Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/GCKMC_WHWdw8cR_9WzEepQ_3ze4.roa
File: GCKMC_WHWdw8cR_9WzEepQ_3ze4.roa (raw, json)
Hash identifier: 0et/3bSw8UjMfcByGDDpJNDhmdf4VnqvJxRGf0K4N+4=
Subject key identifier: 18:22:8C:0B:F5:87:59:DC:3C:71:1F:FD:5B:31:1E:A5:0F:F7:CD:EE
Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial: 0185711545A1481D41C081A4F8A4FF4E3F25
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/GCKMC_WHWdw8cR_9WzEepQ_3ze4.roa
Signing time: Mon 02 Jan 2023 06:04:57 +0000
ROA not before: Mon 02 Jan 2023 06:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41655
IP address blocks: 195.8.199.0/24 maxlen: 24
195.8.198.0/23 maxlen: 23
37.153.80.0/21 maxlen: 21
2a00:adc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 06 Feb 2023 09:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:45:a1:48:1d:41:c0:81:a4:f8:a4:ff:4e:3f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
Validity
Not Before: Jan 2 06:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18228c0bf58759dc3c711ffd5b311ea50ff7cdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:12:70:0c:d0:46:88:d7:b8:10:bc:b7:cb:
d4:e2:4c:23:5f:0b:d6:32:8c:d6:d3:e9:58:46:0b:
79:8b:ae:79:fa:24:7f:ad:5f:83:46:d0:e8:4f:d9:
82:57:82:58:fa:58:66:dd:7c:c7:8e:0c:13:e9:ff:
9e:de:75:0e:3a:0f:f9:79:f0:bf:ea:b0:d9:37:c5:
b6:c5:f4:8e:88:42:66:d6:31:f1:af:5e:a1:c4:dc:
a6:45:48:8e:f4:ea:08:fb:33:7e:19:45:b7:83:d5:
95:18:6a:6c:6c:ff:e9:8e:e4:c5:73:92:95:a5:16:
be:da:df:ba:5b:23:78:c4:50:0f:2d:02:72:f5:a1:
42:81:04:de:2d:c9:3e:fe:66:c9:a7:61:54:0d:c2:
61:fc:25:89:79:a4:28:15:c9:12:2b:b9:5c:13:b2:
98:8d:52:d8:51:84:44:1e:a5:b4:b1:cc:48:f1:b1:
1c:dd:6a:0d:46:6f:42:ef:1c:2c:bc:34:09:eb:a2:
76:d0:37:20:87:cc:01:43:6b:f1:ae:4f:8c:35:7a:
a8:a0:e9:5d:98:7e:f2:45:6b:63:55:a3:b3:aa:bf:
1d:b9:4c:15:83:f9:c9:12:17:61:a5:d5:0e:c9:14:
c1:33:30:93:b9:a0:3f:a6:15:38:28:83:53:68:01:
57:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:22:8C:0B:F5:87:59:DC:3C:71:1F:FD:5B:31:1E:A5:0F:F7:CD:EE
X509v3 Authority Key Identifier:
keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/GCKMC_WHWdw8cR_9WzEepQ_3ze4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.80.0/21
195.8.198.0/23
IPv6:
2a00:adc0::/32
Signature Algorithm: sha256WithRSAEncryption
41:64:63:0f:d7:b7:48:11:96:28:25:eb:d6:4c:7a:21:64:ce:
f8:62:70:ae:4d:96:e2:bf:14:6b:25:19:0a:a8:0c:9e:ee:1f:
da:5a:ec:6d:52:a9:33:a2:55:cf:f1:1e:5c:24:1e:f2:cd:59:
c8:e0:e0:08:2a:5f:de:96:34:a5:69:24:0d:86:de:ec:df:3d:
0e:0e:c5:17:5c:0d:fb:45:e6:2a:3f:95:9f:b9:6b:d6:18:91:
66:89:cd:8a:c3:c5:e6:9c:9f:0d:b0:6a:d0:ac:13:e5:47:e3:
52:eb:78:27:4b:1a:9d:07:8a:7b:7d:a9:1d:4b:cb:2f:fe:d3:
63:2c:90:f1:0f:67:67:2c:3d:9b:9c:1b:a2:8d:6f:84:70:f7:
7b:91:bd:30:86:50:6b:5d:4a:43:50:83:2d:4e:25:42:40:80:
8d:93:4e:77:bf:d2:41:5a:be:d1:27:b8:a6:07:8a:b4:2a:6f:
7c:3e:64:da:70:2f:cb:b5:2c:eb:3a:0f:50:3f:ba:a7:2b:bb:
e9:ea:14:0c:41:c4:52:de:64:59:a0:b0:68:03:32:ad:69:07:
0b:27:1f:29:43:48:3b:f2:5a:2a:91:a3:2e:d4:b5:41:65:ba:
ec:58:ca:63:7b:78:b7:f9:aa:7f:40:51:1f:d1:44:9a:b1:6a:
9f:5e:61:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:09 2024 by rpki-client on console-fra.rpki-client.org