Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GYPorwG5l20rKETZn3-4lmWZLLg.roa
File: GYPorwG5l20rKETZn3-4lmWZLLg.roa (raw, json)
Hash identifier: 4bbUPBurlBMilK5VAL/hvMNgyQWVrFrB6Bo3VVMou0M=
Subject key identifier: 19:83:E8:AF:01:B9:97:6D:2B:28:44:D9:9F:7F:B8:96:65:99:2C:B8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D8205B331AAD591F7247A7B07988E04
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GYPorwG5l20rKETZn3-4lmWZLLg.roa
Signing time: Sun 01 Jan 2023 13:25:15 +0000
ROA not before: Sun 01 Jan 2023 13:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202685
IP address blocks: 193.35.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:82:05:b3:31:aa:d5:91:f7:24:7a:7b:07:98:8e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1983e8af01b9976d2b2844d99f7fb89665992cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5b:8b:e9:27:e7:7d:9e:a8:4f:3c:97:dc:93:
ac:13:42:82:df:f6:d1:bc:0b:3c:09:61:6c:75:7f:
0c:bb:cd:35:d1:a1:3b:e8:65:a7:59:ea:19:e4:84:
1a:8c:1b:7b:ee:5d:43:d2:ad:48:6f:b5:ed:4b:d7:
e1:62:6a:7e:85:73:9d:c0:ac:f9:31:47:8f:2f:aa:
8d:94:e8:86:4f:61:5e:e0:1d:ec:21:4b:aa:65:05:
ce:23:15:87:d4:e0:e9:41:7b:ad:3f:63:cc:90:f9:
8c:46:89:86:36:1c:18:7c:73:0c:83:e9:4c:bf:5e:
26:2b:f2:e7:82:73:eb:eb:b1:ab:79:5d:b3:6c:ab:
6f:06:9c:d0:f5:4e:56:e0:38:82:39:fd:bc:cb:70:
8d:1d:95:99:4c:5f:6f:69:3e:7a:77:22:27:0c:6d:
e3:d2:fb:c2:35:f2:35:1b:c7:ae:ae:f0:26:d1:09:
cb:97:f3:56:ae:45:cd:b2:96:fb:ce:a2:94:ce:e7:
50:40:6e:eb:98:e4:e1:d4:74:40:1e:9a:40:fa:c8:
3b:4d:9e:11:c2:a2:48:05:9b:fa:c8:e7:16:73:df:
35:ad:c2:ac:57:34:c6:92:b6:cc:aa:99:b2:a1:2e:
25:f0:16:5f:9a:7e:f3:be:43:bd:94:4d:b1:e1:8d:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:83:E8:AF:01:B9:97:6D:2B:28:44:D9:9F:7F:B8:96:65:99:2C:B8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GYPorwG5l20rKETZn3-4lmWZLLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.18.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e2:ba:51:d8:bc:2c:56:7d:72:13:a3:42:55:b5:ba:b4:7d:
7f:25:69:bb:7e:92:a9:aa:00:45:b7:1a:68:b6:14:37:4d:9a:
4a:e1:cf:bd:4b:8e:c1:01:f9:82:92:6c:83:8a:b3:9d:a9:51:
21:5e:da:21:46:91:f0:c3:f9:75:af:6a:2c:9d:e9:70:6e:ae:
50:5a:5e:3a:7a:de:32:ba:0c:3e:93:82:25:e3:5c:3c:d5:1c:
14:8f:18:76:02:fe:18:24:0a:52:b9:63:54:07:b1:84:b2:90:
64:8b:3c:5f:cf:7a:17:5c:6d:98:6c:67:01:60:9a:cf:9b:f0:
57:3d:28:8f:a5:ef:23:63:a9:c2:24:67:4e:4a:f6:d0:3e:7b:
63:50:37:ec:c0:c0:7b:ba:67:20:1c:88:85:66:74:7d:68:15:
8f:a5:be:82:13:24:05:0f:93:90:3c:1b:c7:f4:03:87:c8:9e:
52:42:c9:f9:bf:48:e9:62:28:55:cf:f1:cb:71:90:70:45:b6:
9f:12:88:c8:86:12:27:f2:91:1c:04:5d:a9:72:2b:3c:6c:b7:
85:28:11:67:f8:d1:99:2d:58:fe:b9:f9:57:f9:c7:04:ee:50:
60:bf:5f:c7:d0:24:f0:70:55:a5:b1:39:80:4f:77:5f:64:49:
c6:68:8e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org