Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/gmycFOVg79B1p9kfMZdkuRm2-OU.roa
File: gmycFOVg79B1p9kfMZdkuRm2-OU.roa (raw, json)
Hash identifier: WYrJGhPQBSPsVLQZQIfLkNgQfrRZyjugG1SBKNYSIdg=
Subject key identifier: 82:6C:9C:14:E5:60:EF:D0:75:A7:D9:1F:31:97:64:B9:19:B6:F8:E5
Certificate issuer: /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial: 0187129B1DF64C1757E310F63CF61CCBBD5C
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/gmycFOVg79B1p9kfMZdkuRm2-OU.roa
Signing time: Fri 24 Mar 2023 07:52:48 +0000
ROA not before: Fri 24 Mar 2023 07:52:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59956
IP address blocks: 176.117.84.0/22 maxlen: 22
176.117.88.0/22 maxlen: 22
176.117.92.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:12:9b:1d:f6:4c:17:57:e3:10:f6:3c:f6:1c:cb:bd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Validity
Not Before: Mar 24 07:52:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=826c9c14e560efd075a7d91f319764b919b6f8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:08:e3:8e:29:ba:16:44:f6:09:48:e7:c9:ac:
8b:cf:90:bb:3a:67:b1:aa:d5:fa:51:4b:80:ac:d4:
83:5a:ac:8b:e0:b4:17:54:e4:a5:63:f6:28:7c:4c:
d8:77:bb:5d:f1:0b:2d:cb:31:bf:64:9b:86:58:2c:
fd:46:d1:a0:b3:da:99:4b:db:8a:c0:e3:90:a0:4f:
a2:19:06:cf:94:8f:18:e2:9a:57:e2:c3:66:7c:90:
c4:0b:e4:d7:d7:65:0c:3a:6d:58:fc:fd:2d:23:0b:
1e:2f:00:20:77:34:12:46:8e:37:22:99:73:00:d9:
f0:2c:0c:70:dc:bc:23:0f:73:27:fa:ac:0d:ae:ac:
3d:1f:27:32:d7:be:ea:b1:15:51:fb:de:4c:71:a4:
ce:77:e8:04:0e:10:91:e4:7b:ec:c3:82:4a:a2:0e:
7f:45:19:0c:b9:85:db:e1:ab:28:03:2a:59:6d:a9:
92:66:fd:a0:bc:1f:bb:4c:bf:08:11:f6:a5:2f:f7:
0f:77:40:72:5b:18:bb:2b:90:51:bd:73:c7:73:6d:
d0:75:13:30:df:cc:fd:9d:61:bc:8e:aa:21:23:a1:
68:2f:ee:7c:35:8d:45:3c:ba:9d:f2:ad:84:f6:0e:
7b:b4:49:ec:de:6e:e8:22:1a:d4:63:5c:8d:eb:46:
67:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6C:9C:14:E5:60:EF:D0:75:A7:D9:1F:31:97:64:B9:19:B6:F8:E5
X509v3 Authority Key Identifier:
keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/gmycFOVg79B1p9kfMZdkuRm2-OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.84.0-176.117.95.255
Signature Algorithm: sha256WithRSAEncryption
35:b2:6b:13:3f:1e:d6:e4:36:46:ba:68:7b:58:d1:4e:36:0e:
04:76:33:bb:4c:4d:d6:f2:e4:0e:2a:c4:46:03:78:d3:f7:73:
1b:5d:78:ca:71:11:b6:10:0f:1f:bd:49:cd:dd:d4:af:20:38:
0d:a8:83:bb:28:65:1c:70:b8:7f:97:f1:0a:e1:e9:2e:c7:af:
51:73:0a:a7:79:b8:bd:d1:a6:30:0e:40:a8:da:a0:63:ae:10:
b6:f7:0e:d6:8c:c6:02:f3:45:a7:de:d6:7d:88:7e:9a:6b:2f:
09:84:f2:f7:33:da:27:1d:e4:9f:ec:d5:2e:d2:59:e3:58:94:
25:a5:22:43:20:83:52:33:57:b3:1a:cf:ae:eb:d1:b2:f7:c1:
a2:c7:48:0e:aa:a4:c2:b0:e7:5b:74:92:6d:76:2f:d3:db:56:
db:c8:ee:57:a4:ce:2d:97:3c:b4:ea:e0:53:07:b0:9f:6b:4e:
b3:3c:7e:0b:c0:d0:f4:6f:48:9e:1f:84:16:a9:cd:99:0d:df:
80:76:5a:92:04:0f:59:b7:ec:5c:da:d4:ee:24:d7:75:34:a8:
73:3e:4d:2f:53:32:f0:a1:fe:8a:26:da:ea:de:22:36:f3:5e:
c5:a6:b1:35:a1:3b:58:91:c7:5d:42:3a:2c:f2:83:e3:86:76:
a1:9d:66:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:53 2023 by rpki-client on console-ams.rpki-client.org