Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/GzvJSB9sgjhOVhf7q9wtYW_9SmU.roa
File: GzvJSB9sgjhOVhf7q9wtYW_9SmU.roa (raw, json)
Hash identifier: bkdtTZaNYItvDW4BaJEkv72LGUT3o/MCtj+4jnQx18Q=
Subject key identifier: 1B:3B:C9:48:1F:6C:82:38:4E:56:17:FB:AB:DC:2D:61:6F:FD:4A:65
Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial: 01872CCD10275A37695B1DC0E617EDAF988A
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/GzvJSB9sgjhOVhf7q9wtYW_9SmU.roa
Signing time: Wed 29 Mar 2023 09:57:29 +0000
ROA not before: Wed 29 Mar 2023 09:57:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35548
IP address blocks: 93.89.12.0/24 maxlen: 24
2a02:17f9::/32 maxlen: 48
Validation: Failed, certificate revoked on Sun 31 Dec 2023 09:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:cd:10:27:5a:37:69:5b:1d:c0:e6:17:ed:af:98:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Validity
Not Before: Mar 29 09:57:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b3bc9481f6c82384e5617fbabdc2d616ffd4a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:53:76:f3:c4:9e:72:57:d7:88:03:8a:37:82:
5e:bc:a2:b4:67:79:06:c1:01:a8:d9:18:4d:94:01:
14:75:d0:d5:ac:60:8e:36:7e:f1:39:26:d6:ac:22:
2e:f7:1a:7f:2d:fd:b7:16:d6:45:3c:20:73:4a:c1:
26:85:ef:3f:a8:42:a1:16:ec:78:83:6f:ab:0a:40:
37:f3:ab:f5:bf:cf:27:4a:45:13:df:a8:f7:88:74:
2c:d5:9d:18:b9:a5:af:47:97:bf:ca:5c:b3:91:39:
f2:bb:8c:f6:1c:79:ea:c0:da:91:6e:7a:05:39:bd:
15:7f:5f:ca:7e:ad:8e:72:cb:c6:d6:db:39:bd:96:
fa:f8:84:cb:69:be:4b:8b:c8:62:83:23:ea:75:27:
6c:74:24:7f:0e:59:81:cb:0c:8c:23:ea:45:46:37:
07:1a:c5:b6:a4:07:66:ac:d9:88:f7:bc:f7:2b:56:
4f:7d:79:c5:74:4f:a7:61:81:41:eb:dc:16:7c:c5:
70:55:81:5b:6b:fa:18:2d:f9:7d:9a:34:0b:38:9a:
c3:4e:80:ad:1f:42:76:bc:15:79:8b:73:ca:1a:4e:
b6:f4:0c:63:9a:21:0b:e3:8e:68:69:07:67:35:96:
91:fc:7b:9a:4e:d9:6f:e8:6f:93:ff:5d:93:f9:9c:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3B:C9:48:1F:6C:82:38:4E:56:17:FB:AB:DC:2D:61:6F:FD:4A:65
X509v3 Authority Key Identifier:
keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/GzvJSB9sgjhOVhf7q9wtYW_9SmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.12.0/24
IPv6:
2a02:17f9::/32
Signature Algorithm: sha256WithRSAEncryption
9a:ca:da:cd:1f:97:9b:a9:de:7a:73:ef:83:ff:c4:24:57:77:
00:6a:d1:81:51:04:ac:c5:99:ff:8f:fa:65:cd:6d:b5:44:77:
32:6c:9b:43:65:d5:99:be:9e:9d:d1:e3:73:6b:76:38:30:9f:
94:6f:67:ba:ed:a2:e0:c2:13:8a:41:90:51:d1:df:0a:0a:cb:
6b:22:ed:1b:de:59:22:fa:06:7e:10:7c:ad:c0:83:29:6d:35:
2d:53:70:3e:64:83:dc:d7:29:e1:44:ea:79:17:56:f5:c5:28:
0b:e7:15:94:e9:39:18:02:0e:85:27:97:40:6e:ae:e2:dc:eb:
ae:8f:a7:35:bf:a8:36:5b:bc:5f:04:cf:13:63:ed:59:05:b0:
eb:c1:8c:22:60:9a:0f:25:42:4a:a5:e5:a8:9c:ea:60:67:f6:
a9:9f:b5:7a:b3:f6:c6:25:eb:0f:20:35:c2:c0:f0:d5:e5:7f:
40:f4:c8:0d:1b:ed:94:da:21:ff:d3:0c:ce:7c:09:28:03:90:
9b:87:bf:83:19:cd:79:9d:5a:a3:00:51:32:04:76:c1:98:01:
28:5c:f2:91:ac:68:3f:ab:c9:9b:10:ab:1f:d8:cf:c6:75:77:
de:af:6f:9a:d6:c3:80:0c:08:ea:e7:c0:68:26:88:20:25:ee:
f9:7d:62:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:03 2024 by rpki-client on console-fra.rpki-client.org