Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/GBfljDKBZTs_v5EshjTpUG8Otmw.roa
File: GBfljDKBZTs_v5EshjTpUG8Otmw.roa (raw, json)
Hash identifier: zukFPrztegY2JBO8z56b3tuQ3lZO3WZA+uWl8ImO4/U=
Subject key identifier: 18:17:E5:8C:32:81:65:3B:3F:BF:91:2C:86:34:E9:50:6F:0E:B6:6C
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01856CF853540530B5304437C54502A6C4AE
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/GBfljDKBZTs_v5EshjTpUG8Otmw.roa
Signing time: Sun 01 Jan 2023 10:54:51 +0000
ROA not before: Sun 01 Jan 2023 10:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20521
IP address blocks: 82.118.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:53:54:05:30:b5:30:44:37:c5:45:02:a6:c4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 10:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1817e58c3281653b3fbf912c8634e9506f0eb66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:22:80:98:cb:b6:ef:20:35:dd:58:a9:02:a5:
58:30:83:bd:78:da:e9:d4:17:81:2d:a3:80:43:71:
a3:13:33:9a:c5:1a:5e:be:6a:57:ea:88:74:ab:9a:
f0:5d:3b:53:00:6c:18:49:38:2d:12:24:bd:b5:c6:
c1:47:9e:c3:e3:11:ee:cf:9a:32:86:7d:02:1c:c3:
1e:89:58:c5:7a:98:e2:f3:44:ef:42:7a:ca:74:d5:
45:20:b1:3f:e3:3c:3f:1c:af:a2:49:ff:52:87:88:
0e:23:ef:53:5f:c5:16:ac:7d:2d:a3:7d:00:6c:a5:
9b:a0:15:b1:c4:a5:12:f9:85:72:0c:c2:36:15:1b:
a3:c9:06:98:cf:22:65:be:ca:4c:43:09:74:7c:43:
9f:7f:eb:d9:2e:f6:ac:6e:6f:50:c7:36:99:1e:e2:
5e:24:86:cf:05:a6:14:8a:77:c5:b9:92:dc:0e:38:
75:48:c7:b4:d2:96:7b:c0:6a:f9:7e:0c:0e:4e:8d:
52:9f:56:20:cf:8d:48:a1:4b:2f:e3:80:0a:94:a4:
36:9a:a3:bd:06:9a:3a:a1:9a:54:fb:74:cd:1f:03:
d8:2b:17:cc:50:09:2a:d2:ad:22:b6:cb:68:05:e9:
58:c6:35:8e:30:8e:59:95:af:79:45:72:dd:6c:31:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:17:E5:8C:32:81:65:3B:3F:BF:91:2C:86:34:E9:50:6F:0E:B6:6C
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/GBfljDKBZTs_v5EshjTpUG8Otmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.228.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c4:82:2e:78:21:bc:e5:ba:0d:82:4b:e6:96:a5:f6:cf:25:
f9:58:0c:69:25:73:e5:bf:e9:f8:81:3f:4b:87:ee:38:a8:46:
ec:90:b6:e7:26:43:b0:ca:15:6d:35:7b:95:7c:94:8c:88:97:
4c:ec:a5:b5:b3:b5:8a:97:57:5e:07:df:01:34:0c:7a:6e:2b:
86:6f:da:89:a5:a9:da:cb:dd:9f:76:de:f6:b1:22:6a:e0:5b:
1c:2d:6c:5d:16:c0:b6:6b:28:73:14:25:34:3d:c8:ad:d9:87:
43:7c:19:3b:49:cd:d4:40:a9:71:f6:3a:e6:27:b7:fc:50:bb:
87:83:5c:c7:23:cd:5f:2d:b9:a7:ac:a5:ae:3f:3f:e6:3f:14:
71:4a:9b:af:ed:bd:c2:16:a0:fb:c2:94:b5:29:b4:27:b8:ce:
cd:65:c7:dc:4c:55:68:da:00:83:7b:c1:f8:2f:61:db:e5:77:
fd:e9:72:a3:50:9d:2d:50:57:df:78:f5:e8:73:ea:f0:52:97:
cd:21:ed:0e:ff:5e:20:78:be:77:e2:c0:48:99:66:6d:21:4c:
61:f7:b6:e2:7c:78:e9:a6:80:ac:89:e9:3c:6e:d4:ad:86:42:
f0:2d:60:f0:a3:f9:87:85:a9:61:a5:cd:c3:ce:98:55:4b:c8:
d3:73:76:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org