Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/GQBGxV83l7ZMvZ4RtJqoSg7WxEY.roa
File: GQBGxV83l7ZMvZ4RtJqoSg7WxEY.roa (raw, json)
Hash identifier: dQveeCthvET+GrhwG/WFUVb/Ovxo/JtuGQPstFap5Fg=
Subject key identifier: 19:00:46:C5:5F:37:97:B6:4C:BD:9E:11:B4:9A:A8:4A:0E:D6:C4:46
Certificate issuer: /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial: 018570799C19496F2A2263E92CC1D4509C50
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/GQBGxV83l7ZMvZ4RtJqoSg7WxEY.roa
Signing time: Mon 02 Jan 2023 03:14:56 +0000
ROA not before: Mon 02 Jan 2023 03:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201863
IP address blocks: 212.146.132.0/24 maxlen: 24
212.146.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:9c:19:49:6f:2a:22:63:e9:2c:c1:d4:50:9c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Validity
Not Before: Jan 2 03:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=190046c55f3797b64cbd9e11b49aa84a0ed6c446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:33:07:4a:47:69:11:b6:9e:31:fe:1b:04:64:
b2:73:4c:7b:f2:c0:cd:04:b9:1b:b6:03:f8:61:02:
60:33:7e:e4:4d:4f:29:d3:0a:de:78:5e:80:a5:fd:
3f:fc:9f:60:08:9c:37:23:dc:1a:81:41:dd:d9:4f:
f3:39:64:b9:c2:a8:96:f1:af:9f:1f:42:ac:36:be:
17:e0:ec:64:9e:7a:f4:53:92:f5:c9:70:f1:23:c5:
8a:95:9a:ce:3d:77:1f:37:18:85:f4:bc:7d:4c:46:
96:c3:37:26:41:4f:69:93:9f:c8:b9:2f:60:62:29:
76:f5:76:10:52:37:ed:5b:50:89:e0:d2:1b:2e:24:
86:6d:d9:4c:2b:64:58:d1:a5:5d:a4:d8:2e:77:b9:
5f:6b:9f:5c:ac:0e:09:65:31:e2:77:cf:01:b8:91:
72:69:41:e7:46:fe:5e:69:ac:a2:fa:1e:63:61:c4:
d6:dd:ce:b0:c4:7c:9d:6c:44:2f:76:d1:52:97:03:
76:22:84:76:f8:aa:af:8a:e6:d0:39:12:ac:ef:01:
6e:fc:ec:76:6c:cc:c9:65:bd:a9:67:21:eb:91:51:
7d:1f:41:59:df:58:37:a6:e9:c5:88:df:a1:b0:f0:
5a:49:82:8d:ee:d4:dd:94:f6:ff:a2:60:6f:3e:b2:
9f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:00:46:C5:5F:37:97:B6:4C:BD:9E:11:B4:9A:A8:4A:0E:D6:C4:46
X509v3 Authority Key Identifier:
keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/GQBGxV83l7ZMvZ4RtJqoSg7WxEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.146.132.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:93:fe:50:e2:de:d9:17:36:ff:0b:35:8f:f2:bf:63:01:b7:
3b:c7:f4:f6:d7:b6:5a:6f:d8:ed:0f:e8:7b:37:6b:11:99:22:
db:a7:de:c0:26:7d:4a:b8:0e:15:40:ce:96:4d:9c:d5:a2:33:
9c:c4:bb:37:5a:04:12:b0:ca:03:e7:1a:12:82:a4:ab:87:0a:
8b:32:59:7d:e5:31:2a:a1:cc:8d:32:8a:e0:1d:f9:88:6d:f3:
07:75:d9:af:af:e5:e4:42:b4:91:ec:9b:6b:f1:aa:87:9c:0d:
14:c3:3d:bf:6f:9f:bc:af:04:08:fd:dd:01:9d:04:9a:59:82:
58:4b:e0:c9:6c:cf:2f:68:7b:eb:00:27:76:32:d1:62:ab:ab:
e2:9d:69:63:01:b6:4c:5a:90:d7:97:7f:b3:8b:c7:dd:0a:dd:
78:cd:55:29:5d:59:3c:78:30:0b:5a:5d:5e:04:3e:19:ee:4f:
29:57:a3:d1:6b:ec:98:81:c4:38:bc:1d:e0:43:b4:e2:32:fe:
f3:31:5b:36:24:80:47:9c:cf:82:3b:a7:ba:60:ff:fc:35:1c:
52:e7:b7:cb:de:ac:ad:6a:51:70:db:66:91:a8:b6:f1:c6:3f:
ae:fa:e1:28:d4:dd:23:6c:76:99:98:91:5d:7d:a7:25:18:0f:
98:22:83:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:05 2024 by rpki-client on console-ams.rpki-client.org