Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GaOI1AVxc3JfGQlhVp6JrX8dxGY.roa
File: GaOI1AVxc3JfGQlhVp6JrX8dxGY.roa (raw, json)
Hash identifier: TlRABg92hBFMKoEMVH7QVHQaz86ZNliutwUC/nnIIGU=
Subject key identifier: 19:A3:88:D4:05:71:73:72:5F:19:09:61:56:9E:89:AD:7F:1D:C4:66
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEECD73B48C068B2484CB6D7714BE93
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GaOI1AVxc3JfGQlhVp6JrX8dxGY.roa
Signing time: Sun 01 Jan 2023 06:04:50 +0000
ROA not before: Sun 01 Jan 2023 06:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201132
IP address blocks: 188.114.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:cd:73:b4:8c:06:8b:24:84:cb:6d:77:14:be:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19a388d4057173725f190961569e89ad7f1dc466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6d:6a:0d:dd:e4:8a:ae:e3:1c:c1:e5:0b:59:
49:41:d1:bf:8f:96:8b:2f:5f:63:a7:12:3a:7b:39:
d4:45:2b:66:fd:b9:1b:e2:f0:2f:97:b2:39:5c:04:
c3:2d:5f:d4:f1:72:46:1a:91:a5:0d:3b:75:08:8d:
b3:04:37:57:ee:e1:57:c6:04:2d:89:12:a3:fa:9a:
7d:b2:dc:11:fa:09:e3:11:4e:4d:d2:80:cf:1f:14:
a0:a7:e6:1b:1c:3a:b8:83:69:68:5a:dc:d2:34:9b:
54:de:36:94:c4:95:6d:4c:d6:b2:60:88:7b:8e:ae:
0a:71:cf:d9:97:db:f3:fc:f7:e8:75:0d:a2:d2:a9:
bc:c1:fc:e0:11:fc:89:95:f3:e7:f8:ea:99:8a:20:
53:a4:8f:bf:3a:19:8c:48:48:7c:a2:37:60:9b:2a:
ea:96:76:a9:1f:dc:1c:59:82:10:02:20:0c:e4:89:
2f:5d:5c:8a:c5:0a:9f:51:09:d7:44:d0:03:e1:a7:
4f:1a:9a:12:6b:df:0a:a2:15:0c:7a:bf:f6:1d:a5:
f2:ae:7e:d7:ba:af:56:f7:9e:3b:4d:d1:ce:b4:b2:
3d:0c:c8:90:75:fb:6c:f3:c1:74:61:62:d6:96:af:
d9:f2:a3:5f:e1:f6:53:0a:af:fd:b1:09:22:67:0e:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A3:88:D4:05:71:73:72:5F:19:09:61:56:9E:89:AD:7F:1D:C4:66
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GaOI1AVxc3JfGQlhVp6JrX8dxGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.94.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:1b:c4:ec:ca:4c:d6:5c:de:f2:2b:92:a1:c4:a4:b0:35:fa:
34:c6:53:c1:0f:b5:0c:00:18:09:c1:29:bc:ae:6f:4f:1f:c9:
63:3e:02:ab:d9:97:33:21:68:c2:16:19:d2:f5:e2:d0:0a:41:
e6:d8:db:63:23:c2:82:65:71:74:4c:75:8b:96:01:fc:34:8e:
6d:c2:9a:66:f6:88:39:00:3d:5c:7b:d1:ff:d9:1a:aa:66:46:
a6:4f:a1:59:07:64:c2:74:57:f8:e2:de:ab:9e:95:f8:21:62:
87:e3:58:ce:48:af:84:ae:8a:35:08:d3:c5:70:f0:fd:0c:e8:
fd:54:4c:9d:f6:e5:f0:e0:5e:37:0b:e5:7c:95:d6:07:0b:dc:
59:e5:3e:69:13:72:5b:2f:4c:80:6d:e5:17:ba:59:b3:99:c0:
f5:f1:90:8d:b0:a5:b1:3d:e5:51:48:1f:bd:41:a0:9f:82:1b:
c0:31:dd:45:05:14:5f:17:f2:a6:29:9a:0a:84:d6:ad:c7:58:
2f:9e:2b:73:44:aa:42:72:c9:1d:a8:24:9d:05:46:4b:9a:df:
42:11:be:a5:ee:2a:ea:17:2c:3b:d5:da:ed:5d:fc:db:36:81:
45:3a:70:5d:6f:ac:c0:17:3d:8f:86:43:dd:84:ea:f6:81:a9:
cb:ca:0e:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr7s1ztIwGiySEy213FL6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjMwMTAxMDYwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWEzODhkNDA1NzE3MzcyNWYxOTA5NjE1NjllODlhZDdmMWRjNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW1qDd3kiq7jHMHlC1lJQdG/j5aL
L19jpxI6eznURStm/bkb4vAvl7I5XATDLV/U8XJGGpGlDTt1CI2zBDdX7uFXxgQt
iRKj+pp9stwR+gnjEU5N0oDPHxSgp+YbHDq4g2loWtzSNJtU3jaUxJVtTNayYIh7
jq4Kcc/Zl9vz/PfodQ2i0qm8wfzgEfyJlfPn+OqZiiBTpI+/OhmMSEh8ojdgmyrq
lnapH9wcWYIQAiAM5IkvXVyKxQqfUQnXRNAD4adPGpoSa98KohUMer/2HaXyrn7X
uq9W9547TdHOtLI9DMiQdfts88F0YWLWlq/Z8qNf4fZTCq/9sQkiZw5y6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBmjiNQFcXNyXxkJYVaeia1/HcRmMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvR2FPSTFBVnhjM0pmR1FsaFZwNkpyWDhkeEdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvHJeMA0G
CSqGSIb3DQEBCwUAA4IBAQAKG8TsykzWXN7yK5KhxKSwNfo0xlPBD7UMABgJwSm8
rm9PH8ljPgKr2ZczIWjCFhnS9eLQCkHm2NtjI8KCZXF0THWLlgH8NI5twppm9og5
AD1ce9H/2RqqZkamT6FZB2TCdFf44t6rnpX4IWKH41jOSK+Eroo1CNPFcPD9DOj9
VEyd9uXw4F43C+V8ldYHC9xZ5T5pE3JbL0yAbeUXulmzmcD18ZCNsKWxPeVRSB+9
QaCfghvAMd1FBRRfF/KmKZoKhNatx1gvnitzRKpCcskdqCSdBUZLmt9CEb6l7irq
Fyw71drtXfzbNoFFOnBdb6zAFz2PhkPdhOr2ganLyg6P
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org