Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/Gbl1TnurAj9trUwYdeHxm5iQUWA.roa
File: Gbl1TnurAj9trUwYdeHxm5iQUWA.roa (raw, json)
Hash identifier: AIpTt/HZiIzqqEI1V+M+mdhv9ZTzxHVTMFCGl6v27vo=
Subject key identifier: 19:B9:75:4E:7B:AB:02:3F:6D:AD:4C:18:75:E1:F1:9B:98:90:51:60
Certificate issuer: /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial: 019121F058B8DF00AB604B99DA0D89794BC5
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/Gbl1TnurAj9trUwYdeHxm5iQUWA.roa
Signing time: Mon 05 Aug 2024 09:48:05 +0000
ROA not before: Mon 05 Aug 2024 09:48:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 185.118.242.0/24 maxlen: 24
194.150.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 10:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:f0:58:b8:df:00:ab:60:4b:99:da:0d:89:79:4b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Validity
Not Before: Aug 5 09:48:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19b9754e7bab023f6dad4c1875e1f19b98905160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:b9:32:2a:e2:36:f7:e6:37:2f:26:df:04:
17:56:90:5f:d2:a0:c8:df:30:5b:5a:40:dc:92:26:
1e:88:0b:ea:c7:3f:c6:74:84:af:03:c8:3a:41:70:
5d:3e:d6:24:18:b9:d5:aa:98:bc:34:18:12:e7:92:
fa:48:4c:b9:5f:a5:b2:6e:de:22:65:86:e0:ac:86:
58:48:6e:d0:33:fb:f2:47:90:b7:90:49:99:83:71:
68:9e:99:6d:ca:af:2b:0a:7b:32:01:d8:0f:c2:52:
1e:01:4c:97:53:65:01:d9:47:87:4e:8d:12:8b:02:
e8:95:54:89:c6:ab:6e:28:1b:f2:3f:02:8d:fb:31:
ed:c5:d9:df:5c:58:e8:22:0b:90:7f:81:32:a8:18:
56:17:95:9d:13:48:71:a3:e5:c6:73:6e:bb:6a:1d:
7b:f0:5b:7b:ec:ff:94:72:02:5d:3d:2e:0c:05:05:
3a:6d:5f:0b:e7:33:e6:97:e7:32:3f:8f:76:aa:1f:
79:1e:5b:fe:3d:61:f5:fb:29:30:3d:ea:65:90:96:
2c:20:83:82:a3:37:b5:9b:b1:b3:90:b0:60:84:ef:
0a:dd:d2:68:ee:bc:69:68:89:ce:e2:c4:d1:fd:7e:
7b:64:43:dc:9a:97:eb:9c:42:55:37:e5:e8:2a:cc:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B9:75:4E:7B:AB:02:3F:6D:AD:4C:18:75:E1:F1:9B:98:90:51:60
X509v3 Authority Key Identifier:
keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/Gbl1TnurAj9trUwYdeHxm5iQUWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.242.0/24
194.150.119.0/24
Signature Algorithm: sha256WithRSAEncryption
59:00:78:e7:dc:c4:94:3b:61:d0:b1:5c:1f:12:ae:61:02:3a:
07:30:07:86:2d:5b:fa:41:44:32:33:61:b6:d4:ca:7c:89:70:
f3:4a:0a:77:a3:c9:de:db:f0:db:65:ed:ce:9a:85:3c:b6:7e:
44:ee:98:93:1e:44:37:82:cb:5b:8f:5b:42:dc:7b:0c:7c:7d:
8c:fd:ce:89:cb:a5:90:d3:c6:3f:66:e0:b3:9a:49:89:bf:88:
8c:b6:0c:db:5c:7d:b2:02:10:d8:f9:26:12:85:46:52:1b:6e:
d0:0e:b4:a5:f2:5e:ce:1a:bc:07:55:72:e8:32:68:e6:9f:9e:
27:f2:11:be:c2:84:e6:7e:db:cc:6d:9d:a2:27:26:63:90:c9:
95:28:a3:6d:61:6a:2e:e5:89:12:51:c3:57:0e:96:89:74:ad:
fb:94:a5:b9:15:20:01:d1:55:95:0d:72:9a:0b:59:73:e0:9b:
9d:1c:a4:0b:79:e1:f3:c7:ef:a0:60:7b:ad:97:fa:58:3e:07:
21:90:e9:7f:60:0d:c9:41:26:70:27:71:0b:45:dd:97:b3:4c:
05:04:71:89:35:ab:f6:85:a7:7c:cd:b4:fa:0e:10:c5:7b:e2:
0c:8f:8f:26:76:9c:f7:c7:43:4a:63:b0:65:7e:db:e0:0f:ab:
11:e3:8c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 12:52:55 2024 by rpki-client on console-ams.rpki-client.org