Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/GepPFaGhajB6gwFcx7xyZTOs1oo.roa
File: GepPFaGhajB6gwFcx7xyZTOs1oo.roa (raw, json)
Hash identifier: pv8kkADz6st2Y1lUnIStM8Ub+Rt08rfUe7usI67JveI=
Subject key identifier: 19:EA:4F:15:A1:A1:6A:30:7A:83:01:5C:C7:BC:72:65:33:AC:D6:8A
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 0186533F74CB5C87E5B372C94609681B93F9
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/GepPFaGhajB6gwFcx7xyZTOs1oo.roa
Signing time: Wed 15 Feb 2023 04:05:12 +0000
ROA not before: Wed 15 Feb 2023 04:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200082
IP address blocks: 91.221.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:53:3f:74:cb:5c:87:e5:b3:72:c9:46:09:68:1b:93:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Feb 15 04:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19ea4f15a1a16a307a83015cc7bc726533acd68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f6:1b:5d:a8:91:dc:33:34:17:fb:7f:fe:cf:
b4:4f:78:b6:aa:39:13:30:71:45:7a:02:9f:bf:e0:
a2:1e:d3:11:65:07:b0:2e:ea:d0:c2:32:90:a9:e3:
3e:d3:68:19:ca:dd:a7:2c:b9:39:01:4f:ed:46:27:
9d:bc:a3:73:a2:65:58:68:e8:95:db:f0:c8:f7:51:
89:bd:a1:b2:c9:b6:6f:65:0f:0e:dd:76:f6:d5:9e:
7c:b7:f3:d4:71:a0:8d:6a:8b:ec:fe:1d:d5:20:b5:
4a:97:e8:96:e8:58:c1:ff:63:57:c6:7b:da:82:f1:
da:23:c8:0c:59:ad:1e:79:be:1a:99:2f:5e:7d:f0:
9d:99:48:13:eb:90:da:54:96:1b:67:f9:7c:5b:5a:
4e:87:9f:20:f5:74:8b:85:08:01:b6:ad:94:60:a1:
39:5a:bd:82:58:51:65:3d:3e:d3:0d:ea:79:b0:28:
91:3c:72:75:b7:4a:78:77:88:19:68:08:81:65:7d:
bc:07:8d:31:a8:2e:94:8e:fe:bc:a9:36:33:dd:a1:
9a:62:75:c8:28:a7:da:53:f3:bb:95:e0:b3:f4:d6:
1b:61:f0:c4:b5:9c:02:73:49:a0:6a:c4:08:57:6f:
e9:d8:56:9a:9b:81:cd:92:98:26:88:e3:2a:5c:20:
5f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EA:4F:15:A1:A1:6A:30:7A:83:01:5C:C7:BC:72:65:33:AC:D6:8A
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/GepPFaGhajB6gwFcx7xyZTOs1oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.117.0/24
Signature Algorithm: sha256WithRSAEncryption
60:11:e5:35:ae:06:00:89:cd:46:4d:88:2e:2f:db:bf:a6:21:
bf:1e:b2:36:9e:ce:52:8a:b5:af:fe:6e:cc:c4:2d:a0:42:3f:
19:18:1c:4f:1f:d0:cd:eb:79:b3:ad:cf:40:62:53:cb:d3:0a:
5c:49:a7:3c:58:0b:29:f1:da:96:5f:85:5b:d3:d0:e5:d7:3a:
08:9f:e6:c9:63:d6:e1:e0:d4:1f:26:5a:73:87:7d:87:58:b6:
dc:f5:0a:da:89:5c:bf:ae:a4:44:d1:df:3d:51:f1:67:e1:5b:
09:f8:35:4d:a3:83:78:94:9c:1d:80:3b:7f:10:37:a1:1c:b7:
66:82:f6:d7:3d:92:2e:a9:92:44:d4:ae:44:30:2e:7e:55:10:
08:5f:cc:1e:cf:bf:a0:4a:d0:86:e5:4e:64:86:ad:9b:6c:f6:
13:d0:85:4a:a4:c7:10:64:6d:0c:44:ab:e7:44:1d:50:5c:4d:
1c:51:96:df:cd:9c:fb:af:22:e4:16:df:28:a1:f0:5e:0b:c1:
9e:52:82:82:73:12:3d:07:eb:43:11:69:f6:b0:70:4e:e8:27:
8a:b8:b2:1d:a4:a8:4d:11:08:d8:b7:e9:f6:b2:50:ab:39:1c:
4c:59:f1:c7:0c:4a:48:63:31:1a:d9:88:1a:3a:d0:69:3c:62:
0b:39:c1:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZTP3TLXIfls3LJRgloG5P5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl
MmExY2EwHhcNMjMwMjE1MDQwNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWVhNGYxNWExYTE2YTMwN2E4MzAxNWNjN2JjNzI2NTMzYWNkNjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vYbXaiR3DM0F/t//s+0T3i2qjkT
MHFFegKfv+CiHtMRZQewLurQwjKQqeM+02gZyt2nLLk5AU/tRiedvKNzomVYaOiV
2/DI91GJvaGyybZvZQ8O3Xb21Z58t/PUcaCNaovs/h3VILVKl+iW6FjB/2NXxnva
gvHaI8gMWa0eeb4amS9effCdmUgT65DaVJYbZ/l8W1pOh58g9XSLhQgBtq2UYKE5
Wr2CWFFlPT7TDep5sCiRPHJ1t0p4d4gZaAiBZX28B40xqC6Ujv68qTYz3aGaYnXI
KKfaU/O7leCz9NYbYfDEtZwCc0mgasQIV2/p2Faam4HNkpgmiOMqXCBfMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBnqTxWhoWoweoMBXMe8cmUzrNaKMB8GA1UdIwQY
MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt
YTZjYTQ1NGRiMmQ3LzEvR2VwUEZhR2hhakI2Z3dGY3g3eHlaVE9zMW9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3
LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW911MA0G
CSqGSIb3DQEBCwUAA4IBAQBgEeU1rgYAic1GTYguL9u/piG/HrI2ns5SirWv/m7M
xC2gQj8ZGBxPH9DN63mzrc9AYlPL0wpcSac8WAsp8dqWX4Vb09Dl1zoIn+bJY9bh
4NQfJlpzh32HWLbc9QraiVy/rqRE0d89UfFn4VsJ+DVNo4N4lJwdgDt/EDehHLdm
gvbXPZIuqZJE1K5EMC5+VRAIX8wez7+gStCG5U5khq2bbPYT0IVKpMcQZG0MRKvn
RB1QXE0cUZbfzZz7ryLkFt8oofBeC8GeUoKCcxI9B+tDEWn2sHBO6CeKuLIdpKhN
EQjYt+n2slCrORxMWfHHDEpIYzEa2YgaOtBpPGILOcFB
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:38 2024 by rpki-client on console-ams.rpki-client.org