Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gmmwXllpZaNftzrOAlJ6cBDFqBo.roa
File: gmmwXllpZaNftzrOAlJ6cBDFqBo.roa (raw, json)
Hash identifier: NMb2kDcSYwYhfkzpMEPhedWxREo9bKRZjHM22id1y18=
Subject key identifier: 82:69:B0:5E:59:69:65:A3:5F:B7:3A:CE:02:52:7A:70:10:C5:A8:1A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B19EB592350032A90BEC047B3F82105C4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gmmwXllpZaNftzrOAlJ6cBDFqBo.roa
Signing time: Tue 10 Oct 2023 14:08:55 +0000
ROA not before: Tue 10 Oct 2023 14:08:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 195.178.111.0/24 maxlen: 24
45.8.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:eb:59:23:50:03:2a:90:be:c0:47:b3:f8:21:05:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 10 14:08:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8269b05e596965a35fb73ace02527a7010c5a81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:c5:6d:07:85:1a:bb:4c:f4:ab:0f:d8:d1:
13:05:19:bd:00:93:4f:78:a9:ac:25:80:d6:24:64:
58:a3:13:25:9c:6e:8b:63:64:5f:18:8b:f2:00:6e:
13:1b:7c:18:8d:89:8a:39:29:03:b6:7e:4c:da:f2:
0b:fb:c5:b7:4a:55:0b:eb:2b:7d:a2:91:07:63:37:
aa:50:a5:ad:b2:14:51:25:39:c3:30:05:b0:06:2c:
61:10:37:2f:65:90:d9:fe:22:a5:e8:83:00:66:c8:
63:99:45:d3:f2:eb:f1:b6:f5:ef:6c:0a:54:9e:f2:
f2:54:03:4c:6b:e1:49:af:1d:d0:aa:24:47:a6:08:
99:6d:6d:2b:18:7e:41:b0:69:8d:52:41:68:9c:aa:
65:8c:98:06:f1:2d:35:d7:38:44:4b:28:02:de:75:
96:0d:6a:01:16:c5:22:68:19:e3:40:df:36:a6:ad:
4f:8e:2a:2c:79:eb:8c:e2:74:14:d5:bf:ee:9e:19:
25:23:54:1c:d9:2e:b9:60:9a:c9:40:d9:37:a1:9f:
52:62:65:8c:0b:12:f2:60:74:56:c2:23:bc:fb:04:
d4:57:43:fe:61:24:60:ca:82:4d:a6:da:73:b0:33:
b8:a8:d8:9d:12:9c:30:5a:e9:2f:25:fe:d1:ae:f2:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:69:B0:5E:59:69:65:A3:5F:B7:3A:CE:02:52:7A:70:10:C5:A8:1A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gmmwXllpZaNftzrOAlJ6cBDFqBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/24
195.178.111.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:44:3a:b1:37:cc:57:8f:25:ff:20:95:0e:ed:37:40:f4:3a:
2e:d3:44:4b:bb:35:0c:1f:a3:92:66:3a:c4:ba:30:c2:9b:1b:
d3:78:28:17:2f:1b:54:0e:eb:66:eb:5d:3d:24:7b:fd:e3:4a:
b8:ef:3d:90:03:2e:5d:a3:be:40:1c:3a:47:58:15:91:f1:bb:
4b:97:3e:7b:4f:06:cf:d6:fb:3f:90:94:73:1e:30:d0:3b:ca:
8d:45:ef:e3:0c:18:db:49:79:23:d0:db:0f:88:a4:c7:a7:67:
ca:35:f3:5a:58:c9:07:02:7a:ce:da:ab:22:33:b2:41:b3:4a:
a1:26:ed:19:a7:2f:05:95:a4:8e:c4:b8:63:f6:85:19:87:c8:
6a:ff:68:ce:5e:45:5a:36:48:49:c2:1b:ce:5d:f9:f5:6a:1f:
b6:20:9a:ba:47:a4:19:0e:e2:fa:55:3d:2b:53:3d:1e:49:3f:
ff:e9:33:34:47:31:ae:63:da:6a:67:32:a6:8d:7a:e3:c8:7d:
fb:a1:99:be:30:bb:04:1d:fd:7e:e4:61:17:aa:8d:bf:53:d1:
35:e9:32:eb:1d:a7:35:60:80:85:26:e5:6b:b9:8e:b3:fd:cc:
4b:7f:95:0a:90:a7:ec:9d:5e:2b:0a:14:a8:c4:80:b2:32:e8:
6a:4b:9e:da
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYsZ61kjUAMqkL7AR7P4IQXEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMDEwMTQwODU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjY5YjA1ZTU5Njk2NWEzNWZiNzNhY2UwMjUyN2E3MDEwYzVhODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUTFbQeFGrtM9KsP2NETBRm9AJNP
eKmsJYDWJGRYoxMlnG6LY2RfGIvyAG4TG3wYjYmKOSkDtn5M2vIL+8W3SlUL6yt9
opEHYzeqUKWtshRRJTnDMAWwBixhEDcvZZDZ/iKl6IMAZshjmUXT8uvxtvXvbApU
nvLyVANMa+FJrx3QqiRHpgiZbW0rGH5BsGmNUkFonKpljJgG8S011zhESygC3nWW
DWoBFsUiaBnjQN82pq1PjioseeuM4nQU1b/unhklI1Qc2S65YJrJQNk3oZ9SYmWM
CxLyYHRWwiO8+wTUV0P+YSRgyoJNptpzsDO4qNidEpwwWukvJf7RrvIG7QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIJpsF5ZaWWjX7c6zgJSenAQxagaMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZ21td1hsbHBaYU5mdHpyT0FsSjZjQkRGcUJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQheAwQA
w7JvMA0GCSqGSIb3DQEBCwUAA4IBAQCuRDqxN8xXjyX/IJUO7TdA9Dou00RLuzUM
H6OSZjrEujDCmxvTeCgXLxtUDutm6109JHv940q47z2QAy5do75AHDpHWBWR8btL
lz57TwbP1vs/kJRzHjDQO8qNRe/jDBjbSXkj0NsPiKTHp2fKNfNaWMkHAnrO2qsi
M7JBs0qhJu0Zpy8FlaSOxLhj9oUZh8hq/2jOXkVaNkhJwhvOXfn1ah+2IJq6R6QZ
DuL6VT0rUz0eST//6TM0RzGuY9pqZzKmjXrjyH37oZm+MLsEHf1+5GEXqo2/U9E1
6TLrHac1YICFJuVruY6z/cxLf5UKkKfsnV4rChSoxICyMuhqS57a
-----END CERTIFICATE-----
Generated at Thu Nov 30 01:06:23 2023 by rpki-client on console-ams.rpki-client.org