Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/GZZQ3YTSWoJ2nJX2Z4MS1vOF6zA.roa
File: GZZQ3YTSWoJ2nJX2Z4MS1vOF6zA.roa (raw, json)
Hash identifier: 7NfMrl9hGQSJ9GyrTCLtXLcIUUg3SHqDb3tcztlvRTI=
Subject key identifier: 19:96:50:DD:84:D2:5A:82:76:9C:95:F6:67:83:12:D6:F3:85:EB:30
Certificate issuer: /CN=5efccd7d7e308f81807051f8d487e9d829c24868
Certificate serial: 01856C0A3E5CC8B2C9D23EFFFC2074814F5F
Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/GZZQ3YTSWoJ2nJX2Z4MS1vOF6zA.roa
Signing time: Sun 01 Jan 2023 06:34:48 +0000
ROA not before: Sun 01 Jan 2023 06:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12620
IP address blocks: 195.190.160.0/19 maxlen: 19
62.48.96.0/19 maxlen: 19
176.46.192.0/18 maxlen: 18
185.179.16.0/22 maxlen: 22
84.55.192.0/18 maxlen: 18
2001:4b00::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:3e:5c:c8:b2:c9:d2:3e:ff:fc:20:74:81:4f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868
Validity
Not Before: Jan 1 06:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=199650dd84d25a82769c95f6678312d6f385eb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:06:34:8f:77:bb:87:da:20:af:ba:57:b3:
7c:76:de:7f:71:a5:c5:6e:e9:8a:7e:f1:bd:39:b9:
a0:52:62:f8:d1:65:13:d5:4d:9c:de:65:3d:db:f1:
c5:10:c7:1f:8b:41:23:0a:75:1e:81:cb:0b:87:9c:
ee:36:66:89:c0:2b:91:c7:ff:b2:65:3c:05:40:5f:
0f:04:42:c6:9b:ad:1f:23:c4:7f:96:f1:cb:f4:6c:
d5:df:71:5c:0a:a2:e5:23:15:a6:39:93:e2:96:2c:
77:76:15:be:a8:27:f5:33:df:4d:86:78:3a:d1:ee:
9b:96:00:38:ef:67:ce:4e:d0:05:68:b7:8c:dd:a5:
1e:82:56:2c:89:8b:f3:72:10:e4:26:6b:17:9e:04:
b3:20:a2:22:1b:7d:3c:1c:10:45:7a:e4:ac:e7:92:
d2:5e:72:58:ca:a3:10:d7:2c:57:a8:01:95:c1:68:
f7:62:66:1b:17:5d:50:af:51:f8:3a:02:3a:7b:f4:
c4:af:5c:0f:21:2f:93:c1:22:cf:30:42:a7:89:10:
a3:66:45:48:13:b4:8e:04:66:b4:c4:0c:5f:fa:fa:
29:1d:ae:19:b3:11:d2:1e:00:8d:ad:51:a1:f4:5c:
26:2e:9c:d6:74:a6:d3:48:b9:a5:ee:ad:6b:f1:31:
63:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:96:50:DD:84:D2:5A:82:76:9C:95:F6:67:83:12:D6:F3:85:EB:30
X509v3 Authority Key Identifier:
keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/GZZQ3YTSWoJ2nJX2Z4MS1vOF6zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.48.96.0/19
84.55.192.0/18
176.46.192.0/18
185.179.16.0/22
195.190.160.0/19
IPv6:
2001:4b00::/29
Signature Algorithm: sha256WithRSAEncryption
8b:31:4d:62:c7:52:f2:22:69:61:74:d0:ce:8b:ac:d9:37:29:
72:3f:ee:aa:09:e9:d1:3f:fb:9c:42:44:fd:19:29:fc:c4:8a:
30:f4:3e:4b:9e:c0:05:87:d9:3d:31:ec:b0:a4:9d:6c:59:40:
bf:5f:ee:f4:6c:69:7a:a2:31:87:f9:75:e9:7a:82:5f:e5:e8:
5a:40:fb:93:64:49:dd:a3:6e:c3:d9:67:b0:73:5a:b5:d5:42:
48:cc:43:e9:29:b8:52:b3:f1:3e:ba:c7:e0:63:ec:27:af:29:
e8:ab:af:7d:ea:af:af:b3:80:81:49:5e:38:9d:a8:60:88:62:
9e:a5:2d:9d:b4:db:4d:47:f4:6f:16:1c:c7:b3:c3:21:9b:c7:
8f:65:ef:ac:1d:93:f3:5a:01:b4:c1:13:27:a9:2d:ac:70:70:
78:fe:55:cb:35:3f:7d:e7:a8:52:c2:03:d5:74:37:eb:81:fe:
45:95:40:6e:9c:2b:aa:90:b9:b2:94:bb:68:d7:4c:c4:8c:3b:
40:4e:71:3b:07:fc:28:62:60:5f:a0:c5:80:7c:49:ea:4d:82:
2f:8b:15:c5:04:89:d3:56:72:94:9c:fd:29:04:b6:2c:31:d6:
f9:97:e7:82:1e:02:ac:30:00:98:fb:d1:e4:6a:f3:1d:cd:5f:
87:7c:cb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org