Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/GGwRv123i-59GD70KuJajDjUu-k.roa
File: GGwRv123i-59GD70KuJajDjUu-k.roa (raw, json)
Hash identifier: 4ox8iqcknMtfQD3Ayeka5/PEnwOEzYsAPJ56XuVj6fk=
Subject key identifier: 18:6C:11:BF:5D:B7:8B:EE:7D:18:3E:F4:2A:E2:5A:8C:38:D4:BB:E9
Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Certificate serial: 01856D41883AB5713ED2594B117ED0238AFB
Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/GGwRv123i-59GD70KuJajDjUu-k.roa
Signing time: Sun 01 Jan 2023 12:14:49 +0000
ROA not before: Sun 01 Jan 2023 12:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25279
IP address blocks: 217.68.0.0/20 maxlen: 24
185.138.4.0/22 maxlen: 24
2a02:328::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:88:3a:b5:71:3e:d2:59:4b:11:7e:d0:23:8a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Validity
Not Before: Jan 1 12:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=186c11bf5db78bee7d183ef42ae25a8c38d4bbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f3:d4:c1:db:df:c2:88:fb:d2:7a:72:eb:72:
58:b4:02:1c:9b:69:63:da:d8:80:e2:3e:b8:21:3e:
9f:ee:7c:7e:20:31:63:3b:60:0b:b3:48:fd:19:55:
0e:d2:37:a3:cb:96:63:24:3a:74:8d:5d:eb:56:cb:
70:b8:41:96:06:c7:18:9c:8e:5c:a6:9c:58:87:ff:
32:30:c1:65:60:13:cf:f9:bd:60:7d:6d:aa:d2:36:
a3:68:a7:d3:e3:b7:54:6e:dd:04:74:20:94:2c:96:
ec:76:be:f8:42:3b:c2:ad:10:40:74:19:1a:b8:83:
a1:12:a2:ea:9d:83:b4:5c:02:81:0c:df:31:5a:4f:
bb:f2:08:1c:56:fb:5c:f8:6e:34:ca:81:82:68:36:
ed:c1:e8:ca:44:11:34:79:65:6c:ca:3c:fb:94:88:
ae:60:2f:5a:ee:41:ca:08:b2:57:ea:82:9d:f1:ba:
3c:f1:0e:e2:99:35:a2:9b:ee:30:13:ae:cd:a3:00:
1e:09:51:3c:64:30:ba:c0:02:52:92:d3:3e:37:c7:
3a:a0:7e:c0:fa:9d:84:25:50:75:b7:b0:81:1d:8a:
e3:2e:ce:06:f5:70:e6:01:5d:ba:24:02:6c:4a:0b:
f9:2d:d5:a4:c8:b6:45:e7:c5:0a:98:d0:71:16:0d:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6C:11:BF:5D:B7:8B:EE:7D:18:3E:F4:2A:E2:5A:8C:38:D4:BB:E9
X509v3 Authority Key Identifier:
keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/GGwRv123i-59GD70KuJajDjUu-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.4.0/22
217.68.0.0/20
IPv6:
2a02:328::/29
Signature Algorithm: sha256WithRSAEncryption
79:b1:13:54:34:25:cc:f0:c8:01:a9:63:fd:ed:40:40:41:a5:
2d:3d:f5:d3:c5:1f:d8:92:2c:a7:87:54:4e:e2:d2:05:b7:82:
e4:6f:7e:16:35:51:98:12:e0:b7:be:7f:3a:59:fb:bd:2b:ad:
21:1f:bc:af:9a:a3:37:9d:7f:1f:8f:44:4a:8e:60:da:9c:5d:
34:72:7f:8f:7e:fc:ac:92:f3:e5:20:39:ff:69:b3:3a:2b:dc:
ac:90:04:3d:bb:1e:78:b8:f7:8f:a3:f9:a1:9e:36:03:1d:61:
ab:6a:c1:ad:32:e2:78:26:f0:51:47:b5:12:0d:a0:fe:3e:74:
eb:ff:9c:3d:92:fa:67:07:14:42:78:fb:45:5c:e9:0e:73:81:
47:b2:2e:12:79:f8:97:60:b6:18:c5:06:d6:ee:4c:25:d0:4e:
39:db:ac:80:4e:68:c6:49:c7:1a:0c:e0:9f:84:d4:51:38:4d:
34:c3:6f:ed:03:09:f4:6e:29:30:15:45:88:f6:fa:eb:42:90:
87:8c:b5:89:a0:ce:74:12:f3:db:03:dc:31:3c:cc:19:b5:29:
6c:93:fd:6d:44:6d:5e:98:0c:d6:d7:ce:ee:09:ea:a5:4f:79:
10:9e:e7:af:4d:7a:97:f5:4e:7b:77:79:4e:60:a9:6f:45:57:
3e:65:80:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:00 2024 by rpki-client on console-fra.rpki-client.org