Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/gtC4hrlAa4mJtQJQfGnoDs0Zb3g.roa
File: gtC4hrlAa4mJtQJQfGnoDs0Zb3g.roa (raw, json)
Hash identifier: AzCBF3k3pdZVCmNprRZuYeLWELEigq4/lQ+oey3ms5Q=
Subject key identifier: 82:D0:B8:86:B9:40:6B:89:89:B5:02:50:7C:69:E8:0E:CD:19:6F:78
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0185AC3D7A35892A6EABB430300E85D90B64
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/gtC4hrlAa4mJtQJQfGnoDs0Zb3g.roa
Signing time: Fri 13 Jan 2023 17:46:28 +0000
ROA not before: Fri 13 Jan 2023 17:46:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.182.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ac:3d:7a:35:89:2a:6e:ab:b4:30:30:0e:85:d9:0b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jan 13 17:46:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82d0b886b9406b8989b502507c69e80ecd196f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:6e:d0:7f:6a:cf:db:f3:45:83:ef:40:d4:
75:cc:e6:dd:50:d2:79:e4:08:76:0c:d7:9c:4d:7f:
79:1a:6c:38:2e:75:25:4c:b2:f3:13:07:9c:4f:5e:
b1:c2:1b:e6:33:c6:ec:b4:3b:d3:f1:85:e2:fd:a9:
13:bc:98:b0:06:79:93:76:12:ca:e5:83:37:8a:3b:
02:99:61:c2:6f:ff:d3:f7:3c:ff:a7:55:35:90:2e:
db:fc:a4:6d:eb:df:3d:4a:8b:02:d2:ef:16:06:b0:
82:7c:01:b4:74:28:71:f7:b3:04:e7:95:8d:7d:b2:
fc:af:fe:73:91:c1:ad:fc:5e:e4:42:71:e2:64:26:
32:db:fe:1c:fd:09:4b:55:e6:23:6b:b4:56:30:dd:
cf:b4:d0:5e:1e:55:40:04:51:47:30:2f:a5:68:4f:
70:76:9c:1f:75:08:c5:54:88:2b:a8:fd:e0:10:ff:
00:11:1e:41:78:50:db:f0:71:60:c2:57:bc:bb:03:
e1:49:30:f6:28:d7:5d:b7:05:ec:18:18:24:27:c2:
e5:fd:4f:b4:3c:de:52:59:2a:ca:e9:1d:6e:b9:84:
4d:89:fb:cc:d4:f4:a5:ef:9e:42:1e:5e:b8:43:7e:
ed:7d:0a:5c:17:c9:d4:16:59:68:54:af:79:9f:52:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D0:B8:86:B9:40:6B:89:89:B5:02:50:7C:69:E8:0E:CD:19:6F:78
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/gtC4hrlAa4mJtQJQfGnoDs0Zb3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:bf:c6:56:e5:82:c1:a6:fb:5e:a5:64:d1:9a:66:b6:cf:5f:
61:f8:76:a0:e0:cf:b8:8f:98:86:78:18:a3:47:b0:ae:a4:a3:
30:b6:fe:01:dc:bd:69:59:1f:af:09:b6:c7:e8:5a:be:7c:4f:
ae:19:8f:c9:62:67:ee:1b:71:2b:ad:07:35:73:2c:90:1b:6f:
2a:82:4b:c8:ad:b8:2f:79:55:7b:f3:f1:30:8c:fe:01:83:0b:
e0:9d:79:9e:3c:93:e0:00:f7:ec:04:dc:2d:c2:b7:43:f3:1f:
f2:3b:12:7d:69:1e:b2:d8:d6:47:44:52:52:ee:14:d0:95:6a:
80:4d:cc:48:a6:a4:69:89:b6:4b:da:da:9c:81:f9:fc:7a:48:
4c:0d:f2:7a:86:db:ea:7e:22:29:fe:cb:dd:e5:4d:af:04:93:
a2:34:08:08:fa:c4:97:65:75:a8:1f:ba:31:95:d7:0d:00:7a:
11:2d:13:b2:49:cb:c4:65:73:c0:ec:2c:be:aa:2c:27:77:05:
67:f4:21:7d:f4:1d:11:64:de:cb:9b:1c:25:ae:7b:44:0a:cb:
49:a8:3f:cc:ef:de:47:8f:f2:61:8d:8e:eb:9e:f3:dd:ca:4c:
bf:09:77:58:a6:fe:38:44:b8:3a:d5:b4:a6:86:53:14:87:35:
f6:c4:09:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWsPXo1iSpuq7QwMA6F2QtkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGVkOTQyZTVjNzQyZTc3YmZiOWJlYjk1NGY4NzI1MzRm
NTI4NDgwHhcNMjMwMTEzMTc0NjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmQwYjg4NmI5NDA2Yjg5ODliNTAyNTA3YzY5ZTgwZWNkMTk2Zjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLpu0H9qz9vzRYPvQNR1zObdUNJ5
5Ah2DNecTX95Gmw4LnUlTLLzEwecT16xwhvmM8bstDvT8YXi/akTvJiwBnmTdhLK
5YM3ijsCmWHCb//T9zz/p1U1kC7b/KRt6989SosC0u8WBrCCfAG0dChx97ME55WN
fbL8r/5zkcGt/F7kQnHiZCYy2/4c/QlLVeYja7RWMN3PtNBeHlVABFFHMC+laE9w
dpwfdQjFVIgrqP3gEP8AER5BeFDb8HFgwle8uwPhSTD2KNddtwXsGBgkJ8Ll/U+0
PN5SWSrK6R1uuYRNifvM1PSl755CHl64Q37tfQpcF8nUFlloVK95n1L4XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFILQuIa5QGuJibUCUHxp6A7NGW94MB8GA1UdIwQY
MBaAFDxO2ULlx0Lne/ub65VPhyU09ShIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2Et
NzczNDRiY2M5MTkxLzEvZ3RDNGhybEFhNG1KdFFKUWZHbm9EczBaYjNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2EtNzczNDRiY2M5MTkx
LzEvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPraqMA0G
CSqGSIb3DQEBCwUAA4IBAQBPv8ZW5YLBpvtepWTRmma2z19h+Hag4M+4j5iGeBij
R7CupKMwtv4B3L1pWR+vCbbH6Fq+fE+uGY/JYmfuG3ErrQc1cyyQG28qgkvIrbgv
eVV78/EwjP4BgwvgnXmePJPgAPfsBNwtwrdD8x/yOxJ9aR6y2NZHRFJS7hTQlWqA
TcxIpqRpibZL2tqcgfn8ekhMDfJ6htvqfiIp/svd5U2vBJOiNAgI+sSXZXWoH7ox
ldcNAHoRLROyScvEZXPA7Cy+qiwndwVn9CF99B0RZN7LmxwlrntECstJqD/M795H
j/JhjY7rnvPdyky/CXdYpv44RLg61bSmhlMUhzX2xAll
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:54 2023 by rpki-client on console-ams.rpki-client.org