Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/GPZ-N7zgVvtaVauQIGYcdsACFro.roa
File: GPZ-N7zgVvtaVauQIGYcdsACFro.roa (raw, json)
Hash identifier: BajyY7+tdFLsHS594C3eSGICEz3qTq0pppv1NTsiwSE=
Subject key identifier: 18:F6:7E:37:BC:E0:56:FB:5A:55:AB:90:20:66:1C:76:C0:02:16:BA
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01858136F921DD82AE6872943784D48AC317
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/GPZ-N7zgVvtaVauQIGYcdsACFro.roa
Signing time: Thu 05 Jan 2023 09:15:41 +0000
ROA not before: Thu 05 Jan 2023 09:15:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400039
IP address blocks: 93.114.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:36:f9:21:dd:82:ae:68:72:94:37:84:d4:8a:c3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 5 09:15:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18f67e37bce056fb5a55ab9020661c76c00216ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:34:d4:69:47:b6:67:ec:9d:67:c9:45:3e:6c:
79:a6:e0:f3:20:cd:e2:67:9f:fb:18:bc:fe:be:5c:
7a:84:c4:d8:26:23:e5:1c:08:34:e8:9f:57:e2:35:
42:b0:fa:dc:e9:6a:4b:e4:0f:cd:81:fa:e3:ae:e5:
41:9f:03:88:4f:4a:21:b9:a8:5d:72:b6:46:c2:8b:
87:9f:e5:da:33:92:8c:af:4c:41:d1:30:5e:f1:86:
16:90:8c:be:52:0d:b7:f4:86:43:22:7a:a1:9c:bc:
4d:32:83:69:79:68:50:28:4b:25:e6:69:a3:8f:2e:
fc:37:ad:b2:a2:92:d1:5e:b1:9b:47:e5:5c:e7:96:
bf:e5:8c:e4:85:19:6b:68:87:80:ce:47:0f:d2:15:
67:89:0f:da:3b:9a:e4:41:e2:d9:88:64:9d:b4:40:
fb:88:79:25:f8:93:be:c6:67:13:7b:ff:4c:c6:f7:
f8:2a:ae:d9:99:31:28:35:73:da:94:94:72:24:d7:
25:7c:11:dc:c1:5b:da:2a:3e:f1:16:e5:b2:14:3c:
43:93:cd:66:cd:b9:76:15:f0:5b:54:49:a1:9b:4e:
05:d2:8c:ce:f7:5a:41:f4:ad:5c:7d:71:ec:a8:75:
c7:42:0c:ca:af:db:68:b2:b1:fa:c6:24:be:55:89:
5c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F6:7E:37:BC:E0:56:FB:5A:55:AB:90:20:66:1C:76:C0:02:16:BA
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/GPZ-N7zgVvtaVauQIGYcdsACFro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.63.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d3:34:06:2e:a8:88:bf:e1:93:ce:76:64:1a:b2:f9:e6:4b:
4f:1a:c9:e7:02:c8:1d:4f:66:da:f0:ae:bc:25:44:fc:61:75:
68:c0:e5:33:21:7e:d8:33:95:3d:da:b5:49:07:64:b8:02:32:
e1:85:53:90:23:76:08:21:5c:7e:ac:6e:b0:40:ae:c2:65:db:
bc:f4:f3:f7:af:68:aa:1e:f1:3b:61:5a:94:f4:35:ad:0d:d2:
44:e6:d6:ee:e9:82:b8:f8:03:0e:c0:70:5e:a4:9d:06:98:0f:
4b:71:a5:cc:69:f6:a9:ac:f4:9b:f8:ee:82:03:cb:3c:8f:60:
50:6c:1b:3f:73:e5:f7:a1:c8:88:a1:6d:d5:1d:27:67:76:03:
ab:16:d8:41:e4:8a:04:d9:06:df:25:5e:7b:b8:3d:f1:c9:96:
af:b5:b0:08:47:27:db:0b:ee:75:a3:19:a1:6b:ad:44:af:c0:
52:f4:5f:2d:58:a0:8c:7b:59:d4:44:e2:00:5a:8d:47:7b:6b:
d0:cf:be:85:9b:56:2f:49:ce:81:f6:fa:61:23:60:e8:8c:ba:
e6:9c:7c:e1:4d:4a:94:e6:cd:e4:9e:7c:d2:c1:e2:79:bc:a0:
f6:55:bf:ad:e4:4a:44:5b:db:50:fb:d2:b9:f2:0b:5a:eb:f7:
ca:01:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:34 2024 by rpki-client on console-fra.rpki-client.org