Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/GmA07wHZQ3zdkZyjEUmLowzgKCU.roa
File: GmA07wHZQ3zdkZyjEUmLowzgKCU.roa (raw, json)
Hash identifier: IOM3Qr/n/TeOyw1Hqh0StefE8Y5kTSRhHgSx8J7jPiQ=
Subject key identifier: 1A:60:34:EF:01:D9:43:7C:DD:91:9C:A3:11:49:8B:A3:0C:E0:28:25
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 0189547C7DCE2A151DA9C2035705B932D13C
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/GmA07wHZQ3zdkZyjEUmLowzgKCU.roa
Signing time: Fri 14 Jul 2023 12:59:52 +0000
ROA not before: Fri 14 Jul 2023 12:59:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.108.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:7c:7d:ce:2a:15:1d:a9:c2:03:57:05:b9:32:d1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Jul 14 12:59:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a6034ef01d9437cdd919ca311498ba30ce02825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6e:93:40:a5:1b:4d:a1:9c:18:c5:03:ba:14:
ac:a6:c0:41:56:1a:68:88:8c:3d:95:ec:91:b6:18:
59:ce:4b:7f:26:9a:3f:69:c4:4a:f7:50:9a:33:f9:
fd:b4:5d:8f:f1:3c:25:3a:27:b6:bb:a0:3f:32:39:
a6:82:80:1d:82:ef:96:79:fb:1f:eb:92:c7:0c:d5:
c5:27:7c:a3:ee:f0:9b:f2:8c:cf:56:e5:90:4c:5f:
df:35:ab:f6:44:b1:3d:d4:0f:9b:64:7e:4d:c5:06:
3f:eb:d0:95:7a:c2:c0:50:5c:af:f9:db:4c:d8:03:
37:4a:93:32:29:83:9e:06:bd:68:a4:e8:43:17:bc:
76:45:a8:c9:fd:11:9a:76:f1:05:63:c9:94:52:df:
e2:c7:68:02:a2:d8:c9:83:d2:6d:75:78:6d:81:c7:
99:b5:4f:bf:0c:27:6c:2a:4e:93:ec:27:94:ef:92:
81:a0:11:1b:7d:4b:5c:75:0e:7f:e5:97:0d:5e:c2:
b2:a1:79:14:8a:17:64:ff:a6:cc:30:4e:03:4d:ff:
5b:e9:e9:93:20:13:7e:99:b0:26:55:da:2a:3f:77:
e8:20:4f:3c:86:3e:1e:1c:79:7e:9c:71:19:63:fb:
32:7c:bc:6d:47:73:a7:3d:bd:7b:74:ce:52:49:bd:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:60:34:EF:01:D9:43:7C:DD:91:9C:A3:11:49:8B:A3:0C:E0:28:25
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/GmA07wHZQ3zdkZyjEUmLowzgKCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.104.0/24
Signature Algorithm: sha256WithRSAEncryption
21:fa:fd:c6:ec:03:4c:9e:74:11:2a:c8:c7:c7:7c:4f:c9:e8:
d0:b2:c0:e2:c2:a0:ec:10:41:6c:be:24:6a:fb:87:79:a2:8a:
e2:f8:c3:18:07:f6:a8:34:bb:fd:1d:e6:94:1a:13:be:84:54:
a7:82:a3:85:e4:6c:67:d3:cb:d1:dc:dd:42:2d:8e:ae:94:56:
91:37:62:4d:29:7d:31:f6:94:54:d0:20:43:ae:bb:ac:f5:ea:
9f:1e:f0:bc:a3:1d:f2:21:cd:dc:aa:d2:e3:95:84:80:fe:57:
a1:d3:e6:e9:59:bd:43:79:4a:7b:57:87:52:a9:bf:dc:68:b9:
bf:1b:fa:41:85:69:a4:59:41:8b:b7:61:b9:0e:a2:f7:6f:bc:
ca:14:4a:35:24:d6:46:44:6c:36:52:6f:bd:5c:15:d0:00:c5:
fc:5d:7c:09:d8:90:a0:48:4f:8b:1e:c2:1f:4a:b1:fc:83:8e:
4b:74:6c:04:28:91:b3:70:e1:d1:b5:78:5c:e4:d9:48:fd:3a:
9a:34:fc:60:f4:2d:af:5c:ba:c8:e6:32:87:88:b9:8d:0d:b0:
e0:44:70:bf:7e:ca:1f:a2:34:ae:7f:9c:e3:41:0e:8e:1b:27:
1a:37:f9:8f:ea:15:c1:f3:55:d9:ac:a3:11:50:43:d7:bf:b7:
9a:87:74:84
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYlUfH3OKhUdqcIDVwW5MtE8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMTE1N2U4MWI3YzllNDMzNjBhMWNiNTBhMzE0MDExNzU5
MjE4MDgwHhcNMjMwNzE0MTI1OTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTYwMzRlZjAxZDk0MzdjZGQ5MTljYTMxMTQ5OGJhMzBjZTAyODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m6TQKUbTaGcGMUDuhSspsBBVhpo
iIw9leyRthhZzkt/Jpo/acRK91CaM/n9tF2P8TwlOie2u6A/MjmmgoAdgu+Wefsf
65LHDNXFJ3yj7vCb8ozPVuWQTF/fNav2RLE91A+bZH5NxQY/69CVesLAUFyv+dtM
2AM3SpMyKYOeBr1opOhDF7x2RajJ/RGadvEFY8mUUt/ix2gCotjJg9JtdXhtgceZ
tU+/DCdsKk6T7CeU75KBoBEbfUtcdQ5/5ZcNXsKyoXkUihdk/6bMME4DTf9b6emT
IBN+mbAmVdoqP3foIE88hj4eHHl+nHEZY/syfLxtR3OnPb17dM5SSb1nFwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBpgNO8B2UN83ZGcoxFJi6MM4CglMB8GA1UdIwQY
MBaAFPsRV+gbfJ5DNgoctQoxQBF1khgIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14Rlg2QnQ4bmtNMkNoeTFDakZBRVhXU0dBZy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2
LTQxNjY2NGYwMWEyYy8xL0dtQTA3d0haUTN6ZGtaeWpFVW1Mb3d6Z0tDVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2LTQxNjY2NGYwMWEy
Yy8xLzEteEZYNkJ0OG5rTTJDaHkxQ2pGQUVYV1NHQWcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBbGgw
DQYJKoZIhvcNAQELBQADggEBACH6/cbsA0yedBEqyMfHfE/J6NCywOLCoOwQQWy+
JGr7h3miiuL4wxgH9qg0u/0d5pQaE76EVKeCo4XkbGfTy9Hc3UItjq6UVpE3Yk0p
fTH2lFTQIEOuu6z16p8e8LyjHfIhzdyq0uOVhID+V6HT5ulZvUN5SntXh1Kpv9xo
ub8b+kGFaaRZQYu3YbkOovdvvMoUSjUk1kZEbDZSb71cFdAAxfxdfAnYkKBIT4se
wh9KsfyDjkt0bAQokbNw4dG1eFzk2Uj9Opo0/GD0La9cusjmMoeIuY0NsOBEcL9+
yh+iNK5/nONBDo4bJxo3+Y/qFcHzVdmsoxFQQ9e/t5qHdIQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-fra.rpki-client.org