Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/GJsCvHsXEt7Szl3X2EzvOP2DLxk.roa
File: GJsCvHsXEt7Szl3X2EzvOP2DLxk.roa (raw, json)
Hash identifier: jbRo9ySRC7y836fg62Jx4g3h642eN8PBuzmsARDcZQ8=
Subject key identifier: 18:9B:02:BC:7B:17:12:DE:D2:CE:5D:D7:D8:4C:EF:38:FD:83:2F:19
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 01856F0B42CE376D939F2273892DAED2A4C5
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/GJsCvHsXEt7Szl3X2EzvOP2DLxk.roa
Signing time: Sun 01 Jan 2023 20:34:46 +0000
ROA not before: Sun 01 Jan 2023 20:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42183
IP address blocks: 185.189.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:42:ce:37:6d:93:9f:22:73:89:2d:ae:d2:a4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Jan 1 20:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=189b02bc7b1712ded2ce5dd7d84cef38fd832f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:64:ca:79:96:d4:cc:20:16:f9:1e:5c:22:86:
1e:9e:05:d3:9c:21:eb:6f:3c:2d:55:53:f1:77:4e:
d4:02:a2:7f:0a:74:7b:2e:38:f1:c2:62:fe:f6:0c:
c7:03:61:f2:ac:6f:c2:f1:9a:7c:09:9c:d7:da:f7:
21:55:9f:2e:86:ef:2a:8e:6e:14:9b:36:cc:77:d9:
ec:52:5b:20:7d:1c:59:75:5b:00:1e:45:2b:9b:d6:
1f:f6:93:23:36:86:bd:4a:82:cb:b2:c8:60:7a:ff:
9b:e4:b6:2f:3c:cd:a8:78:5c:0a:28:3b:99:4f:9d:
3f:a3:cd:41:5f:14:4d:e9:4a:0a:1f:28:83:a2:2c:
82:b1:19:8a:7f:04:d2:e8:e4:9e:63:96:a3:8d:e0:
ec:8b:97:c4:62:8a:a9:9c:c9:cc:84:9c:6d:5d:63:
e0:34:5e:1c:98:00:81:81:45:fa:43:ba:95:8f:55:
e1:f9:69:bb:7d:a6:60:81:f6:c9:59:25:e1:35:83:
81:c5:07:ee:71:68:9c:49:b5:ad:0e:b5:85:86:3b:
55:c3:34:5b:14:3d:fa:70:be:40:8f:c3:64:0c:bb:
76:8f:f1:c1:83:ff:cc:4d:05:dd:db:7d:a0:07:f1:
bc:a1:c3:02:3f:bc:76:bf:50:26:4d:df:0c:ac:7f:
84:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9B:02:BC:7B:17:12:DE:D2:CE:5D:D7:D8:4C:EF:38:FD:83:2F:19
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/GJsCvHsXEt7Szl3X2EzvOP2DLxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.90.0/24
Signature Algorithm: sha256WithRSAEncryption
66:7b:9d:a4:37:c5:d3:d4:94:01:89:44:a0:2a:8d:36:a6:34:
c5:b3:18:77:3c:c4:a6:57:4b:cb:03:e5:c9:dd:ff:49:fe:8e:
89:a8:32:51:27:09:3f:45:60:0b:2a:eb:52:c4:62:6b:46:af:
3e:f3:5c:9c:f4:d4:dc:64:40:d5:a2:db:45:b9:cd:a3:b5:58:
1f:89:ab:63:96:e3:b9:2d:b3:8f:9c:56:03:84:c2:16:ef:3f:
a4:87:76:a3:16:e3:69:8a:7a:66:db:cc:38:3f:3a:d8:cb:20:
41:b8:aa:6b:13:bc:13:0f:61:43:95:c1:ee:fb:b9:9b:a2:d5:
48:42:2a:54:8a:cf:ee:02:3c:74:77:7a:5c:c6:24:9d:20:1a:
98:8b:d7:21:f4:c7:45:72:16:59:71:f7:16:e1:7d:1d:fb:3c:
63:49:ce:7d:ef:3a:75:82:6b:69:15:4c:69:08:88:4d:d1:b5:
44:44:11:80:44:e4:a2:82:ec:bf:76:bb:09:b5:f6:6a:a4:36:
28:27:95:1a:8c:01:d4:0b:50:2f:bb:5e:23:e0:c5:ef:09:4d:
f7:59:ec:d3:09:ae:6f:fa:7c:61:0f:7c:0e:21:9d:3d:af:41:
08:51:78:d8:3d:d6:18:3e:97:40:67:ce:e7:ba:4e:32:a9:fb:
be:87:f4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:42 2024 by rpki-client on console.sobornost.net