Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/GTu-nuPyzX72GQ-9arEJGq6IArg.roa
File: GTu-nuPyzX72GQ-9arEJGq6IArg.roa (raw, json)
Hash identifier: a09H/T9BMhLWzgyyVLxBYNIGeDFrAB6Fn2ELUFMBY2I=
Subject key identifier: 19:3B:BE:9E:E3:F2:CD:7E:F6:19:0F:BD:6A:B1:09:1A:AE:88:02:B8
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 018570306AB53B46841073023F7A95820BEB
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/GTu-nuPyzX72GQ-9arEJGq6IArg.roa
Signing time: Mon 02 Jan 2023 01:54:59 +0000
ROA not before: Mon 02 Jan 2023 01:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48076
IP address blocks: 185.62.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:6a:b5:3b:46:84:10:73:02:3f:7a:95:82:0b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 2 01:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=193bbe9ee3f2cd7ef6190fbd6ab1091aae8802b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:93:df:ac:0d:32:06:5d:0e:40:1b:98:c6:
49:7d:ed:c9:b8:19:4c:30:2d:18:59:32:7c:fc:46:
8c:9b:ec:1a:1a:c9:94:50:d0:0d:d3:88:95:b4:54:
51:4e:8c:f6:22:a5:4b:3b:12:00:78:4d:d4:64:f2:
bd:e7:ab:97:80:3a:ef:46:24:2b:ab:8b:fd:65:74:
08:56:fd:36:34:82:8b:e8:e7:6a:b7:79:c6:cb:4d:
2b:9f:56:e7:50:f3:89:4e:4a:25:56:61:90:68:ea:
c5:cc:bd:e4:64:7c:02:ce:27:72:c8:bc:9d:42:fa:
66:82:9a:7b:51:e5:3e:99:f8:e6:54:ee:0b:20:15:
c3:d5:ca:2c:64:4a:fc:7c:49:77:2b:f1:82:01:d2:
0d:90:31:26:45:20:63:94:23:66:9f:6c:5f:c8:cd:
57:8a:2d:1c:5e:b2:66:31:9f:2b:d4:e8:05:ed:7a:
b3:23:54:c0:dd:7b:00:0c:a3:23:59:7b:7a:cc:5f:
db:af:0e:94:33:42:05:d1:c9:92:f2:34:42:97:c9:
05:e4:85:e8:2f:31:34:a1:fa:3e:18:bf:03:46:6c:
7a:95:1c:bc:59:ad:fd:45:99:a8:cc:c5:b1:d5:df:
26:b7:29:1a:9d:24:65:a8:0b:14:e2:05:14:03:e0:
08:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3B:BE:9E:E3:F2:CD:7E:F6:19:0F:BD:6A:B1:09:1A:AE:88:02:B8
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/GTu-nuPyzX72GQ-9arEJGq6IArg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.102.0/24
Signature Algorithm: sha256WithRSAEncryption
31:48:11:19:4c:15:6e:fa:06:5c:43:c4:0e:a1:81:1a:95:3e:
d8:51:54:3b:d6:90:b7:30:0d:b1:f3:75:ae:64:26:6c:64:ba:
e2:2d:96:c4:67:0f:32:88:84:07:3f:fe:9c:7e:b7:c3:63:e0:
32:33:20:7d:40:32:86:b3:f9:e3:5d:bd:cc:5b:86:7d:c1:d2:
e7:93:02:e7:d5:08:d3:8f:1b:4e:86:a3:1e:79:43:ed:3f:a2:
d9:04:14:c5:42:c6:1e:ea:49:85:f1:0e:6b:b6:d7:ab:54:ca:
98:fc:49:44:22:f8:9c:7e:49:3b:d3:ad:70:12:8b:86:76:a2:
cd:f0:ef:e7:0c:5d:d4:7c:15:88:66:75:68:77:fe:f7:5e:ba:
cf:1f:a2:3b:74:86:0a:73:b0:74:12:02:d9:9c:09:fb:ae:64:
4f:51:0e:dc:70:06:1e:68:1a:46:43:7f:3a:e0:70:5e:a4:90:
b8:25:ce:24:20:0e:13:e8:cc:74:da:bc:2f:ff:dc:36:c9:d8:
5b:f3:70:9c:30:d2:83:54:86:19:d2:2b:28:fd:01:5e:ee:35:
8f:7d:9b:87:ad:75:4a:82:0c:50:89:9d:10:da:f4:f1:a4:88:
37:4e:27:09:20:b5:70:00:28:90:01:2f:d1:21:8e:c4:15:01:
53:d5:64:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwMGq1O0aEEHMCP3qVggvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTQzMmE0ZWMzYjBhYzRjYTRlNGVjZWMwZTlmNGQ0NmI0
OTdhZjAwHhcNMjMwMTAyMDE1NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTNiYmU5ZWUzZjJjZDdlZjYxOTBmYmQ2YWIxMDkxYWFlODgwMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A6T36wNMgZdDkAbmMZJfe3JuBlM
MC0YWTJ8/EaMm+waGsmUUNAN04iVtFRRToz2IqVLOxIAeE3UZPK956uXgDrvRiQr
q4v9ZXQIVv02NIKL6Odqt3nGy00rn1bnUPOJTkolVmGQaOrFzL3kZHwCzidyyLyd
Qvpmgpp7UeU+mfjmVO4LIBXD1cosZEr8fEl3K/GCAdINkDEmRSBjlCNmn2xfyM1X
ii0cXrJmMZ8r1OgF7XqzI1TA3XsADKMjWXt6zF/brw6UM0IF0cmS8jRCl8kF5IXo
LzE0ofo+GL8DRmx6lRy8Wa39RZmozMWx1d8mtykanSRlqAsU4gUUA+AIUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBk7vp7j8s1+9hkPvWqxCRquiAK4MB8GA1UdIwQY
MBaAFF2kMqTsOwrEyk5OzsDp9NRrSXrwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2Ut
MWJhNTQzZWVhZWQ3LzEvR1R1LW51UHl6WDcyR1EtOWFyRUpHcTZJQXJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2UtMWJhNTQzZWVhZWQ3
LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT5mMA0G
CSqGSIb3DQEBCwUAA4IBAQAxSBEZTBVu+gZcQ8QOoYEalT7YUVQ71pC3MA2x83Wu
ZCZsZLriLZbEZw8yiIQHP/6cfrfDY+AyMyB9QDKGs/njXb3MW4Z9wdLnkwLn1QjT
jxtOhqMeeUPtP6LZBBTFQsYe6kmF8Q5rtterVMqY/ElEIvicfkk7061wEouGdqLN
8O/nDF3UfBWIZnVod/73XrrPH6I7dIYKc7B0EgLZnAn7rmRPUQ7ccAYeaBpGQ386
4HBepJC4Jc4kIA4T6Mx02rwv/9w2ydhb83CcMNKDVIYZ0iso/QFe7jWPfZuHrXVK
ggxQiZ0Q2vTxpIg3TicJILVwACiQAS/RIY7EFQFT1WSl
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:22 2024 by rpki-client on console-fra.rpki-client.org