Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/Gz8MhRzimsGG3UZchGsNOdMWd5c.roa
File: Gz8MhRzimsGG3UZchGsNOdMWd5c.roa (raw, json)
Hash identifier: ZujOKCOVaLPPXKaZiyyMHI0u9v8gbwVzVG3rAo9RYxY=
Subject key identifier: 1B:3F:0C:85:1C:E2:9A:C1:86:DD:46:5C:84:6B:0D:39:D3:16:77:97
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 0187C18DB116F4C50D6A807826F685F4C34B
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/Gz8MhRzimsGG3UZchGsNOdMWd5c.roa
Signing time: Thu 27 Apr 2023 07:11:41 +0000
ROA not before: Thu 27 Apr 2023 07:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3269
IP address blocks: 193.207.208.0/20 maxlen: 20
193.207.224.0/21 maxlen: 21
193.207.232.0/21 maxlen: 21
193.207.240.0/22 maxlen: 22
193.207.244.0/22 maxlen: 22
193.207.192.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:8d:b1:16:f4:c5:0d:6a:80:78:26:f6:85:f4:c3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Apr 27 07:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b3f0c851ce29ac186dd465c846b0d39d3167797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:59:60:dd:5d:46:bd:6e:c1:86:98:87:a3:
32:29:f1:29:d3:14:b3:eb:e3:8c:88:9d:8e:44:b2:
a9:60:7b:28:73:50:9b:55:e9:09:c6:16:3e:bf:34:
47:3e:45:14:a4:d7:55:59:d7:74:bc:ad:92:81:9c:
87:5c:e4:f0:34:b8:ba:40:40:3d:b8:37:43:de:99:
de:81:cb:eb:a4:3c:74:7e:fb:e8:e9:83:9d:7d:c4:
14:88:4d:8a:92:1c:a2:81:30:cb:62:f2:07:73:db:
4b:39:44:69:b5:9d:bf:5b:e3:7f:11:9e:0a:93:50:
e5:57:58:66:2e:34:41:c8:66:c1:ca:26:3f:fe:f1:
43:ba:c3:e1:60:dd:a0:59:4a:07:a2:4a:88:58:39:
82:dc:e6:c7:0a:06:9b:08:a9:54:78:dd:cc:c5:b9:
cc:df:a6:ba:a9:d4:6f:36:0b:94:b5:f1:42:8c:5e:
2e:09:b5:42:42:3d:b2:c9:57:52:93:c9:dd:70:11:
9e:ef:f1:a6:71:1f:7d:05:dd:ed:54:8c:e2:e7:ff:
25:7a:37:f3:fe:bd:af:3e:ae:8e:ca:40:24:56:7f:
27:a0:78:01:6a:d2:5a:e2:45:21:59:9c:d8:c6:67:
5e:81:66:0c:f6:c7:96:6f:08:63:79:91:04:44:0c:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3F:0C:85:1C:E2:9A:C1:86:DD:46:5C:84:6B:0D:39:D3:16:77:97
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/Gz8MhRzimsGG3UZchGsNOdMWd5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.207.192.0-193.207.247.255
Signature Algorithm: sha256WithRSAEncryption
60:83:3b:7c:d9:d5:96:28:51:7e:6c:33:f1:f2:b8:e0:ed:7c:
61:24:f1:63:1a:10:f3:26:62:ae:32:0a:bb:ea:86:98:50:67:
82:fa:1b:af:d2:b0:26:25:4b:cd:09:29:94:be:db:81:14:50:
97:74:db:6a:ce:30:8c:32:7e:08:7a:c8:56:83:87:ab:38:25:
13:f4:63:38:43:ea:87:42:4c:89:b4:5d:c3:bf:9e:b0:55:39:
b1:77:fb:79:91:59:95:e8:94:4f:f5:46:9d:dc:39:49:b6:b4:
9f:de:73:6f:cc:d4:18:63:95:8e:21:2e:26:37:66:5e:af:55:
ab:58:e9:9b:78:02:81:10:12:69:03:68:20:a3:4e:a3:0a:dc:
4c:2e:31:97:f2:11:b6:a6:2e:95:a8:4c:d3:b1:a0:4c:0a:ab:
a1:51:91:e0:4b:02:d3:3f:ea:07:12:d4:5e:cc:86:7d:ff:aa:
c3:ef:de:8b:66:1c:28:df:0a:58:bd:4b:39:81:48:ae:d2:a5:
00:63:1e:a2:55:bf:31:f7:68:27:74:28:58:43:fc:65:a2:89:
14:85:41:dc:23:76:bb:bf:ab:ff:f0:c4:6c:51:12:55:5f:10:
5e:20:e1:4f:ed:34:9a:b3:3c:f8:e6:a5:7d:4d:94:98:10:3d:
84:18:52:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:15 2024 by rpki-client on console-fra.rpki-client.org