Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/gAFmDSSCFWmBmSaQQXOzQemUilo.roa
File: gAFmDSSCFWmBmSaQQXOzQemUilo.roa (raw, json)
Hash identifier: Z0VRY8uFY+FofjVnmhXJTBCaIyy3hLEmw+kq+awPQUQ=
Subject key identifier: 80:01:66:0D:24:82:15:69:81:99:26:90:41:73:B3:41:E9:94:8A:5A
Certificate issuer: /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial: 0185707966D058DF42600F0F7FC5A76E14BE
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/gAFmDSSCFWmBmSaQQXOzQemUilo.roa
Signing time: Mon 02 Jan 2023 03:14:42 +0000
ROA not before: Mon 02 Jan 2023 03:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3301
IP address blocks: 193.188.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Dec 2023 09:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:66:d0:58:df:42:60:0f:0f:7f:c5:a7:6e:14:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
Validity
Not Before: Jan 2 03:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8001660d24821569819926904173b341e9948a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:da:2f:5b:82:97:59:dc:a8:cc:71:62:d9:4e:
0a:04:98:d0:5a:b9:bf:a2:47:6f:0d:81:64:d3:5b:
7c:ad:03:ee:3c:0f:f9:8c:18:f0:cf:7e:8d:d8:e7:
8c:d4:20:ac:c2:97:7b:2f:01:9c:7a:51:8a:3b:a8:
30:fc:11:c2:29:f0:c6:5b:b3:3d:8e:c9:cc:4c:24:
bd:dd:e8:88:c5:f4:3f:24:59:14:42:89:e0:bc:12:
a3:f9:33:6b:2f:e1:d3:2a:3b:82:b5:20:a9:30:f3:
5d:d9:1d:0d:72:ae:ba:19:70:7b:47:7f:9d:15:d5:
67:0b:3d:00:c9:9a:3f:07:98:ab:fa:a9:a1:20:55:
ca:64:90:cc:82:b7:e3:b3:fc:8e:3c:28:db:1c:f3:
f8:49:c7:b3:15:c7:57:a3:26:4a:d9:6a:97:f5:e8:
1e:a1:bd:ef:48:10:24:31:da:56:e6:4a:c6:cf:d4:
ee:01:a5:52:57:86:0d:ae:9f:3b:3d:fd:ad:94:9a:
33:8d:c1:e6:f2:06:bb:83:40:45:83:78:78:45:c4:
02:6a:8e:27:b6:08:29:33:5d:a6:fc:89:9f:1b:ef:
08:6a:9a:5c:40:1e:85:47:85:45:d2:f5:2e:37:5a:
23:82:e4:97:87:ab:dc:9e:15:6b:58:c6:98:0a:b5:
e9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:01:66:0D:24:82:15:69:81:99:26:90:41:73:B3:41:E9:94:8A:5A
X509v3 Authority Key Identifier:
keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/gAFmDSSCFWmBmSaQQXOzQemUilo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.248.0/24
Signature Algorithm: sha256WithRSAEncryption
59:41:8f:51:bf:37:cf:34:2e:74:67:85:6c:88:5c:7f:c8:e0:
76:2f:60:28:e4:e4:38:6f:a0:e6:17:36:8a:5c:4a:8a:e0:19:
85:66:3e:91:ec:08:66:25:f8:f8:d2:5d:81:2f:b5:3a:12:f2:
8b:31:0e:7e:0d:00:33:10:1b:68:b9:44:2c:13:28:2a:47:7d:
71:33:c4:38:59:be:6b:13:88:1d:af:36:09:7d:6e:90:e2:4c:
59:15:70:f7:87:82:d0:e4:ac:9d:71:da:c6:24:ee:b9:9e:5d:
38:28:3d:63:4e:6b:6e:40:bc:d9:a1:bc:17:0a:3a:6c:79:b6:
be:bc:50:b8:47:a4:af:32:a4:dd:14:dc:bf:55:c7:ec:4e:cf:
d3:cc:58:61:e5:02:a6:b6:c0:66:7d:3c:0a:b0:15:1a:b5:b1:
15:62:be:72:4c:98:03:03:fe:63:5c:5c:0e:67:e0:5a:48:ee:
3c:bf:c7:6f:a7:cc:9e:d0:70:29:ee:6c:ff:43:cf:f5:9e:c8:
75:6f:8e:25:46:b2:65:c2:70:31:f0:fa:2e:4b:a2:0f:ed:88:
c2:a6:25:54:f4:4d:15:e1:40:ad:37:3e:f0:d1:b8:fc:0b:0c:
f6:bb:3d:d4:be:84:90:59:51:e5:8e:d5:bf:62:6c:c0:0a:07:
33:30:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:44 2024 by rpki-client on console-ams.rpki-client.org