Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/ggxy-p83VrAQD_zh-BaJybQTCXw.roa
File: ggxy-p83VrAQD_zh-BaJybQTCXw.roa (raw, json)
Hash identifier: CYIWgiMZBlpeo3VeRDrns7oUXDXcG8nWv20DqgKICW4=
Subject key identifier: 82:0C:72:FA:9F:37:56:B0:10:0F:FC:E1:F8:16:89:C9:B4:13:09:7C
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 01870F087C4EFEDFA262549124EB5AB21496
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/ggxy-p83VrAQD_zh-BaJybQTCXw.roa
Signing time: Thu 23 Mar 2023 15:13:46 +0000
ROA not before: Thu 23 Mar 2023 15:13:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55002
IP address blocks: 193.143.129.0/24 maxlen: 24
193.143.128.0/24 maxlen: 24
195.234.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0f:08:7c:4e:fe:df:a2:62:54:91:24:eb:5a:b2:14:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Mar 23 15:13:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=820c72fa9f3756b0100ffce1f81689c9b413097c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2b:9f:d8:9d:b5:52:eb:ae:17:e0:56:99:0c:
90:4a:0a:e2:80:82:90:38:07:2a:d6:8f:1b:f3:f1:
6f:78:73:35:f2:ad:eb:42:92:eb:ce:b8:f2:2a:55:
c0:99:38:58:52:28:c1:91:f6:8b:9f:48:b7:87:11:
e7:94:83:77:33:d8:07:7f:66:19:65:66:90:2e:73:
2a:27:c5:35:72:14:23:e6:4c:e1:a1:3f:d8:db:e9:
bf:58:13:cd:a6:d2:47:ce:f0:f7:ee:ed:fd:51:52:
07:8d:e9:e0:d0:84:00:f9:ac:fe:ba:59:ff:1d:8d:
7b:cf:da:53:1d:52:e7:e1:32:50:53:b6:50:35:2f:
84:0e:93:39:73:7d:f8:49:9d:21:94:ec:50:be:a9:
65:80:19:c9:29:86:8e:47:69:05:4a:56:1a:18:d5:
92:58:30:ec:35:f4:2a:cd:2b:12:74:5a:33:3f:7f:
d6:b0:9a:3e:4f:6a:0a:52:cd:eb:cc:e6:03:62:0c:
fc:b1:72:67:47:04:5b:d9:5c:c8:ab:09:a0:58:ee:
a0:fe:1f:94:6f:c5:60:e9:5b:e7:26:69:8e:36:a6:
4d:2d:b4:e2:a1:00:e3:e6:68:33:37:6d:24:03:85:
16:d6:ab:5b:d0:e2:96:be:95:7a:81:35:1a:37:0f:
2d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0C:72:FA:9F:37:56:B0:10:0F:FC:E1:F8:16:89:C9:B4:13:09:7C
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/ggxy-p83VrAQD_zh-BaJybQTCXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.128.0/23
195.234.135.0/24
Signature Algorithm: sha256WithRSAEncryption
35:04:33:03:62:2f:5b:f3:ea:9d:32:f6:1f:c3:b7:fb:e1:7f:
83:21:a2:79:dc:36:27:0c:1a:de:84:8d:50:c7:a7:95:18:2c:
76:51:b4:16:7b:69:ef:6b:22:05:b2:04:44:c1:81:45:fc:f6:
2e:7c:b1:16:82:39:c4:54:aa:0b:d1:d3:c9:96:5d:58:1b:bb:
54:bb:70:e1:da:1c:a5:a8:12:8e:fa:26:07:08:3a:e5:44:a8:
d7:35:fe:e0:12:b5:58:76:74:22:8a:c6:2f:19:91:02:cb:f1:
39:6a:84:a6:15:14:e2:dc:d4:62:51:d7:86:8b:b3:e9:f4:e5:
04:02:38:ac:9c:cf:94:ef:fc:22:6e:7a:09:67:c8:c0:5e:7a:
61:6e:a9:aa:5a:70:be:2f:dc:d3:7f:17:26:02:fd:72:8e:44:
2f:7d:1c:70:21:5c:ae:1d:65:16:1d:2c:e5:94:04:f9:cb:fb:
f9:b7:f3:48:52:42:c7:3c:76:08:c2:aa:4f:7f:13:28:53:55:
75:13:78:25:73:11:59:f7:0d:bb:9e:8f:d5:33:f4:1b:9d:08:
21:50:0d:3c:ad:35:f6:2b:e5:91:f4:e0:a7:bc:8b:1b:8f:97:
51:01:b2:39:dd:f7:b0:b6:4e:49:43:84:5e:04:2d:bb:8b:3a:
13:e8:6a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:00 2024 by rpki-client on console-ams.rpki-client.org