Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/GC0kMuFqXfpixGb956tt4Oo83KE.roa
File: GC0kMuFqXfpixGb956tt4Oo83KE.roa (raw, json)
Hash identifier: DT3X3G1O4R0Lo5GgZpqfCosWJCy2pqP0bcFUg70oORU=
Subject key identifier: 18:2D:24:32:E1:6A:5D:FA:62:C4:66:FD:E7:AB:6D:E0:EA:3C:DC:A1
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 01870D9F2A8683E086E743C0C00D6C70F354
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/GC0kMuFqXfpixGb956tt4Oo83KE.roa
Signing time: Thu 23 Mar 2023 08:39:07 +0000
ROA not before: Thu 23 Mar 2023 08:39:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 185.142.99.0/24 maxlen: 24
194.187.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:9f:2a:86:83:e0:86:e7:43:c0:c0:0d:6c:70:f3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Mar 23 08:39:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=182d2432e16a5dfa62c466fde7ab6de0ea3cdca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:c0:5d:18:87:d1:78:6a:9d:84:ce:6c:c6:
74:13:76:ab:a6:10:f0:b4:8e:78:58:d4:bd:a8:24:
2e:6b:ec:32:2f:de:53:d1:4a:1f:59:4c:97:f6:92:
3d:0b:4b:15:c3:83:10:aa:a6:31:de:3f:6d:a0:09:
6b:11:bc:f5:a2:28:db:92:e7:9a:c0:7c:b8:44:ff:
47:6f:0d:c5:1d:92:bf:b5:5e:58:d0:41:42:29:64:
28:25:41:68:83:43:0a:52:f4:a6:db:60:52:5b:94:
d7:c5:6e:bc:aa:e5:9d:22:b5:6a:68:b2:ed:0a:bc:
47:37:f9:1b:34:2e:fe:78:41:c5:5f:4c:a8:02:4f:
e7:34:24:ec:61:9a:36:6b:ee:09:13:6d:11:e3:20:
d7:b7:bb:69:14:46:e6:2d:5f:aa:56:a7:bf:05:a0:
15:d4:77:52:80:8c:75:60:91:5b:c9:14:1d:d9:9b:
73:01:26:aa:99:0d:11:16:77:ab:e7:90:11:b1:37:
c5:bc:14:10:8d:64:89:e2:21:2a:b2:c5:b5:af:ea:
d1:81:93:37:e2:db:b5:37:6c:2d:ca:95:2d:bb:7c:
96:85:d3:bb:8d:20:b7:1c:67:c9:3a:7c:35:81:cf:
bb:86:82:6b:d2:3b:82:fc:a5:00:2a:2c:ff:e5:fc:
0f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2D:24:32:E1:6A:5D:FA:62:C4:66:FD:E7:AB:6D:E0:EA:3C:DC:A1
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/GC0kMuFqXfpixGb956tt4Oo83KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.99.0/24
194.187.121.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:09:f5:6b:ed:af:51:05:a6:37:6c:b9:c5:b0:5d:17:66:31:
f5:2b:7d:2c:2e:e4:48:02:73:dd:98:53:f3:4b:3b:f7:25:37:
f9:14:96:cb:7c:7a:b0:28:7d:a6:97:b0:b6:be:56:d6:06:e6:
bb:5c:56:dc:ac:84:07:23:4e:05:93:77:9a:7a:4e:a9:5d:03:
b2:84:e6:5e:85:75:eb:2a:41:88:19:0b:bc:98:87:2f:1d:72:
0f:6f:52:44:84:dc:50:bd:4f:ed:d8:d7:71:ce:bf:f6:70:71:
dd:85:34:11:59:14:35:8a:2e:82:f4:cc:aa:08:a6:98:40:31:
8b:3e:da:3b:d3:61:67:71:69:8e:07:84:df:ad:28:08:f8:9c:
3e:4e:b2:12:ed:a9:c9:05:9d:8a:80:cf:15:8a:05:18:b3:41:
2e:9f:30:a2:67:d1:5f:6a:14:08:ea:7f:23:f2:de:d3:b6:6f:
31:18:86:52:8e:3c:9e:df:9c:58:6a:aa:f6:4c:f6:b7:14:31:
51:97:22:59:27:55:0c:6f:84:c6:07:13:af:ea:c4:dc:b4:b8:
76:a8:c7:e3:4b:fb:d5:29:ed:3c:de:af:43:a3:32:ba:87:b4:
aa:5a:94:b4:85:1d:b8:26:0f:32:15:75:3b:82:5d:e0:0a:7b:
3e:b4:47:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:56 2024 by rpki-client on console-ams.rpki-client.org