Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/GZC5j1sxzW3_Q3iAwgKv9IaYFew.roa
File: GZC5j1sxzW3_Q3iAwgKv9IaYFew.roa (raw, json)
Hash identifier: 5t262bXWASfwjJ63envRyFT6xAQnfww3Ir3DAw6OaKs=
Subject key identifier: 19:90:B9:8F:5B:31:CD:6D:FF:43:78:80:C2:02:AF:F4:86:98:15:EC
Certificate issuer: /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial: 018C3538CD2FB83D47A41E2111AFF6D41819
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/GZC5j1sxzW3_Q3iAwgKv9IaYFew.roa
Signing time: Mon 04 Dec 2023 14:26:04 +0000
ROA not before: Mon 04 Dec 2023 14:26:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198268
IP address blocks: 178.175.182.0/23 maxlen: 23
178.175.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:35:38:cd:2f:b8:3d:47:a4:1e:21:11:af:f6:d4:18:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Validity
Not Before: Dec 4 14:26:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1990b98f5b31cd6dff437880c202aff4869815ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ba:84:4e:5d:df:95:4a:e7:d9:e9:78:d8:88:
e1:53:ea:2c:4d:6d:be:85:c5:7d:e1:57:97:ba:cd:
0a:14:92:3e:14:ca:1e:47:2c:72:bf:66:e2:19:a5:
d0:ad:0c:e7:47:7f:d3:97:13:24:44:e6:f1:cc:60:
9d:6e:47:d9:08:a4:1e:df:00:f4:de:70:66:47:58:
89:0e:f7:02:c2:dd:96:2f:d4:0e:f5:27:a6:ab:85:
4b:7e:16:43:07:c9:98:4f:a6:dc:c7:a2:ec:14:ba:
da:d5:d6:bf:e8:16:69:59:b6:0d:a1:6a:fc:af:26:
c5:ef:f0:05:26:65:7e:34:0b:be:32:8c:94:25:b3:
a5:b6:14:a7:f3:6a:50:68:ac:b3:37:4d:66:50:34:
38:6a:94:85:05:9c:a5:cc:a4:a6:6c:b4:bd:5c:1b:
8a:da:8e:03:f7:1a:e8:97:84:d8:2c:43:68:a6:b7:
20:62:b7:89:1a:73:de:20:38:19:c3:3c:04:31:9b:
b3:3b:76:ef:7e:78:d0:f9:77:5a:c0:f6:58:d8:b0:
b6:61:15:40:ef:63:70:0c:d2:ea:63:6a:b1:a9:13:
71:b5:18:d8:c4:aa:fd:05:01:6b:e4:85:8d:d6:99:
45:9c:45:78:18:45:3a:6b:50:be:6b:50:b3:ca:76:
b0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:90:B9:8F:5B:31:CD:6D:FF:43:78:80:C2:02:AF:F4:86:98:15:EC
X509v3 Authority Key Identifier:
keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/GZC5j1sxzW3_Q3iAwgKv9IaYFew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.182.0/23
Signature Algorithm: sha256WithRSAEncryption
f7:9b:9a:f7:65:26:59:46:7c:3f:2b:39:c5:68:a7:d7:8f:93:
a0:96:02:a8:72:c3:d7:87:0a:e9:22:0f:d7:c7:d3:ac:4b:36:
a5:16:7e:90:7b:99:8c:af:a0:cf:5c:e8:70:e7:5a:3d:6a:eb:
db:5f:a8:16:76:3d:e0:ac:87:21:5b:7c:4a:b2:33:2e:43:ca:
0d:fb:8c:95:71:68:47:55:b3:d0:3a:e0:c7:3f:36:06:95:a0:
9c:4a:41:dd:7f:50:b3:2f:1d:0f:99:b4:1e:ab:76:1d:e3:32:
f4:c5:0d:60:21:bb:9f:91:c1:61:a3:73:67:22:f0:2d:34:70:
08:af:48:81:af:f3:d6:f9:6a:07:7e:75:a9:e8:d9:50:7f:1d:
7d:36:98:91:cc:3f:0e:86:ff:e0:6e:ca:3e:c9:30:19:df:20:
c3:1b:f1:30:70:90:5f:d0:74:f8:4e:44:4a:4e:ea:57:bc:11:
fe:af:71:f4:fe:a0:4f:c4:e2:df:69:9d:e0:83:2d:1a:53:8c:
ad:db:e9:b4:42:7d:5a:68:0f:00:97:c1:7b:aa:38:43:97:0a:
99:af:e8:2d:5d:36:2c:17:38:72:bf:b4:01:4b:0c:b9:9e:f8:
12:9b:4e:ec:a2:d5:72:2d:ce:a0:84:1a:42:08:3f:cd:b5:6b:
cd:3b:11:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:09 2024 by rpki-client on console-ams.rpki-client.org