Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/GW5905MnZgiZFOOAs95pu6syVik.roa
File: GW5905MnZgiZFOOAs95pu6syVik.roa (raw, json)
Hash identifier: 8cU7JdKAW89Y1UjXoFL14QzAlOm7ddUUsluRZL6t8cI=
Subject key identifier: 19:6E:7D:D3:93:27:66:08:99:14:E3:80:B3:DE:69:BB:AB:32:56:29
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185719E80170EABF733053DD7E62F99CB0D
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/GW5905MnZgiZFOOAs95pu6syVik.roa
Signing time: Mon 02 Jan 2023 08:34:50 +0000
ROA not before: Mon 02 Jan 2023 08:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48724
IP address blocks: 212.193.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:80:17:0e:ab:f7:33:05:3d:d7:e6:2f:99:cb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 08:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=196e7dd3932766089914e380b3de69bbab325629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:9b:51:4a:ee:95:0b:22:95:1d:61:3c:d0:
6d:fe:b7:7f:26:34:d5:35:ae:46:eb:28:3c:55:e2:
d3:34:fe:c0:94:7c:1e:65:d1:c7:7e:f0:cc:1b:b5:
3a:83:90:5f:68:1c:31:e3:a4:16:f1:bf:ed:0c:3a:
35:b4:e5:1d:cf:dd:1a:95:37:fb:55:90:ec:a0:58:
8a:97:76:a4:16:dc:1f:c9:08:0d:51:e2:38:1e:27:
d1:6f:a2:0f:70:3b:a6:85:fb:3d:e5:01:fa:a3:0c:
e0:77:88:ac:ed:2b:25:cf:80:63:fc:ae:08:92:4a:
a7:9a:d0:0c:ba:26:7b:96:a2:9c:8e:61:22:bf:fb:
30:9f:b0:79:2f:c2:b1:63:a8:e8:68:17:0a:58:52:
7d:f3:dc:9d:b6:1b:2d:93:b2:b0:41:1d:2e:d7:90:
85:db:46:56:2d:73:c0:25:a2:3d:ca:98:f2:55:84:
35:5f:66:e3:63:dc:a7:85:f9:f4:0a:0e:4e:9d:ae:
2c:0c:89:45:48:d5:a4:2f:6c:94:45:14:60:ba:57:
de:0c:c6:09:05:bf:da:a4:9b:fa:9f:6c:b9:1c:8c:
46:39:1f:4a:3c:c2:ce:de:03:8c:6d:8f:a1:27:4b:
3d:16:75:db:ef:85:11:24:bd:46:b7:90:77:01:51:
9e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6E:7D:D3:93:27:66:08:99:14:E3:80:B3:DE:69:BB:AB:32:56:29
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/GW5905MnZgiZFOOAs95pu6syVik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.99.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f5:cc:65:3e:fe:4d:c2:7c:0b:4e:62:c3:4d:47:ff:c6:2d:
fa:de:56:b8:08:62:f9:3e:dc:2b:f4:10:b0:da:a8:e1:ee:ac:
89:db:a8:f4:d9:b3:08:b9:39:44:0c:09:75:f1:d4:f8:2f:f0:
06:68:0f:f8:83:85:70:af:bd:98:4f:88:ed:47:07:66:18:8d:
4b:3e:39:2b:7e:4c:df:d4:91:10:a0:66:88:69:aa:65:6d:7e:
49:01:16:37:68:21:c7:0e:ce:d0:ba:64:54:76:9b:4b:62:52:
ea:cf:98:be:45:49:bb:73:ee:2d:75:56:88:15:8a:23:24:87:
3b:03:87:fa:c0:25:1d:a0:ce:4f:7f:87:da:17:2f:6c:9c:3e:
90:f5:f3:0e:b8:8f:07:18:ee:97:12:bb:b4:06:71:51:f7:78:
48:15:cb:c4:71:33:b7:35:b6:36:da:58:81:94:f8:5f:12:21:
42:57:87:99:ec:06:3a:e5:7c:34:42:4e:4b:ce:f7:ca:ba:0b:
23:d3:97:b9:60:1f:76:01:51:96:c8:a7:d7:a4:ba:e4:2a:39:
35:3a:50:2a:56:9e:51:1f:97:40:ac:44:b7:06:41:6e:b5:02:
66:96:56:4c:22:45:17:ad:41:3f:b5:f6:16:3f:42:9f:ec:b4:
79:98:70:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org