Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GKCeeZQ_xesrO3V3nkcYFNYdRy4.roa
File: GKCeeZQ_xesrO3V3nkcYFNYdRy4.roa (raw, json)
Hash identifier: jkaiPe9IW2ujBMftXuJSqLXE5G8cq6Svn0DJs2eiJ+g=
Subject key identifier: 18:A0:9E:79:94:3F:C5:EB:2B:3B:75:77:9E:47:18:14:D6:1D:47:2E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01915FD3D33B80137BD62F6BFD3623B4A924
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GKCeeZQ_xesrO3V3nkcYFNYdRy4.roa
Signing time: Sat 17 Aug 2024 10:13:23 +0000
ROA not before: Sat 17 Aug 2024 10:13:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 93.123.74.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 20:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5f:d3:d3:3b:80:13:7b:d6:2f:6b:fd:36:23:b4:a9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 17 10:13:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18a09e79943fc5eb2b3b75779e471814d61d472e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:87:5e:e7:f5:40:90:e2:12:53:54:3c:8e:
ce:61:70:ab:0c:08:8f:af:03:5c:78:2a:e9:5c:88:
2b:21:e9:97:96:8f:ba:1d:cc:26:87:6c:2a:2e:85:
10:d5:64:02:c9:2f:36:0b:21:21:3f:c3:6d:7b:cd:
03:cf:6e:ce:5c:8a:74:17:f0:4e:cb:c8:cd:f2:64:
40:fd:26:99:c6:f2:b2:60:3e:dc:7e:a5:e6:ad:98:
40:45:e2:2c:b9:50:80:ad:71:ef:ce:76:5d:a4:d7:
91:04:b0:30:e1:8f:6c:49:3e:90:46:01:23:30:1a:
06:b2:3a:42:e4:1c:0a:1a:d1:e9:a5:6d:4c:75:01:
13:d7:af:b1:52:50:da:e4:e1:33:72:80:c2:4b:0e:
73:d6:64:75:a3:06:bd:2b:6a:e8:35:b9:11:46:10:
25:ec:c2:53:03:7f:97:b8:e3:71:2b:48:a2:0e:21:
d4:28:49:af:9a:2d:0b:0a:24:e8:08:9f:74:c3:b6:
b8:f4:5c:13:dd:e1:5b:c8:d7:26:28:01:a6:bf:13:
88:2c:36:7d:78:05:e7:1a:d3:1c:6b:21:a7:f4:cd:
49:c7:ab:e2:a7:ce:f0:52:fa:8c:cc:9d:a7:ed:93:
2b:77:2b:48:2b:ec:21:80:fd:e0:67:f7:56:f5:58:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A0:9E:79:94:3F:C5:EB:2B:3B:75:77:9E:47:18:14:D6:1D:47:2E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GKCeeZQ_xesrO3V3nkcYFNYdRy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.74.0/24
193.58.122.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:25:3c:ea:c7:85:36:43:de:fa:91:8f:17:74:22:37:f7:19:
f0:28:11:a0:a0:7b:5f:5d:ce:10:fe:0a:50:10:8a:20:12:a9:
82:8b:90:6b:08:cb:d8:72:44:d9:28:d4:a0:ed:b0:95:53:45:
e2:c5:3b:4e:bb:42:d3:d9:1e:04:89:d6:a9:e3:ec:d4:47:08:
ef:a9:fe:c1:ff:fa:bc:e0:0e:2b:07:52:f0:a2:eb:1c:dd:dd:
9b:3f:99:53:a8:8d:98:59:dc:17:b9:92:76:93:cd:56:00:ea:
97:46:62:41:bb:f0:35:2a:22:4e:31:de:f9:69:2a:10:7e:39:
ef:0a:8c:60:f1:a5:db:e4:81:33:93:6b:4e:28:ac:82:e1:f1:
5b:90:24:74:b3:e0:0c:8c:a5:94:a7:c5:df:b1:ef:c4:f2:52:
67:c2:4b:6b:5e:f1:5f:14:2f:91:12:92:29:4a:4c:92:4e:14:
40:bc:9c:92:12:dd:c3:b1:ab:2c:64:09:7f:9e:4d:93:54:bb:
78:b0:4f:a6:d4:22:c8:e8:7e:5f:2d:f8:67:2c:de:17:1d:82:
b4:98:27:34:20:18:0c:2b:26:a8:de:b8:5f:c9:2b:c0:19:36:
46:34:48:9a:7a:63:fe:49:6d:27:13:1f:6c:cf:b8:73:8a:37:
61:2d:12:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 21:08:47 2024 by rpki-client on console-fra.rpki-client.org