Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/GZgKWBY6mmLE29cbEwdb2MkL1E8.roa
File: GZgKWBY6mmLE29cbEwdb2MkL1E8.roa (raw, json)
Hash identifier: PXhHeu16ctZuAj2E9q49GS3unWanr/Z65PpFTZ2jp5Y=
Subject key identifier: 19:98:0A:58:16:3A:9A:62:C4:DB:D7:1B:13:07:5B:D8:C9:0B:D4:4F
Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial: 018C98F2310A21FFDCE6DA839FDAFC7DD4C3
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/GZgKWBY6mmLE29cbEwdb2MkL1E8.roa
Signing time: Sat 23 Dec 2023 23:10:58 +0000
ROA not before: Sat 23 Dec 2023 23:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.39.188.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:98:f2:31:0a:21:ff:dc:e6:da:83:9f:da:fc:7d:d4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Validity
Not Before: Dec 23 23:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19980a58163a9a62c4dbd71b13075bd8c90bd44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:08:26:2f:cc:1b:0f:40:2c:c4:09:c0:2b:
06:e1:6a:de:a8:b8:77:7e:c5:97:2d:dd:cf:3d:9f:
dc:84:2d:5f:37:f4:81:65:22:52:cc:ee:14:91:bb:
fd:a2:6f:14:7c:03:3c:0c:3f:02:c2:e8:25:77:27:
c6:3f:a8:00:37:e4:3d:b5:99:f4:1a:b3:bc:fa:68:
f2:8d:fe:3b:35:7c:29:21:0f:33:a8:f6:d1:6b:38:
20:53:07:90:6d:d5:d1:51:21:95:ea:85:c8:25:0b:
58:e9:c6:95:b8:8c:51:6c:68:2b:8e:85:42:18:09:
f0:52:35:37:0a:94:ee:10:91:33:57:65:a6:d7:e9:
b0:e5:04:0e:e2:77:a3:0f:f0:d0:f7:47:67:2d:b8:
4f:e4:96:53:c9:3b:4f:18:f1:a7:2f:60:9d:d1:51:
01:22:f9:d9:45:6c:0a:5a:19:16:dd:7e:b2:df:f9:
47:90:c5:9a:8a:ed:4c:16:9f:c6:4e:d3:a6:1c:1f:
02:01:b8:65:a0:89:a7:c3:38:28:8d:25:6f:a1:95:
f3:e9:23:21:89:89:88:1a:df:87:4a:b0:1d:ea:1c:
26:7a:87:e7:4a:4f:b2:a0:54:10:5b:69:25:8d:af:
c7:ef:e7:7a:81:0b:72:92:b4:f5:e9:27:d6:1d:d4:
21:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:98:0A:58:16:3A:9A:62:C4:DB:D7:1B:13:07:5B:D8:C9:0B:D4:4F
X509v3 Authority Key Identifier:
keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/GZgKWBY6mmLE29cbEwdb2MkL1E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.188.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:18:9c:c0:a2:17:10:95:0a:75:e8:1d:f6:dd:99:34:91:bc:
0d:6e:78:2c:9b:b0:ee:30:af:fa:12:59:89:68:98:a4:36:e1:
08:b0:5f:2f:5b:33:46:3a:71:f7:f5:2e:02:41:ec:ef:81:8f:
9b:e4:c3:3d:43:5c:45:bb:14:a0:60:e0:8a:79:ed:31:50:b7:
ff:1a:e1:4d:5d:88:92:36:46:23:d5:67:a8:1c:d6:96:f1:90:
ad:a9:eb:fc:7d:d1:9b:47:2a:c5:43:ff:6f:4f:a3:e0:5b:e1:
00:83:b6:a2:c9:cd:89:a8:de:86:9e:cf:b2:85:97:02:55:d6:
06:a8:df:57:e5:4f:c5:03:73:7a:8d:22:47:26:dd:ff:08:a3:
68:60:bc:4e:83:a5:70:97:46:41:f5:c9:da:5b:fb:21:7f:82:
ef:91:c1:1e:4a:3e:8b:e3:58:0b:8a:46:d2:0f:67:b1:b2:e3:
42:40:2a:cd:6c:7b:8e:c9:cf:d4:37:6d:ff:7f:5f:ee:fe:5e:
1f:dc:c3:93:f2:5b:69:20:93:3d:d7:b6:c2:7b:34:7d:ba:ce:
47:92:37:6a:d6:54:20:6f:5f:a6:c2:61:49:a6:70:86:53:8f:
bc:87:e9:39:97:11:a5:2a:02:1f:34:10:f5:be:7d:1a:fd:78:
4b:18:ed:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:26 2024 by rpki-client on console-fra.rpki-client.org