Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/GG6pkQ65tfBO0mz1T3shE1Xcftk.roa
File: GG6pkQ65tfBO0mz1T3shE1Xcftk.roa (raw, json)
Hash identifier: pmkyiDbvBcnzVYQry+pBdyRtHt2OE8t70JE1s8uzXW4=
Subject key identifier: 18:6E:A9:91:0E:B9:B5:F0:4E:D2:6C:F5:4F:7B:21:13:55:DC:7E:D9
Certificate issuer: /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Certificate serial: 01856F82404395D16A7540CBB594A6BEE304
Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/GG6pkQ65tfBO0mz1T3shE1Xcftk.roa
Signing time: Sun 01 Jan 2023 22:44:45 +0000
ROA not before: Sun 01 Jan 2023 22:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207366
IP address blocks: 164.138.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:40:43:95:d1:6a:75:40:cb:b5:94:a6:be:e3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Validity
Not Before: Jan 1 22:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=186ea9910eb9b5f04ed26cf54f7b211355dc7ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:27:fa:d8:54:1d:83:9f:28:cd:d2:4c:ea:
29:27:80:05:87:ef:cb:42:28:93:6d:61:af:6c:d9:
01:23:38:22:b4:ff:80:13:bf:dc:d1:56:c1:0d:dc:
f0:bc:91:ed:4a:4e:b3:db:f8:e9:da:2d:2d:fd:1e:
61:60:69:7a:44:82:43:bd:4c:66:c1:f5:09:22:39:
7c:b8:1a:88:3c:5e:84:99:a5:07:09:b2:bf:b1:38:
c6:4b:de:bd:a4:c3:84:00:e2:ca:2e:9e:d4:2c:ba:
74:08:39:5b:e1:80:64:b8:08:15:99:9c:5c:23:d2:
77:64:32:83:d3:34:60:8a:db:84:5d:15:b4:b0:13:
25:62:a6:cd:b4:ce:f9:3a:b4:d7:9d:68:49:1a:76:
3f:47:5a:98:6b:05:5d:2a:8c:9b:48:be:6c:17:06:
26:b2:ac:eb:c8:cd:c2:ee:40:2d:1b:7d:56:98:ab:
66:2d:f0:d5:7c:ec:3c:2f:57:65:83:7f:52:c3:f1:
95:d5:2a:84:57:bd:2a:f1:83:45:ba:8f:f2:fe:35:
47:ca:52:a7:f1:d6:4f:ca:81:8d:ef:14:1a:cb:4d:
54:03:21:e5:e6:64:b0:f2:dd:08:98:d3:dd:ab:6b:
d6:ba:db:96:8e:c2:22:7b:1b:27:9a:56:d2:0a:d0:
80:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6E:A9:91:0E:B9:B5:F0:4E:D2:6C:F5:4F:7B:21:13:55:DC:7E:D9
X509v3 Authority Key Identifier:
keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/GG6pkQ65tfBO0mz1T3shE1Xcftk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:45:91:71:2c:41:5c:51:c9:5e:84:27:1c:58:02:31:ba:13:
ab:8a:42:05:ab:30:28:a7:ab:bf:8c:c2:fe:97:6c:68:e5:94:
2f:3f:27:b5:c1:fa:4a:8b:da:50:fe:f2:28:b1:9c:10:30:02:
ed:51:85:4a:35:e8:9d:89:78:63:76:6f:64:12:34:9b:60:88:
07:f9:11:c7:b4:f4:2c:cd:63:7f:8c:34:a6:77:43:39:76:4e:
b4:21:b0:6d:77:c6:6f:eb:f3:71:53:06:7d:9e:c6:51:70:88:
9a:bf:c9:08:8b:fd:ee:79:bc:45:6a:cc:aa:ef:ed:73:56:e7:
06:13:d0:5a:3d:7f:dc:49:b1:a4:1d:dd:33:08:ba:5d:d2:2b:
f6:51:b2:29:17:05:e1:df:46:af:93:84:71:02:8a:73:e7:d4:
00:6f:f9:98:ec:5d:b8:34:96:5a:f4:ed:26:3d:03:85:7b:f5:
06:43:23:37:b7:8b:bb:f5:12:22:ba:3c:9a:30:c6:3a:10:0d:
f4:d6:04:73:1f:38:dc:e1:c5:8e:27:d9:9e:55:97:0c:72:1d:
9d:71:b9:3c:c3:4c:ef:5e:8e:db:3c:36:ac:7a:01:2c:91:6c:
e6:3f:bd:14:86:3c:d5:a8:41:f0:0b:06:d8:b7:82:6d:99:70:
ae:16:69:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvgkBDldFqdUDLtZSmvuMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTBkMzA4NGJmOGFhOWVhNzc3ZDI0NWI2MGQ1MTFiZTE4
OWVhYjIwHhcNMjMwMTAxMjI0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODZlYTk5MTBlYjliNWYwNGVkMjZjZjU0ZjdiMjExMzU1ZGM3ZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R8n+thUHYOfKM3STOopJ4AFh+/L
QiiTbWGvbNkBIzgitP+AE7/c0VbBDdzwvJHtSk6z2/jp2i0t/R5hYGl6RIJDvUxm
wfUJIjl8uBqIPF6EmaUHCbK/sTjGS969pMOEAOLKLp7ULLp0CDlb4YBkuAgVmZxc
I9J3ZDKD0zRgituEXRW0sBMlYqbNtM75OrTXnWhJGnY/R1qYawVdKoybSL5sFwYm
sqzryM3C7kAtG31WmKtmLfDVfOw8L1dlg39Sw/GV1SqEV70q8YNFuo/y/jVHylKn
8dZPyoGN7xQay01UAyHl5mSw8t0ImNPdq2vWutuWjsIiexsnmlbSCtCA7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBhuqZEOubXwTtJs9U97IRNV3H7ZMB8GA1UdIwQY
MBaAFOtQ0whL+Kqep3fSRbYNURvhieqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFEVENFdjRxcDZuZDlKRnRnMVJHLUdKNnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xMmU3MmMtNzQ5MS00N2UyLWFjNTMt
YWMwYzYwMTAwNDc4LzEvR0c2cGtRNjV0ZkJPMG16MVQzc2hFMVhjZnRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8xMmU3MmMtNzQ5MS00N2UyLWFjNTMtYWMwYzYwMTAwNDc4
LzEvNjFEVENFdjRxcDZuZDlKRnRnMVJHLUdKNnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApIr+MA0G
CSqGSIb3DQEBCwUAA4IBAQAKRZFxLEFcUclehCccWAIxuhOrikIFqzAop6u/jML+
l2xo5ZQvPye1wfpKi9pQ/vIosZwQMALtUYVKNeidiXhjdm9kEjSbYIgH+RHHtPQs
zWN/jDSmd0M5dk60IbBtd8Zv6/NxUwZ9nsZRcIiav8kIi/3uebxFasyq7+1zVucG
E9BaPX/cSbGkHd0zCLpd0iv2UbIpFwXh30avk4RxAopz59QAb/mY7F24NJZa9O0m
PQOFe/UGQyM3t4u79RIiujyaMMY6EA301gRzHzjc4cWOJ9meVZcMch2dcbk8w0zv
Xo7bPDasegEskWzmP70UhjzVqEHwCwbYt4JtmXCuFmn7
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:57 2024 by rpki-client on console-fra.rpki-client.org