Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/Ga-ttRffz91KvnquWD5-6L9nvDA.roa
File: Ga-ttRffz91KvnquWD5-6L9nvDA.roa (raw, json)
Hash identifier: sQN9EXkVFo2/bRfAi8vWeLIWFmqZO9uIY5g80PNoXR4=
Subject key identifier: 19:AF:AD:B5:17:DF:CF:DD:4A:BE:7A:AE:58:3E:7E:E8:BF:67:BC:30
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 018CEE09FB39E0751F3BDDF8F120DAF876AE
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/Ga-ttRffz91KvnquWD5-6L9nvDA.roa
Signing time: Tue 09 Jan 2024 11:44:40 +0000
ROA not before: Tue 09 Jan 2024 11:44:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.164.218.0/24 maxlen: 24
185.164.219.0/24 maxlen: 24
185.164.216.0/24 maxlen: 24
185.164.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Apr 2024 14:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:09:fb:39:e0:75:1f:3b:dd:f8:f1:20:da:f8:76:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: Jan 9 11:44:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19afadb517dfcfdd4abe7aae583e7ee8bf67bc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:af:4e:ff:7f:f3:74:31:74:69:d6:ff:8b:7a:
21:53:bf:a3:fb:0e:14:45:a4:5b:7c:f4:7b:d6:0e:
4e:f9:47:0a:b2:01:c9:59:e1:5e:43:79:ef:47:07:
43:62:e0:fe:62:7c:e7:fd:73:0d:04:dd:0f:da:a8:
2e:f5:ec:51:8d:61:4a:cb:40:a2:a1:ce:51:7b:bb:
16:a9:73:2b:32:d7:d6:8b:84:28:cf:13:23:65:ef:
f9:0b:26:52:23:b2:6e:69:db:d3:02:47:e6:72:ef:
b3:01:40:c7:6d:e3:1e:23:e3:a2:49:ae:a8:84:ef:
37:36:db:da:30:de:bb:49:27:c1:7e:8b:a9:20:96:
6c:13:58:d5:d7:b1:f2:a1:8e:43:71:d4:9e:be:fe:
6d:3c:c2:73:2a:7d:89:2d:39:f1:dd:f4:80:36:38:
cb:d3:88:36:e7:3f:84:bc:49:de:c2:46:f0:cf:84:
c9:ad:7a:03:e5:c3:66:6b:35:94:15:c0:b8:ad:a0:
4f:06:fc:79:dd:70:aa:0c:18:b0:68:5f:b6:3c:d6:
e9:f0:d5:e4:4d:8e:17:1f:e9:72:6e:74:1e:c6:79:
8e:a8:e2:36:60:50:9c:66:f6:20:7c:e1:d1:c6:90:
7c:34:09:5a:44:d4:2f:35:ec:60:0c:4b:80:55:3d:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AF:AD:B5:17:DF:CF:DD:4A:BE:7A:AE:58:3E:7E:E8:BF:67:BC:30
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/Ga-ttRffz91KvnquWD5-6L9nvDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.216.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:ef:6b:11:80:6b:bc:72:9a:26:c8:ad:ff:aa:2c:95:a8:6c:
d0:5b:82:84:1a:d9:1e:bd:84:2a:ba:f4:c1:f4:51:9a:c2:db:
54:cc:cc:a3:ab:e9:ea:0a:68:26:21:47:78:89:1a:ad:04:d9:
80:2d:c2:0a:c6:58:1a:d9:41:a2:d2:c6:a7:96:00:a7:62:6b:
cc:9b:52:0c:a9:1d:e2:fb:21:b4:c2:a4:5d:66:4d:ee:21:0a:
d6:bb:b7:2d:b6:b1:13:fa:56:27:88:51:fd:6c:d6:2b:4a:f5:
a8:26:53:52:8a:56:d9:2e:6a:90:1f:ab:36:04:34:e9:1d:3c:
bc:5d:48:61:d9:b4:ac:c3:c0:4f:ef:13:7d:cc:fc:e4:55:34:
d7:65:6b:29:6b:aa:72:8e:4d:cb:80:12:38:8c:e9:01:f1:7a:
7c:0e:9f:62:ae:62:09:b6:be:b4:46:0c:f0:f0:27:56:86:cb:
1d:40:1b:40:33:21:34:b9:f5:5a:a1:d8:4e:af:32:25:b3:c6:
bc:02:c6:92:3c:03:92:a3:36:b1:86:48:db:31:13:b2:b5:5c:
d3:c4:08:68:de:0a:d7:2a:63:f2:53:16:6f:c3:b2:0d:27:5c:
7f:54:f0:0b:e6:66:02:9d:0c:22:86:63:11:2d:d0:b3:1c:af:
c6:aa:18:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:40 2025 by rpki-client