Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/GdyW8oDqpBjiTSwhPBx9PZCp_bs.roa
File: GdyW8oDqpBjiTSwhPBx9PZCp_bs.roa (raw, json)
Hash identifier: yFqvZLSzHWzKecgy2UEHehAN4iBAfVFYqpxaCYDnr80=
Subject key identifier: 19:DC:96:F2:80:EA:A4:18:E2:4D:2C:21:3C:1C:7D:3D:90:A9:FD:BB
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 018570CBE6E3389B4008AF1B223C502A5158
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/GdyW8oDqpBjiTSwhPBx9PZCp_bs.roa
Signing time: Mon 02 Jan 2023 04:44:49 +0000
ROA not before: Mon 02 Jan 2023 04:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20495
IP address blocks: 77.74.48.0/21 maxlen: 32
195.210.56.0/23 maxlen: 32
193.189.149.0/24 maxlen: 32
185.58.56.0/22 maxlen: 32
193.16.154.0/24 maxlen: 32
2a01:310::/32 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:e6:e3:38:9b:40:08:af:1b:22:3c:50:2a:51:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Jan 2 04:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19dc96f280eaa418e24d2c213c1c7d3d90a9fdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:36:fc:af:85:05:12:48:ee:81:6f:a4:fc:0a:
b7:09:4f:1f:53:1d:fb:74:59:3a:e9:58:ab:d2:57:
a5:33:a0:31:ae:5a:f7:ed:bd:9a:14:22:54:dc:5e:
ca:a2:70:3a:fc:86:ef:33:a2:09:73:3d:8b:40:19:
4e:d8:fb:63:d8:7f:7f:10:2c:18:40:f7:a6:83:49:
6e:6a:cf:be:d9:a5:10:28:5c:fd:0c:26:20:68:ae:
d6:83:71:ed:4d:85:de:23:41:2f:a0:8c:f8:4e:73:
b5:ac:18:51:0c:17:eb:25:ef:ba:fd:05:69:ab:20:
f2:48:41:0a:35:98:ba:cf:2c:c6:f6:8f:1a:a6:f4:
ec:ef:bc:40:57:6b:b3:cd:27:be:56:ba:dc:1d:43:
8c:0f:00:6a:ff:cc:fc:54:b3:24:5f:cb:0b:b4:d3:
a1:89:32:a5:69:1a:14:28:c8:d3:0a:38:d5:8e:87:
d4:0d:6e:ab:41:43:6e:01:32:c5:2f:39:11:23:5a:
f6:de:d9:93:12:7c:f4:a1:13:3d:16:27:c1:1e:7a:
31:60:42:d4:f9:c8:48:73:bb:3f:d3:15:a7:31:fd:
bc:31:09:c2:10:26:11:73:54:f7:81:fc:6a:1c:59:
a4:db:76:64:af:04:b8:0a:cc:8e:ed:48:79:80:69:
10:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DC:96:F2:80:EA:A4:18:E2:4D:2C:21:3C:1C:7D:3D:90:A9:FD:BB
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/GdyW8oDqpBjiTSwhPBx9PZCp_bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.48.0/21
185.58.56.0/22
193.16.154.0/24
193.189.149.0/24
195.210.56.0/23
IPv6:
2a01:310::/32
Signature Algorithm: sha256WithRSAEncryption
45:4a:e8:d9:22:cf:8f:e1:6c:11:d6:5d:45:52:f0:a4:c8:23:
3f:c0:44:7c:60:c3:44:04:92:8b:e9:fe:10:b8:bf:48:a2:86:
fe:9b:9a:7e:0f:cb:d9:6f:8f:6d:04:ba:3d:6f:4d:31:50:bf:
b8:11:12:a8:d7:98:9e:8b:cc:f1:43:2a:b6:a5:cf:48:36:45:
d7:f6:10:90:f4:18:1e:7b:05:5a:d8:af:bd:73:52:20:d6:3b:
0a:f6:0c:4b:5d:67:42:79:d7:cf:8b:f4:7a:6d:e1:1f:41:3b:
48:b7:73:73:a5:59:d9:26:41:65:e6:9f:0e:d9:dd:c7:bf:9c:
44:a1:7c:1a:5c:47:58:cb:1f:b7:ec:28:b7:b5:c6:d2:d7:dc:
b2:52:62:1c:da:d8:f4:5e:68:6f:b7:fa:6d:19:16:cb:21:d4:
44:4e:2c:a2:31:b2:70:9a:fd:7e:4c:09:ab:a9:97:cc:42:ca:
a6:ef:69:8d:ce:ca:61:6a:ff:67:c6:10:4b:c7:7b:d4:68:c7:
9e:33:6d:ea:71:11:7e:72:39:1f:3d:76:99:e7:10:4a:60:74:
05:6f:d2:fa:01:0a:d0:f3:b7:48:81:a5:5c:f0:69:40:92:bb:
98:f0:9d:85:d3:1d:f6:42:35:a2:7b:7d:35:33:64:62:01:e1:
80:e3:5a:e9
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYVwy+bjOJtACK8bIjxQKlFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NGIwZTEzY2YyN2FmZjY2YmU3MzBiZWNlOThlMDRiMDBm
ZGZiOWUwHhcNMjMwMTAyMDQ0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWRjOTZmMjgwZWFhNDE4ZTI0ZDJjMjEzYzFjN2QzZDkwYTlmZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTb8r4UFEkjugW+k/Aq3CU8fUx37
dFk66Vir0lelM6Axrlr37b2aFCJU3F7KonA6/IbvM6IJcz2LQBlO2Ptj2H9/ECwY
QPemg0luas++2aUQKFz9DCYgaK7Wg3HtTYXeI0EvoIz4TnO1rBhRDBfrJe+6/QVp
qyDySEEKNZi6zyzG9o8apvTs77xAV2uzzSe+VrrcHUOMDwBq/8z8VLMkX8sLtNOh
iTKlaRoUKMjTCjjVjofUDW6rQUNuATLFLzkRI1r23tmTEnz0oRM9FifBHnoxYELU
+chIc7s/0xWnMf28MQnCECYRc1T3gfxqHFmk23ZkrwS4CsyO7Uh5gGkQzwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFBnclvKA6qQY4k0sITwcfT2Qqf27MB8GA1UdIwQY
MBaAFIZLDhPPJ6/2a+cwvs6Y4EsA/fueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYt
ZmM0NGE4YWNlMzcwLzEvR2R5VzhvRHFwQmppVFN3aFBCeDlQWkNwX2JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYtZmM0NGE4YWNlMzcw
LzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDTUowAwQC
uTo4AwQAwRCaAwQAwb2VAwQBw9I4MA0EAgACMAcDBQAqAQMQMA0GCSqGSIb3DQEB
CwUAA4IBAQBFSujZIs+P4WwR1l1FUvCkyCM/wER8YMNEBJKL6f4QuL9Ioob+m5p+
D8vZb49tBLo9b00xUL+4ERKo15iei8zxQyq2pc9INkXX9hCQ9BgeewVa2K+9c1Ig
1jsK9gxLXWdCedfPi/R6beEfQTtIt3NzpVnZJkFl5p8O2d3Hv5xEoXwaXEdYyx+3
7Ci3tcbS19yyUmIc2tj0Xmhvt/ptGRbLIdRETiyiMbJwmv1+TAmrqZfMQsqm72mN
zsphav9nxhBLx3vUaMeeM23qcRF+cjkfPXaZ5xBKYHQFb9L6AQrQ87dIgaVc8GlA
kruY8J2F0x32QjWie301M2RiAeGA41rp
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:08 2024 by rpki-client on console-ams.rpki-client.org