Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/GKJPZXlsKdkp8tVeIJJZa4HRQbs.roa
File: GKJPZXlsKdkp8tVeIJJZa4HRQbs.roa (raw, json)
Hash identifier: kbvmiSWTg3eZSoaK18pHsQfwhA9XIzshAc2cVePa9L0=
Subject key identifier: 18:A2:4F:65:79:6C:29:D9:29:F2:D5:5E:20:92:59:6B:81:D1:41:BB
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A2C5880D97911DAA8D39288B5DAF5
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/GKJPZXlsKdkp8tVeIJJZa4HRQbs.roa
Signing time: Sun 01 Jan 2023 03:05:01 +0000
ROA not before: Sun 01 Jan 2023 03:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56627
IP address blocks: 37.230.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:2c:58:80:d9:79:11:da:a8:d3:92:88:b5:da:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18a24f65796c29d929f2d55e2092596b81d141bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:22:ad:58:2c:58:f9:a6:3e:2e:b8:a1:c7:
a4:70:99:a1:77:0a:bd:0a:9f:e8:e8:84:35:59:76:
6a:4a:dc:00:a0:e8:51:66:aa:d1:77:13:9f:2e:20:
b5:d7:66:8c:c5:68:48:39:ba:c6:cc:3a:89:8c:bf:
a1:09:82:f7:c3:bf:b2:91:32:35:3f:8c:84:79:90:
e7:30:4e:99:d6:3d:cd:a8:66:26:ba:50:75:d0:1d:
eb:63:02:9b:cf:68:06:65:de:19:0a:a0:7e:06:be:
1b:73:eb:ce:d2:92:75:a9:a0:1c:90:43:95:7b:e3:
b3:04:28:cd:a8:db:0b:12:82:a5:9e:77:9c:31:c6:
18:3e:83:81:75:fa:36:1b:27:c2:e6:75:f0:03:74:
b9:98:87:cb:ed:57:a1:99:ec:77:93:6b:92:4b:5e:
a0:7c:cc:1a:ef:8f:60:e4:59:71:a5:fe:d6:bb:1e:
00:e8:e6:62:06:23:6d:60:22:78:a9:7f:c4:83:4d:
ee:95:29:77:c1:d6:4c:16:9e:7d:2b:09:38:8b:93:
ab:79:92:da:dd:cb:2d:09:cf:db:3f:ad:8d:ef:bc:
cf:08:e1:01:a2:3a:46:fa:84:48:45:22:66:e2:7e:
4f:eb:65:42:ee:67:9f:1e:41:aa:d2:48:c6:ec:40:
88:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A2:4F:65:79:6C:29:D9:29:F2:D5:5E:20:92:59:6B:81:D1:41:BB
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/GKJPZXlsKdkp8tVeIJJZa4HRQbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.249.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b5:63:76:a3:21:a8:74:87:6f:3e:04:f4:df:38:fa:55:06:
10:91:9a:bd:52:bb:fb:cc:56:64:a5:c5:60:01:ae:3f:0e:bf:
2d:40:4b:2d:fb:8c:2a:34:0a:fc:63:f7:1c:a4:53:ca:d4:4c:
e4:77:48:a3:a8:ee:78:e0:9a:ea:f2:4b:bf:d6:03:8b:ae:b5:
6d:e7:99:aa:6e:c8:24:30:69:19:5d:45:2d:53:6c:49:86:b0:
76:39:3b:86:f1:38:b7:be:08:e3:4e:3b:75:02:27:a2:b7:b5:
02:8c:f4:98:99:79:85:b8:5e:05:00:2c:b3:8e:8e:7c:0f:d3:
7f:1c:83:b0:b2:06:c6:de:cb:3c:e6:50:50:c1:5a:b8:77:a0:
2e:87:c4:0f:df:d4:ad:de:9f:5a:a2:35:2d:3c:59:a8:e3:73:
3b:fb:c8:62:71:9a:9a:4a:ee:5a:ab:1d:a5:59:20:b2:d0:0f:
f2:07:a2:12:76:d5:3e:87:d5:d2:b2:a4:87:53:b1:1c:a1:72:
9a:e3:4b:ee:b3:1f:48:38:48:54:bc:ac:d8:2e:e4:bb:92:71:
65:76:89:f3:f9:af:40:03:93:21:71:fc:ea:ae:82:09:99:69:
87:e4:86:0d:72:1c:c0:ec:6e:b7:6c:c8:66:ae:44:75:d6:81:
23:04:4c:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrSixYgNl5Edqo05KItdr1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjMwMTAxMDMwNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGEyNGY2NTc5NmMyOWQ5MjlmMmQ1NWUyMDkyNTk2YjgxZDE0MWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH0irVgsWPmmPi64ocekcJmhdwq9
Cp/o6IQ1WXZqStwAoOhRZqrRdxOfLiC112aMxWhIObrGzDqJjL+hCYL3w7+ykTI1
P4yEeZDnME6Z1j3NqGYmulB10B3rYwKbz2gGZd4ZCqB+Br4bc+vO0pJ1qaAckEOV
e+OzBCjNqNsLEoKlnnecMcYYPoOBdfo2GyfC5nXwA3S5mIfL7Vehmex3k2uSS16g
fMwa749g5Flxpf7Wux4A6OZiBiNtYCJ4qX/Eg03ulSl3wdZMFp59Kwk4i5OreZLa
3cstCc/bP62N77zPCOEBojpG+oRIRSJm4n5P62VC7mefHkGq0kjG7ECIpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBiiT2V5bCnZKfLVXiCSWWuB0UG7MB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvR0tKUFpYbHNLZGtwOHRWZUlKSlphNEhSUWJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeb5MA0G
CSqGSIb3DQEBCwUAA4IBAQALtWN2oyGodIdvPgT03zj6VQYQkZq9Urv7zFZkpcVg
Aa4/Dr8tQEst+4wqNAr8Y/ccpFPK1Ezkd0ijqO544Jrq8ku/1gOLrrVt55mqbsgk
MGkZXUUtU2xJhrB2OTuG8Ti3vgjjTjt1Aieit7UCjPSYmXmFuF4FACyzjo58D9N/
HIOwsgbG3ss85lBQwVq4d6Auh8QP39St3p9aojUtPFmo43M7+8hicZqaSu5aqx2l
WSCy0A/yB6ISdtU+h9XSsqSHU7EcoXKa40vusx9IOEhUvKzYLuS7knFldonz+a9A
A5MhcfzqroIJmWmH5IYNchzA7G63bMhmrkR11oEjBEzJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org