Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/Glb_IgIJpzP-RheDs7R86pzuJa8.roa
File: Glb_IgIJpzP-RheDs7R86pzuJa8.roa (raw, json)
Hash identifier: 9x2Bv+fAxc5+oKcFxAx/KWnkJFDjT6zTx1B5Ll0zvIc=
Subject key identifier: 1A:56:FF:22:02:09:A7:33:FE:46:17:83:B3:B4:7C:EA:9C:EE:25:AF
Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial: 01856BA5867DF3F6F985D4F1BC56F7034EA0
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/Glb_IgIJpzP-RheDs7R86pzuJa8.roa
Signing time: Sun 01 Jan 2023 04:44:48 +0000
ROA not before: Sun 01 Jan 2023 04:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 394256
IP address blocks: 193.188.2.0/23 maxlen: 24
193.188.14.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:a5:86:7d:f3:f6:f9:85:d4:f1:bc:56:f7:03:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Validity
Not Before: Jan 1 04:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a56ff220209a733fe461783b3b47cea9cee25af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:60:56:39:4b:33:6b:40:60:7e:5c:7d:dd:95:
42:ec:ae:a8:87:ce:8d:63:52:8c:c9:ba:07:43:dd:
a3:00:4f:b4:26:b4:29:2c:be:3a:94:93:11:f8:c2:
f2:30:69:ae:f9:99:f2:ff:9c:d0:98:77:32:21:9e:
d9:e9:43:5e:11:96:e7:48:80:b0:0f:a5:c7:46:3a:
70:6f:3d:9e:75:ef:f9:78:73:99:9f:fc:c8:64:fe:
7c:f7:01:6e:c8:47:82:4d:aa:24:53:91:af:6d:7a:
2e:de:67:b8:5d:19:a5:e1:e3:21:3a:af:95:c0:38:
7b:fe:6d:23:8e:24:b4:e2:1d:13:de:19:ab:19:49:
77:4a:a9:0c:79:2b:cf:79:7c:89:8f:42:7d:94:8a:
df:2a:f2:22:07:ca:3e:38:90:c1:45:bb:2e:6e:46:
ed:2b:e0:9b:12:9c:0a:4a:9d:f4:eb:2e:22:4f:4a:
5e:91:e8:18:0d:3c:72:c9:43:38:89:8f:cb:03:06:
a6:90:d8:90:f3:20:86:52:b0:66:38:92:95:aa:8a:
c6:99:32:47:43:f3:28:0e:9b:90:e2:85:76:85:b0:
59:27:b8:33:f9:71:ac:d5:6d:7e:3f:9c:3f:7c:88:
92:03:bc:06:84:11:1f:e1:48:cd:ff:8b:b3:05:c2:
e8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:56:FF:22:02:09:A7:33:FE:46:17:83:B3:B4:7C:EA:9C:EE:25:AF
X509v3 Authority Key Identifier:
keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/Glb_IgIJpzP-RheDs7R86pzuJa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.2.0/23
193.188.14.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:f9:2c:ac:76:a9:41:1f:e0:d6:d6:1c:ca:e7:f0:10:8a:ce:
65:08:fc:56:31:13:b8:7c:3f:fd:15:03:dd:f8:a7:55:ef:d2:
f4:46:10:b9:f3:dc:7b:4f:71:df:55:20:eb:82:83:88:2d:97:
1f:85:8c:36:ca:a3:51:d7:e5:20:d5:8c:bd:6e:50:fd:6e:fd:
a3:3c:57:0b:2a:0d:7b:8b:36:69:9d:64:9f:6e:25:f3:b8:e5:
ac:8b:7b:41:0f:1e:d9:df:97:65:09:a9:08:19:74:44:c9:56:
33:24:65:65:31:e3:e1:71:9b:f1:12:e5:d7:17:5e:ee:2b:e4:
97:2d:09:7a:f4:28:45:10:cc:56:6a:60:e8:c2:a9:b5:6d:96:
c7:49:df:6b:07:7a:e3:5b:3b:5a:99:fb:f0:4d:09:d9:64:c6:
27:de:d0:ef:7f:39:03:49:84:23:a4:ac:58:9e:3e:71:97:15:
b4:92:22:8f:72:53:0f:8b:0f:f0:c8:98:f7:7b:25:f7:7f:24:
dd:09:14:cf:e0:8b:48:f1:16:dd:d1:25:63:32:62:f1:1f:1f:
df:cb:63:d7:cf:98:12:df:3c:eb:37:29:43:ef:f0:d6:8e:bf:
4c:0d:22:68:c4:59:2a:70:3c:eb:ea:44:d2:06:af:96:33:c5:
82:8b:0c:6f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVrpYZ98/b5hdTxvFb3A06gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNjViNGJhNGQ3ODY5ZDVjYjhmOTU3NGYwZjRmZWVlNzBl
YmM2YzUwHhcNMjMwMTAxMDQ0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTU2ZmYyMjAyMDlhNzMzZmU0NjE3ODNiM2I0N2NlYTljZWUyNWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmBWOUsza0Bgflx93ZVC7K6oh86N
Y1KMyboHQ92jAE+0JrQpLL46lJMR+MLyMGmu+Zny/5zQmHcyIZ7Z6UNeEZbnSICw
D6XHRjpwbz2ede/5eHOZn/zIZP589wFuyEeCTaokU5GvbXou3me4XRml4eMhOq+V
wDh7/m0jjiS04h0T3hmrGUl3SqkMeSvPeXyJj0J9lIrfKvIiB8o+OJDBRbsubkbt
K+CbEpwKSp306y4iT0pekegYDTxyyUM4iY/LAwamkNiQ8yCGUrBmOJKVqorGmTJH
Q/MoDpuQ4oV2hbBZJ7gz+XGs1W1+P5w/fIiSA7wGhBEf4UjN/4uzBcLoIwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBpW/yICCacz/kYXg7O0fOqc7iWvMB8GA1UdIwQY
MBaAFLxltLpNeGnVy4+VdPD0/u5w68bFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkdXMHVrMTRhZFhMajVWMDhQVC03bkRyeHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NDIxMDEtNzgwYi00N2FjLTg1N2Qt
ZjllN2NiMDNjNTI3LzEvR2xiX0lnSUpwelAtUmhlRHM3Ujg2cHp1SmE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NDIxMDEtNzgwYi00N2FjLTg1N2QtZjllN2NiMDNjNTI3
LzEvdkdXMHVrMTRhZFhMajVWMDhQVC03bkRyeHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwbwCAwQB
wbwOMA0GCSqGSIb3DQEBCwUAA4IBAQBL+SysdqlBH+DW1hzK5/AQis5lCPxWMRO4
fD/9FQPd+KdV79L0RhC589x7T3HfVSDrgoOILZcfhYw2yqNR1+Ug1Yy9blD9bv2j
PFcLKg17izZpnWSfbiXzuOWsi3tBDx7Z35dlCakIGXREyVYzJGVlMePhcZvxEuXX
F17uK+SXLQl69ChFEMxWamDowqm1bZbHSd9rB3rjWztamfvwTQnZZMYn3tDvfzkD
SYQjpKxYnj5xlxW0kiKPclMPiw/wyJj3eyX3fyTdCRTP4ItI8Rbd0SVjMmLxHx/f
y2PXz5gS3zzrNylD7/DWjr9MDSJoxFkqcDzr6kTSBq+WM8WCiwxv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:03 2024 by rpki-client on console-fra.rpki-client.org