Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/gSVYiqFBZvHZfVKVrweg-wXz558.roa
File: gSVYiqFBZvHZfVKVrweg-wXz558.roa (raw, json)
Hash identifier: zsaUBwuL14kx8K3w2tDbXjlq7dW///OW3MW6nazDJJQ=
Subject key identifier: 81:25:58:8A:A1:41:66:F1:D9:7D:52:95:AF:07:A0:FB:05:F3:E7:9F
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 01856BEEC7E6716237F379000D7DD223B1A4
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/gSVYiqFBZvHZfVKVrweg-wXz558.roa
Signing time: Sun 01 Jan 2023 06:04:48 +0000
ROA not before: Sun 01 Jan 2023 06:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60793
IP address blocks: 185.19.12.0/22 maxlen: 22
185.192.156.0/22 maxlen: 22
2a03:fe40::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:c7:e6:71:62:37:f3:79:00:0d:7d:d2:23:b1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Jan 1 06:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8125588aa14166f1d97d5295af07a0fb05f3e79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:77:fd:c2:fa:87:0f:06:ec:8f:9f:84:67:
9a:31:74:ef:5e:d7:41:66:e5:1d:f0:ec:8b:dc:46:
ba:dc:97:ab:31:cf:3c:24:61:6b:3f:b6:16:c7:e0:
87:eb:62:b6:01:15:64:fd:7f:31:b2:72:e9:11:d3:
0f:f6:b9:3e:48:c7:48:7b:5b:9b:07:d3:6b:a1:fb:
1e:03:b5:ab:db:07:9f:38:36:1b:32:10:a4:6b:f4:
65:24:0c:07:3d:0f:55:cd:b2:de:4a:a0:5f:42:69:
dc:a6:aa:04:99:07:4b:be:ca:58:bf:c8:80:85:5e:
dd:72:45:21:ea:e1:93:60:05:ec:43:d3:ae:54:93:
5a:22:be:6f:c6:30:db:f6:a2:83:b1:b7:a8:81:c4:
39:75:29:6b:0f:55:a1:c0:ed:54:08:42:29:87:94:
66:81:8c:15:c0:a1:fe:7d:f6:ba:3a:08:d8:cc:2b:
19:51:57:22:ff:a8:18:f8:37:12:08:2f:99:f4:0f:
eb:be:27:44:08:bf:c1:54:1a:a6:2b:b3:42:09:e4:
24:c7:2a:a8:54:05:41:8a:ef:1a:30:12:cd:6f:64:
aa:83:43:76:b0:f9:7e:30:49:ad:c5:d1:93:85:c0:
7f:ba:87:01:f1:7f:5a:d6:66:e3:b4:ae:a1:e6:34:
b0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:25:58:8A:A1:41:66:F1:D9:7D:52:95:AF:07:A0:FB:05:F3:E7:9F
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/gSVYiqFBZvHZfVKVrweg-wXz558.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.12.0/22
185.192.156.0/22
IPv6:
2a03:fe40::/32
Signature Algorithm: sha256WithRSAEncryption
96:cb:3c:13:c3:b0:f9:9f:db:03:3d:61:e5:63:59:33:ca:66:
cd:56:6e:23:ec:91:92:9e:fd:67:42:d6:bb:5f:f6:c2:2e:05:
20:86:a6:6a:55:9d:0c:01:d7:c0:73:3f:62:45:68:6c:58:fe:
14:1c:45:25:e0:2d:2d:da:50:7d:b0:4a:68:4f:79:74:8b:70:
6e:fa:16:39:ff:f3:8c:f2:b1:dd:a6:35:aa:c7:63:26:34:ed:
cc:98:f1:54:5f:3a:da:a0:bf:5e:d5:9b:51:35:6a:c5:02:65:
5a:c6:63:78:b5:2c:4a:16:aa:3e:1c:e2:b2:a6:1a:9d:34:c2:
25:89:bd:79:b8:2c:9c:1e:17:ae:4c:92:34:e2:8a:4e:54:64:
35:80:19:b5:7d:48:fa:9b:b6:32:c5:ca:d6:27:af:4d:25:97:
72:93:d9:80:b0:94:da:e9:9a:24:cb:30:08:4f:4d:4a:35:6f:
0a:17:73:1e:88:21:8b:77:d8:bb:83:8c:f2:9d:ef:f9:81:0c:
cd:f0:05:fc:dc:a5:96:5a:ac:2e:bc:bd:f9:a9:3e:64:9c:95:
dc:38:bc:e9:9e:a4:08:bc:78:60:01:35:9d:da:74:93:62:46:
97:75:de:0b:3a:de:07:f9:08:f9:7e:8c:da:ce:a7:17:e1:a8:
47:0d:71:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:26:58 2024 by rpki-client on console-fra.rpki-client.org