Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/GeRg3D4JfwJXEPcMy50ZN4up0LM.roa
File: GeRg3D4JfwJXEPcMy50ZN4up0LM.roa (raw, json)
Hash identifier: 9XaQ4Ojuxm4wBT0cAPQvd41lDGliS7/IqDp0UekPZHY=
Subject key identifier: 19:E4:60:DC:3E:09:7F:02:57:10:F7:0C:CB:9D:19:37:8B:A9:D0:B3
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF75229198280B76273C268B6FE0FD
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/GeRg3D4JfwJXEPcMy50ZN4up0LM.roa
Signing time: Sun 01 Jan 2023 15:24:47 +0000
ROA not before: Sun 01 Jan 2023 15:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199845
IP address blocks: 193.59.208.0/24 maxlen: 24
193.59.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:75:22:91:98:28:0b:76:27:3c:26:8b:6f:e0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19e460dc3e097f025710f70ccb9d19378ba9d0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:42:51:fc:da:60:da:d7:b3:2b:e7:6b:9b:
00:6e:8a:48:f9:86:6a:bf:01:50:eb:8e:ce:b3:99:
15:2b:87:f8:c8:1b:48:3c:49:fd:10:5c:3b:1c:32:
ba:f0:17:5d:1f:80:68:00:55:ed:05:d0:a3:19:97:
aa:84:09:57:d9:dc:f7:20:56:73:fc:0a:a1:7a:62:
79:58:dc:cb:f0:e6:b5:51:03:9d:b3:24:3c:b7:5f:
c6:7a:c6:eb:59:7b:83:3f:4d:b2:6d:50:c8:e1:81:
4c:52:e1:b0:b0:48:b5:5d:9d:c8:2e:d3:7a:31:06:
78:b4:61:f4:a4:6e:2a:0b:59:cf:e4:0d:09:21:f3:
bb:ba:b6:41:fb:8d:b5:fd:18:32:e0:d3:83:dd:96:
7f:4c:bf:6f:db:13:e5:22:9f:6e:12:8b:47:72:26:
2c:35:06:c0:f8:c6:63:fe:d4:6c:c4:c2:d6:70:d4:
72:52:ac:01:4b:26:e0:59:fb:96:83:a2:36:65:50:
16:e9:7d:e5:63:f1:d0:3e:0f:9f:a7:69:e8:35:f5:
90:41:01:aa:54:b8:bf:85:c1:ac:6b:95:f3:d2:3f:
1f:86:4a:dc:15:3d:c3:f7:9f:88:6d:7b:b1:04:15:
fa:9f:c0:f6:43:fd:8b:4c:cc:46:4b:a4:c5:b9:35:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E4:60:DC:3E:09:7F:02:57:10:F7:0C:CB:9D:19:37:8B:A9:D0:B3
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/GeRg3D4JfwJXEPcMy50ZN4up0LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.207.0-193.59.208.255
Signature Algorithm: sha256WithRSAEncryption
33:bd:c7:b5:31:7f:27:cd:a2:0d:15:0e:a2:fa:bc:ac:27:f1:
88:ef:22:87:fb:ae:d0:a4:68:ac:17:6b:89:0c:7e:9e:f8:da:
30:fc:6f:2e:90:3b:40:3e:d2:75:93:81:df:1a:37:a4:dc:c1:
65:b0:5d:db:02:94:9e:53:30:7a:77:06:7c:30:a9:82:cd:fe:
83:1b:21:43:a4:ea:4a:08:5e:8f:e3:d8:36:32:a6:b8:46:8f:
32:a7:b5:6c:dc:03:79:9c:3b:3c:29:e8:1a:53:40:b7:24:f8:
0a:88:ba:de:36:e4:d9:2e:fb:da:33:73:5d:d8:e8:88:83:39:
e1:25:23:fa:f2:c9:84:84:51:c5:78:28:b6:5a:de:68:38:9b:
e9:25:7d:f5:76:59:81:77:e8:fa:e0:8d:a3:23:3e:61:ea:75:
72:40:44:a2:90:ee:72:66:e3:93:1a:1d:e9:f6:8a:a7:9c:fc:
11:ce:9b:ef:39:88:e4:be:e4:55:f6:d5:ca:70:db:20:79:3e:
95:70:69:8b:ff:5f:90:a3:45:61:f6:f4:7a:d7:8b:80:5f:6a:
36:e1:9b:d8:6d:ad:d1:1a:c1:30:59:f9:41:1a:aa:ec:0d:8f:
c0:b1:68:e7:8e:f5:5b:6d:71:47:5c:3c:56:ef:33:02:e0:ec:
0f:4e:a3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org