Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/GkfAnHLhOTzwIslC_EG3QJg41Cg.roa
File: GkfAnHLhOTzwIslC_EG3QJg41Cg.roa (raw, json)
Hash identifier: W7qR1fydwiuxXndZe+cpVMf1AUuqJ6bmA189Mx/L0bE=
Subject key identifier: 1A:47:C0:9C:72:E1:39:3C:F0:22:C9:42:FC:41:B7:40:98:38:D4:28
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018570950B3EE68264FE7E39D27095ECB02F
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/GkfAnHLhOTzwIslC_EG3QJg41Cg.roa
Signing time: Mon 02 Jan 2023 03:44:54 +0000
ROA not before: Mon 02 Jan 2023 03:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13259
IP address blocks: 193.37.70.0/24 maxlen: 24
80.66.70.0/24 maxlen: 24
80.66.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:0b:3e:e6:82:64:fe:7e:39:d2:70:95:ec:b0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 03:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a47c09c72e1393cf022c942fc41b7409838d428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:67:1e:9a:83:f6:4a:71:a1:ab:58:d4:00:
cc:4c:25:1c:ff:68:03:9b:f7:6b:57:a5:b2:a4:2e:
36:81:c5:36:33:60:39:98:0f:48:5a:e3:d2:e6:6b:
89:e5:7f:ed:50:e7:af:62:d2:70:68:92:bb:36:f9:
29:06:2f:a1:e4:53:cc:a8:d3:3d:3f:87:63:65:60:
37:9c:ea:ff:b1:31:fd:3e:e5:9d:90:bb:5c:84:18:
2b:39:49:7d:34:a6:ab:04:da:0a:fb:c1:61:d2:19:
7c:54:7b:d9:52:d5:0b:cb:61:77:e7:76:e1:1a:3a:
56:a1:2c:1d:7a:49:65:6a:b4:e7:f5:c2:1a:72:a2:
7b:8c:e5:6a:b8:c9:19:06:71:94:e4:65:90:f4:4b:
33:d0:7a:2f:f7:2b:c3:0e:df:de:e4:83:eb:c2:c5:
5b:37:d2:4e:1a:c7:d1:64:90:9b:c1:b8:8e:bd:36:
e3:cc:96:b2:cb:b6:4c:7f:d0:af:f2:44:1d:12:d3:
08:f0:e5:4e:bf:5a:15:7d:bb:93:6a:0c:50:b1:85:
08:3a:ac:bd:01:24:ab:b6:7e:62:ca:12:7d:2d:56:
16:32:19:0e:e6:4a:2a:2e:3a:7d:51:f3:ca:c0:55:
1d:05:64:70:3f:f2:cf:70:dc:9e:76:f2:c8:e4:fb:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:47:C0:9C:72:E1:39:3C:F0:22:C9:42:FC:41:B7:40:98:38:D4:28
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/GkfAnHLhOTzwIslC_EG3QJg41Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.69.0-80.66.70.255
193.37.70.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e3:1c:ce:83:b1:e6:9e:6e:f6:60:cd:92:15:4e:56:ab:01:
ff:46:50:1f:92:12:11:1d:de:c1:27:b4:50:e5:2e:8a:ef:2d:
3e:01:bc:58:12:d8:cf:95:8f:e6:e9:30:5b:41:10:7c:db:43:
0d:c7:fe:62:28:b6:91:3f:cd:09:ee:98:ba:64:f6:a8:69:39:
c7:c2:b8:2c:bf:f1:54:fd:68:1f:5d:72:65:dc:f8:4d:69:d6:
36:41:b2:e3:f2:a7:4b:7b:c1:36:b2:14:d9:48:48:ad:4b:8b:
fb:3e:e8:46:66:dc:00:f4:23:8f:03:55:03:f7:89:39:24:bd:
8a:1b:81:85:53:41:12:a2:14:7c:9e:da:3c:0e:f0:06:23:7f:
3b:9d:71:ce:70:47:f7:56:5b:16:ab:4d:36:61:2b:c2:6c:75:
7c:e1:8c:e9:48:ee:bd:76:d9:8c:a7:d3:ce:78:f3:bc:8a:5b:
d5:4b:cf:b4:bd:82:4c:25:b4:b2:f5:92:67:9b:a1:d9:55:ca:
22:7f:18:63:ea:29:45:a2:a3:42:40:e6:0f:a6:27:fc:2f:92:
11:4b:db:ca:fb:09:c3:06:90:b8:26:95:7a:73:fd:26:f4:db:
f1:9e:8e:44:50:56:33:8f:e0:85:17:2a:50:c4:61:41:1b:e6:
02:ba:fa:66
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVwlQs+5oJk/n450nCV7LAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz
YzI4YzAwHhcNMjMwMTAyMDM0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTQ3YzA5YzcyZTEzOTNjZjAyMmM5NDJmYzQxYjc0MDk4MzhkNDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCdnHpqD9kpxoatY1ADMTCUc/2gD
m/drV6WypC42gcU2M2A5mA9IWuPS5muJ5X/tUOevYtJwaJK7NvkpBi+h5FPMqNM9
P4djZWA3nOr/sTH9PuWdkLtchBgrOUl9NKarBNoK+8Fh0hl8VHvZUtULy2F353bh
GjpWoSwdekllarTn9cIacqJ7jOVquMkZBnGU5GWQ9Esz0Hov9yvDDt/e5IPrwsVb
N9JOGsfRZJCbwbiOvTbjzJayy7ZMf9Cv8kQdEtMI8OVOv1oVfbuTagxQsYUIOqy9
ASSrtn5iyhJ9LVYWMhkO5koqLjp9UfPKwFUdBWRwP/LPcNyedvLI5Pvu6QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBpHwJxy4Tk88CLJQvxBt0CYONQoMB8GA1UdIwQY
MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt
YThkMzYxY2U2NGFhLzEvR2tmQW5ITGhPVHp3SXNsQ19FRzNRSmc0MUNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh
LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABQQkUD
BABQQkYDBADBJUYwDQYJKoZIhvcNAQELBQADggEBADDjHM6DseaebvZgzZIVTlar
Af9GUB+SEhEd3sEntFDlLorvLT4BvFgS2M+Vj+bpMFtBEHzbQw3H/mIotpE/zQnu
mLpk9qhpOcfCuCy/8VT9aB9dcmXc+E1p1jZBsuPyp0t7wTayFNlISK1Li/s+6EZm
3AD0I48DVQP3iTkkvYobgYVTQRKiFHye2jwO8AYjfzudcc5wR/dWWxarTTZhK8Js
dXzhjOlI7r122Yyn085487yKW9VLz7S9gkwltLL1kmebodlVyiJ/GGPqKUWio0JA
5g+mJ/wvkhFL28r7CcMGkLgmlXpz/Sb02/GejkRQVjOP4IUXKlDEYUEb5gK6+mY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:35 2023 by rpki-client on console-ams.rpki-client.org