Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/GbufDV3Cpi8_ZD4zFW5Iz7wLG2c.roa
File: GbufDV3Cpi8_ZD4zFW5Iz7wLG2c.roa (raw, json)
Hash identifier: GDHvTvEJCpgc/bo3caB0u2P9HFijcfgyvCKWPYkFCY0=
Subject key identifier: 19:BB:9F:0D:5D:C2:A6:2F:3F:64:3E:33:15:6E:48:CF:BC:0B:1B:67
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018CC94E0C2E18A1E030BFEB4C095D60ACCF
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/GbufDV3Cpi8_ZD4zFW5Iz7wLG2c.roa
Signing time: Tue 02 Jan 2024 08:33:04 +0000
ROA not before: Tue 02 Jan 2024 08:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212422
IP address blocks: 193.59.95.0/24 maxlen: 24
193.59.98.0/24 maxlen: 24
193.59.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 07:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:0c:2e:18:a1:e0:30:bf:eb:4c:09:5d:60:ac:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 2 08:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19bb9f0d5dc2a62f3f643e33156e48cfbc0b1b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:bc:39:97:94:ed:3d:2a:03:8b:b7:a3:ce:
99:c5:e6:64:19:3c:5a:04:20:00:ae:ba:0f:e3:7e:
97:d7:29:09:72:c7:c0:0f:14:0f:29:02:c9:d9:0f:
4e:09:4f:46:29:e6:3a:d3:ff:e7:71:d1:e2:78:ee:
92:cd:f1:55:dc:a8:d1:6d:e5:6d:9a:ac:3f:f9:b3:
e1:35:67:03:d3:d9:92:e3:ca:65:99:48:c5:db:5d:
4b:f5:c5:0b:78:02:1b:8d:1b:e5:28:af:1b:73:a9:
06:7f:1d:01:e1:49:97:73:eb:bc:fe:a6:fa:4f:2a:
2e:65:53:79:d3:3f:d5:03:7a:9e:a2:32:82:3c:50:
72:fb:6f:30:40:40:57:dd:95:0e:93:9c:e2:f2:c9:
49:e9:53:55:ab:a7:c2:1c:9b:2f:3e:f8:a7:fa:9f:
be:fa:ba:ae:32:6b:c8:36:e6:98:1f:f0:32:f4:f6:
e0:74:07:32:28:41:75:c3:ed:99:f3:00:a1:7c:4e:
ac:c2:ac:dc:a0:72:6e:cf:05:d0:cf:3d:b1:e5:ce:
1d:b8:ed:37:d0:e0:12:a5:c1:c1:15:30:9d:dc:9a:
bc:f1:ae:77:d0:38:c6:9a:7f:0b:13:6e:2e:32:5a:
31:69:35:23:07:75:b9:77:04:f4:5a:dd:b7:51:89:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:9F:0D:5D:C2:A6:2F:3F:64:3E:33:15:6E:48:CF:BC:0B:1B:67
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/GbufDV3Cpi8_ZD4zFW5Iz7wLG2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.94.0/23
193.59.98.0/24
Signature Algorithm: sha256WithRSAEncryption
74:9d:7b:4c:8a:f7:2b:50:7f:8d:5e:84:21:30:0c:b0:e3:c0:
f7:9d:a7:93:04:8a:94:5c:13:f7:bd:08:4a:0b:5e:64:b4:74:
2a:1b:5c:b1:ce:c5:10:f7:f3:1a:d1:7f:90:75:9c:42:62:b0:
e3:68:2d:0b:dc:6f:74:fb:ec:2a:03:7e:77:7d:76:07:0f:e3:
a9:ae:9e:d8:68:a9:50:a0:ef:ae:2e:92:f2:94:7e:62:c7:1d:
ba:71:e0:a1:99:7a:76:23:93:2d:03:bc:ac:ff:e5:58:69:55:
bc:72:76:9b:e8:ea:90:46:47:1c:1a:f1:94:bd:f6:87:7b:c0:
33:a1:b3:71:5a:eb:d7:4f:79:70:5e:bb:b2:c9:e0:4b:ea:54:
35:75:cc:5f:48:e3:1e:ee:ac:f7:e3:89:1d:90:1d:bf:4a:c2:
21:eb:36:d8:bf:b5:02:29:78:44:fb:df:0b:2a:87:42:ee:54:
ac:9b:f4:50:7f:9b:5d:ca:f8:10:b9:b8:1b:8c:c5:c6:50:11:
86:14:43:21:4a:98:2f:5b:9d:10:13:6f:e7:0c:2a:2d:96:a5:
02:bf:a4:0f:e4:ef:ea:67:21:9b:47:bb:96:53:52:f9:0d:6b:
a7:4b:c6:2c:73:7c:17:99:2e:bf:01:8c:c0:1e:47:b7:95:42:
00:20:6e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 08:49:57 2024 by rpki-client on console-fra.rpki-client.org