:d5:9c:20:75:ac:82:
e0:ec:fd:9d:97:3e:b7:d9:80:4c:1a:87:b0:4d:b3:
ed:8d:eb:fc:bb:e7:b1:27:0d:30:cf:db:9c:8f:74:
3a:de:a7:cb:10:81:81:e1:a3:b6:e3:47:04:06:51:
f3:e8:e9:91:f6:88:54:42:5a:50:a9:e6:b7:1b:91:
de:30:49:e1:c2:84:d3:3d:d0:c8:97:72:b6:a3:7f:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7F:09:95:DE:C2:89:2C:C1:26:1B:CD:1D:03:A3:C6:5C:A5:E4:F4
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/gn8Jld7CiSzBJhvNHQOjxlyl5PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.145.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:21:0f:6f:4d:6d:e9:0b:0c:f5:f0:31:e8:20:dd:8d:27:6e:
8d:d9:d8:23:99:9c:5f:4e:23:73:47:c7:55:ed:65:dc:86:5f:
75:4d:24:fa:dd:4d:ee:98:eb:54:64:ee:ca:40:5d:c4:40:3c:
05:76:3d:a2:f1:85:3c:ce:15:a7:7a:c0:88:cf:11:75:a6:c5:
95:7a:9c:6a:fb:04:72:2b:99:f7:24:1f:1a:0f:b2:0a:98:47:
2b:e5:67:21:c4:e5:55:61:c2:1c:4a:17:05:03:a5:db:61:b7:
97:7c:00:ad:4e:a4:cf:74:84:cd:d7:9d:1b:35:f9:d3:98:67:
f0:a4:91:39:bb:7c:f1:d3:ed:60:5f:02:9a:d0:ea:3c:eb:2c:
09:1f:76:f4:f3:df:31:b5:ec:c4:ce:81:1b:ef:54:56:22:f7:
50:7c:a6:80:59:ed:fb:56:70:8e:36:46:f0:57:70:29:a0:39:
77:42:16:be:d8:19:90:f2:32:86:98:c9:2b:e2:2c:c5:3a:c8:
9c:cd:4b:a7:9d:da:29:1c:6c:64:41:fb:40:a2:36:8a:69:27:
1d:b8:60:e3:cf:2c:55:69:b3:ab:42:9c:8f:d3:29:ff:24:10:
a6:ec:20:68:a2:bc:da:8f:ec:84:16:ce:e2:2c:3e:59:5d:71:
12:f5:01:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:09 2024 by rpki-client on console-fra.rpki-client.org