Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/GSnO-i_l-3_PhTK5neZrmquoDiE.roa
File: GSnO-i_l-3_PhTK5neZrmquoDiE.roa (raw, json)
Hash identifier: bHDmAr5xGiyTH2feNELvQ3XGcbZ/KWYMtvffgltdgXs=
Subject key identifier: 19:29:CE:FA:2F:E5:FB:7F:CF:85:32:B9:9D:E6:6B:9A:AB:A8:0E:21
Certificate issuer: /CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Certificate serial: 01876FB77CAA3B90EEF70E59D65B1C220C5B
Authority key identifier: ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/GSnO-i_l-3_PhTK5neZrmquoDiE.roa
Signing time: Tue 11 Apr 2023 09:48:28 +0000
ROA not before: Tue 11 Apr 2023 09:48:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.50.144.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:b7:7c:aa:3b:90:ee:f7:0e:59:d6:5b:1c:22:0c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Validity
Not Before: Apr 11 09:48:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1929cefa2fe5fb7fcf8532b99de66b9aaba80e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a7:39:8f:55:cb:80:0b:2b:56:a4:1f:be:37:
42:b8:9c:b2:dd:c1:a8:dd:9f:c6:39:13:54:73:5d:
c2:ef:b3:30:5f:82:56:ab:bc:be:3b:48:be:23:89:
87:e9:66:86:87:14:88:96:4c:d5:5e:5c:b6:a8:2f:
07:43:3f:76:cc:bf:7d:88:11:8a:6e:78:49:a4:3a:
14:3e:e4:20:dc:7b:33:39:c6:94:88:4a:65:04:20:
56:a2:22:28:f5:b9:55:60:28:6c:02:44:ec:23:13:
64:dc:ee:a4:71:32:4d:4e:b8:6c:ae:b1:87:bb:a3:
48:0a:bb:a3:9c:e9:bb:b8:42:ae:c0:14:f4:a5:97:
4c:d5:72:91:b3:47:47:de:6f:34:2a:0d:52:ad:52:
0d:c6:16:68:dc:e3:7d:06:8f:9e:f4:c1:9c:13:28:
ab:e8:d9:48:41:b2:17:97:fd:47:9c:6e:14:aa:a1:
f3:b2:f4:b4:a6:88:0c:af:33:0d:43:3a:c2:e1:c6:
5b:88:6c:70:74:37:c6:16:dd:55:e9:6a:a6:66:f8:
93:31:1a:41:ce:df:f5:39:83:4b:46:ae:b2:94:d0:
47:54:bc:21:50:61:e4:24:d7:ef:80:80:58:a0:8d:
58:d8:cb:a1:b5:75:ea:82:fa:d4:df:7a:d0:a9:48:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:29:CE:FA:2F:E5:FB:7F:CF:85:32:B9:9D:E6:6B:9A:AB:A8:0E:21
X509v3 Authority Key Identifier:
keyid:ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/GSnO-i_l-3_PhTK5neZrmquoDiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.144.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:7b:5b:2e:dd:84:9a:2e:27:d4:bb:e8:9c:6b:d7:c8:31:a6:
4e:05:9e:40:48:43:bf:e4:e3:5e:79:66:4d:8a:c1:21:e0:2e:
00:fb:27:c0:80:12:81:ca:0e:bd:84:23:94:b0:01:86:e7:81:
cd:39:42:ac:2b:54:8e:1d:fb:77:69:77:b6:c8:24:47:7f:23:
2b:84:2a:20:17:34:33:1b:e1:6a:c6:72:f8:74:a9:88:9c:db:
f8:b5:45:14:06:1a:9f:82:42:56:0f:a8:5f:ca:4f:fd:b5:dc:
f3:2e:3e:95:71:b8:16:06:3a:41:14:f0:42:cc:f4:2c:5b:4e:
dd:df:00:79:6e:c1:37:0a:b9:26:e3:54:27:e6:b0:f1:44:1a:
d5:a0:ce:d9:11:f7:2d:dc:ea:77:11:a0:79:ec:5d:2a:50:48:
35:9d:fd:cc:46:06:09:ce:10:c3:49:e4:a6:4d:30:03:3f:ca:
13:fc:15:f1:7f:5f:9a:56:dc:33:c9:44:27:66:5b:4b:3e:a4:
84:cf:2d:2c:60:bf:2a:18:8e:a4:81:f7:f6:87:6f:a6:e8:04:
4e:9e:69:e8:37:38:00:1d:bf:81:7a:3c:7d:7e:79:ec:9c:58:
88:b0:d1:97:8f:22:7f:57:9b:8d:a8:f5:89:66:9e:5b:5c:a4:
82:4a:82:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:52 2024 by rpki-client on console-ams.rpki-client.org