Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/GCpsMwpeGL4TPx6dqt7-VEvbeqg.roa
File: GCpsMwpeGL4TPx6dqt7-VEvbeqg.roa (raw, json)
Hash identifier: 3gg8XW9i2E1eka87GDA74w+9Gpn4egAcESjdEOdSX4I=
Subject key identifier: 18:2A:6C:33:0A:5E:18:BE:13:3F:1E:9D:AA:DE:FE:54:4B:DB:7A:A8
Certificate issuer: /CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Certificate serial: 01891FE99AE79C6161ED2B21C7D35E21FB93
Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/GCpsMwpeGL4TPx6dqt7-VEvbeqg.roa
Signing time: Tue 04 Jul 2023 07:59:10 +0000
ROA not before: Tue 04 Jul 2023 07:59:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199967
IP address blocks: 185.230.229.0/24 maxlen: 24
185.230.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jul 2023 14:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1f:e9:9a:e7:9c:61:61:ed:2b:21:c7:d3:5e:21:fb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Validity
Not Before: Jul 4 07:59:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=182a6c330a5e18be133f1e9daadefe544bdb7aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:52:66:78:69:8d:74:55:ca:42:6a:c9:12:
95:d9:23:ec:19:1e:6b:bd:74:ed:79:ac:10:5e:eb:
f7:56:ed:34:68:5d:b9:ca:6b:91:51:15:d0:0c:58:
9c:37:ad:b3:54:cf:37:5a:d0:ea:3a:12:2e:25:40:
e0:4d:61:8c:00:e2:e6:db:ad:8c:30:43:66:ae:9b:
50:32:e0:b9:b4:8c:be:8d:b2:b4:bd:80:bc:17:af:
39:5d:a4:ba:b0:cb:4a:8a:0a:cf:21:32:d6:53:df:
9e:55:0e:c4:65:35:3e:b6:ee:0e:83:58:81:3e:e0:
31:c7:81:8e:7c:a7:86:ca:bc:20:2d:38:b1:7e:e5:
aa:66:48:ab:6b:13:61:08:12:d0:70:75:00:1e:bc:
dd:60:5f:e9:9c:96:12:99:1d:68:06:e7:08:8a:5a:
46:71:af:43:bc:48:65:ab:7b:cb:ff:c7:1c:ad:8d:
08:41:bf:89:f8:8c:95:bc:27:72:ea:61:58:82:bd:
85:e9:f6:4f:ad:82:14:c5:66:57:e2:d2:7b:0b:be:
72:d2:36:db:c3:22:0f:c9:b1:30:04:bf:38:df:00:
a3:7a:8f:a7:6e:d9:de:a3:83:d6:ef:43:ab:b3:13:
fe:36:76:81:19:56:b5:db:78:4b:0d:7a:63:90:bf:
a2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2A:6C:33:0A:5E:18:BE:13:3F:1E:9D:AA:DE:FE:54:4B:DB:7A:A8
X509v3 Authority Key Identifier:
keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/GCpsMwpeGL4TPx6dqt7-VEvbeqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.228.0/23
Signature Algorithm: sha256WithRSAEncryption
94:42:52:89:b5:71:c0:4c:07:be:a5:6f:cd:ab:bc:93:b0:2e:
4a:3d:9a:de:b9:01:34:db:bc:47:5a:ac:11:cb:f7:49:be:c2:
22:30:2b:10:85:13:8f:cb:59:64:0c:a0:50:e7:03:23:29:47:
17:cd:6f:c9:06:fa:5f:b3:97:c5:58:77:a5:15:1e:79:61:d8:
fe:fe:7f:64:ec:99:20:5a:dd:c1:ad:97:94:0f:ff:e7:b4:78:
cb:f9:3d:a3:1a:55:73:32:3d:73:84:53:c1:54:4c:5a:df:4b:
6e:50:65:d5:ea:43:0a:58:01:ed:1b:4a:57:71:0b:e0:73:7c:
dc:ea:e2:6e:87:5c:69:2f:1c:7c:c3:13:02:72:69:60:3c:35:
25:b7:0b:95:e4:a9:cf:56:78:51:3f:cc:b5:e9:18:f6:22:80:
4d:94:7c:e3:1c:f9:4c:c7:2c:06:8b:72:1c:1b:86:92:4d:9d:
87:fc:f6:a1:b3:f6:ad:1a:8b:ac:c3:84:7d:13:90:24:b2:50:
ea:48:2f:8e:fb:65:df:c8:47:ba:7a:f9:b6:68:81:98:ce:91:
22:5f:bd:3c:77:88:fd:2d:f5:b7:d8:8a:60:03:10:9b:2e:9e:
01:fb:0a:07:a7:91:da:cd:4c:f8:b6:b3:32:47:3a:02:a6:ea:
15:30:d6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:24 2024 by rpki-client on console-fra.rpki-client.org