Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/1gPG2_GQqTy86WNV_zv4fmTyA24.roa
File: 1gPG2_GQqTy86WNV_zv4fmTyA24.roa (raw, json)
Hash identifier: aBtT3F7n60SaK97oc1k6iinFmg5jADNBSKvTRS4GEEA=
Subject key identifier: D6:03:C6:DB:F1:90:A9:3C:BC:E9:63:55:FF:3B:F8:7E:64:F2:03:6E
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 01856F0246AF88E610868469DB64F85C65BA
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/1gPG2_GQqTy86WNV_zv4fmTyA24.roa
Signing time: Sun 01 Jan 2023 20:24:58 +0000
ROA not before: Sun 01 Jan 2023 20:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12833
IP address blocks: 193.236.100.0/23 maxlen: 23
2001:7f8:a::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:46:af:88:e6:10:86:84:69:db:64:f8:5c:65:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jan 1 20:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d603c6dbf190a93cbce96355ff3bf87e64f2036e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:19:4e:f9:00:a1:af:63:30:d9:ee:97:66:8e:
55:2a:96:1e:b7:12:9c:12:71:6b:81:c5:6d:82:17:
20:8c:42:97:0a:a2:b3:9a:a9:e8:83:d4:04:1c:b8:
b2:fa:8b:73:64:e2:c9:e0:e1:4e:e7:04:b6:34:8f:
50:9b:19:09:e0:cb:c0:d5:3f:a0:e0:a6:cc:bd:55:
07:eb:4a:16:aa:c0:fa:d6:a3:43:04:8c:55:bb:07:
0a:a8:5f:37:a6:22:61:79:98:3c:61:2d:15:df:92:
58:c1:eb:6b:67:56:4d:c0:b5:0e:f4:8c:da:9c:1c:
39:e5:24:7c:61:8c:fa:f7:cf:64:09:68:eb:2b:4e:
0c:0c:ff:c5:d3:b1:c5:c2:6b:4b:d7:5c:c6:8f:35:
dd:07:9b:b2:db:ef:4c:c7:44:5c:7b:0a:82:80:53:
2d:43:f9:7c:2f:01:91:e5:d2:ae:3e:02:9e:01:6f:
b7:6c:44:14:a9:2a:61:41:13:0d:44:6b:60:70:1c:
ea:36:13:40:61:eb:08:d2:27:95:1f:31:e3:26:d1:
2d:87:02:32:0a:4c:92:d4:89:7c:14:a7:c1:26:9f:
bd:1b:2c:a8:eb:b3:ee:f8:8f:18:42:4b:02:f5:c5:
5e:53:b1:ae:93:b0:53:ce:15:96:43:6c:ac:45:81:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:03:C6:DB:F1:90:A9:3C:BC:E9:63:55:FF:3B:F8:7E:64:F2:03:6E
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/1gPG2_GQqTy86WNV_zv4fmTyA24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.236.100.0/23
IPv6:
2001:7f8:a::/48
Signature Algorithm: sha256WithRSAEncryption
1d:b2:11:79:ed:95:2e:d3:b2:71:7d:89:2a:a6:e4:3d:64:10:
6f:a1:ba:1a:8f:2b:57:3b:69:9c:b7:0e:0a:56:b9:6f:f8:3a:
45:d1:b4:e0:61:e5:e1:ad:c4:76:da:2c:00:a8:2a:a5:34:3d:
c0:fe:ba:70:76:6a:28:55:2d:dc:bb:d0:e7:63:44:70:f7:31:
e8:74:64:75:74:36:7d:4c:4b:21:af:dc:9b:33:b3:0e:a2:26:
a7:ea:5b:1c:c0:45:ac:3d:83:b2:10:b9:ba:9a:21:03:55:b9:
ed:c4:56:b3:11:74:ba:bb:a0:2b:6f:33:85:80:95:5f:3f:2f:
43:d8:e7:21:e7:02:a5:88:0d:67:bf:f1:78:f4:57:3e:32:90:
15:3a:77:39:d7:e1:1e:a5:1f:46:fb:9a:c5:af:49:dd:ff:dd:
3e:e4:ec:58:ef:48:a2:96:47:6d:45:ff:f7:95:2c:05:f6:25:
39:fa:81:fd:dc:bf:9e:1b:88:de:be:13:b2:9e:5d:ef:9f:be:
68:0d:6c:60:27:a2:2f:49:ab:cf:22:44:01:be:43:05:59:d0:
00:b9:67:bb:ff:0d:b8:af:a2:8f:c7:07:83:66:df:bd:43:ee:
3e:03:06:6b:49:2e:e4:f2:9d:ed:aa:ef:fd:cc:31:0b:a7:44:
58:ed:c1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 08:17:08 2023 by rpki-client on console-ams.rpki-client.org