Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Gd0qqFUxkNamsGAzKl0i79js510.roa
File: Gd0qqFUxkNamsGAzKl0i79js510.roa (raw, json)
Hash identifier: wMgx8jN8ApHvGTjqpzmuZ2p3T2vffYde5QqbXIh6tPo=
Subject key identifier: 19:DD:2A:A8:55:31:90:D6:A6:B0:60:33:2A:5D:22:EF:D8:EC:E7:5D
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A1FFF4BC62F47D9F0FEEEA0B58147
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Gd0qqFUxkNamsGAzKl0i79js510.roa
Signing time: Sun 01 Jan 2023 03:04:58 +0000
ROA not before: Sun 01 Jan 2023 03:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3269
IP address blocks: 188.72.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 11 Jan 2023 09:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:1f:ff:4b:c6:2f:47:d9:f0:fe:ee:a0:b5:81:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19dd2aa8553190d6a6b060332a5d22efd8ece75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:da:be:c7:65:3a:77:37:a9:5b:36:f3:f0:a5:
63:1f:29:21:5d:93:6d:d0:47:98:4c:95:4f:2a:74:
8c:5b:a4:82:47:03:4f:82:e1:a9:38:51:67:9a:76:
bb:77:c8:5f:73:a1:bb:2e:99:96:df:08:05:16:e0:
f3:5a:27:65:71:2c:eb:e6:cd:8f:7d:50:ad:b2:31:
90:2f:2e:71:32:36:72:58:0d:2c:f3:a0:5a:fe:2b:
f0:06:df:2a:ce:7e:16:0d:54:9c:e1:7b:db:c8:3b:
c2:56:b8:c7:d7:e9:4b:83:7f:6c:40:76:17:97:ea:
b5:7d:41:42:83:c6:a9:b5:c6:e1:d3:30:47:1a:d3:
e2:29:6b:1c:c9:15:d7:76:b7:f5:06:56:cd:c1:ff:
32:9c:37:dc:e6:80:ca:c7:5f:aa:f8:06:07:a5:54:
92:5b:0c:02:09:98:79:cc:1f:e0:94:3d:cd:49:84:
95:08:53:b1:49:5b:7d:f4:3d:b2:6b:29:0c:07:b8:
e1:29:69:92:a9:ce:b2:99:7f:18:e6:e9:f2:ac:00:
2c:b3:11:18:b2:a6:92:35:3d:2b:8d:0d:5c:c4:e2:
0b:a5:3d:cc:ec:b2:03:dd:76:12:b0:25:33:8c:9d:
ab:3a:96:24:18:44:52:47:47:93:71:d5:80:f5:3c:
65:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DD:2A:A8:55:31:90:D6:A6:B0:60:33:2A:5D:22:EF:D8:EC:E7:5D
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Gd0qqFUxkNamsGAzKl0i79js510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.120.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:fe:56:ac:39:e8:e0:7e:8f:4b:8d:e3:1b:5d:d8:ed:a0:cc:
b2:30:3e:f9:09:57:dc:ba:b7:3f:7b:7b:78:c3:2a:2f:d9:90:
65:1f:cb:a4:0e:88:31:c2:af:d3:ac:07:05:66:99:03:30:a5:
f9:fa:63:48:c2:c5:df:31:61:b2:41:b3:a4:40:3d:f6:1c:ee:
e3:9e:51:2a:73:39:13:28:b5:73:51:36:90:9a:ca:39:55:0a:
bc:85:9c:b8:36:39:7a:ca:43:1e:5f:79:17:7f:a3:a8:4c:c8:
cb:dc:6f:73:9f:f8:c4:59:39:b5:79:e2:da:c6:eb:39:d1:af:
d4:1f:f2:5d:dc:ab:2c:55:b6:99:5f:74:74:f8:15:d4:29:28:
10:a4:5f:25:92:f4:1e:85:de:88:52:62:d8:48:74:0b:70:9e:
7e:8e:61:84:57:55:95:96:19:87:66:94:9c:c8:d0:ac:5b:b1:
31:5a:01:bf:99:f3:f8:c6:ad:5f:fa:7b:eb:70:e5:5c:83:16:
83:69:e7:5e:4d:52:4d:cc:0d:50:34:ff:89:45:78:7b:88:ce:
3d:29:31:26:e1:31:07:6b:ca:cc:34:a3:c7:f7:f8:10:bc:a2:
51:23:6a:a1:f6:23:cb:bd:5c:6b:70:dc:8c:c4:cf:35:b8:71:
14:47:19:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org