Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gRjgEhAKrNrfJNCSyYemE0hGLuI.roa
File: gRjgEhAKrNrfJNCSyYemE0hGLuI.roa (raw, json)
Hash identifier: x2iNg9o14mbA2e+Ly/PT1IUIbAGecOFKOkaUMDkPscA=
Subject key identifier: 81:18:E0:12:10:0A:AC:DA:DF:24:D0:92:C9:87:A6:13:48:46:2E:E2
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01856ED4D0822FAFD119C22839B9DF02E996
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gRjgEhAKrNrfJNCSyYemE0hGLuI.roa
Signing time: Sun 01 Jan 2023 19:35:18 +0000
ROA not before: Sun 01 Jan 2023 19:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207907
IP address blocks: 192.95.92.0/22 maxlen: 24
192.95.84.0/22 maxlen: 24
192.95.80.0/22 maxlen: 24
192.95.88.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d0:82:2f:af:d1:19:c2:28:39:b9:df:02:e9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 19:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8118e012100aacdadf24d092c987a61348462ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:ca:50:c0:91:99:d9:d8:01:14:d1:bb:2e:
82:0f:e0:fd:a3:db:47:b4:51:b1:c6:12:12:04:b5:
47:d5:ac:e3:20:55:9d:dc:2b:d9:64:42:56:ca:34:
d2:59:e4:52:bc:a1:34:d3:18:af:e2:ba:17:3a:e3:
d9:aa:93:e7:da:4a:1f:b8:f8:f1:18:fd:81:50:17:
8a:f9:5b:0f:a6:9b:1d:f9:af:f0:b7:69:f0:0a:4a:
c5:51:2b:2b:66:01:80:0a:14:e6:9a:c2:7a:4c:4c:
72:7c:d8:ba:2d:d4:43:e4:f5:29:2d:60:d5:9c:51:
3c:e9:0c:48:a8:00:ea:8e:bf:91:46:9e:5f:f6:9c:
30:09:f6:94:41:e5:18:95:b2:38:b7:eb:d5:72:c2:
50:ea:52:0a:3a:4c:6f:ff:92:ef:a1:90:b1:d7:9c:
00:f6:1e:a1:23:52:c0:63:9f:70:04:63:00:bf:4d:
06:01:b9:93:5e:04:d6:a9:ba:63:f0:5f:4c:c3:bc:
1a:59:37:6c:eb:92:ce:82:88:75:d3:f3:da:46:47:
fe:3c:95:13:7f:b7:a8:7f:1e:ef:1a:e3:87:36:d7:
90:e0:bc:e8:7e:5a:40:b4:ed:b1:df:43:72:0d:8f:
bb:2b:9c:b1:bd:04:48:3a:ff:54:a8:ec:50:b2:3b:
ff:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:18:E0:12:10:0A:AC:DA:DF:24:D0:92:C9:87:A6:13:48:46:2E:E2
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gRjgEhAKrNrfJNCSyYemE0hGLuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.95.80.0/20
Signature Algorithm: sha256WithRSAEncryption
82:c7:21:4d:b2:bf:0d:f7:72:74:56:09:9e:3d:3e:59:6e:89:
04:a3:f0:e7:2a:31:3e:95:04:d6:cc:a5:7d:93:63:19:61:eb:
af:6e:31:a5:4f:5d:67:90:51:87:2a:51:4f:62:96:46:07:a0:
1a:56:88:05:88:1c:5b:50:89:f6:5f:6e:9b:a7:bc:20:6b:82:
39:c7:67:bd:14:0c:47:0c:7f:35:a0:b5:50:98:2b:36:c5:b3:
23:39:2a:00:2a:8f:62:5b:99:34:0e:52:fd:0b:48:c7:be:57:
0f:eb:c0:bd:11:f7:60:a9:5b:37:95:e2:de:d0:d6:bf:e4:d0:
25:ca:60:ae:41:d5:c8:24:52:b4:e5:7c:fe:c5:bc:18:7d:fe:
d3:25:34:8a:ff:32:c1:4c:e6:80:4f:03:a3:b1:e8:07:f5:81:
19:92:dd:53:f5:f0:2d:08:6b:10:f6:a1:58:61:23:75:47:87:
fa:80:83:97:71:23:a4:bc:c0:16:31:0f:c8:81:b1:b8:83:0a:
a8:87:41:4a:c5:7e:03:81:d9:1d:31:a2:d7:5a:c8:b1:f8:9c:
d8:e6:83:e1:91:a9:9f:7f:23:21:82:ca:7b:dc:2d:cf:f2:f4:
d9:0a:c8:fa:20:49:c7:c1:bd:2a:7f:6c:5d:e1:1a:62:26:88:
23:59:74:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1NCCL6/RGcIoObnfAumWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjMwMTAxMTkzNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTE4ZTAxMjEwMGFhY2RhZGYyNGQwOTJjOTg3YTYxMzQ4NDYyZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NvKUMCRmdnYARTRuy6CD+D9o9tH
tFGxxhISBLVH1azjIFWd3CvZZEJWyjTSWeRSvKE00xiv4roXOuPZqpPn2kofuPjx
GP2BUBeK+VsPppsd+a/wt2nwCkrFUSsrZgGAChTmmsJ6TExyfNi6LdRD5PUpLWDV
nFE86QxIqADqjr+RRp5f9pwwCfaUQeUYlbI4t+vVcsJQ6lIKOkxv/5LvoZCx15wA
9h6hI1LAY59wBGMAv00GAbmTXgTWqbpj8F9Mw7waWTds65LOgoh10/PaRkf+PJUT
f7eofx7vGuOHNteQ4LzoflpAtO2x30NyDY+7K5yxvQRIOv9UqOxQsjv/RwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIEY4BIQCqza3yTQksmHphNIRi7iMB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvZ1JqZ0VoQUtyTnJmSk5DU3lZZW1FMGhHTHVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwF9QMA0G
CSqGSIb3DQEBCwUAA4IBAQCCxyFNsr8N93J0VgmePT5ZbokEo/DnKjE+lQTWzKV9
k2MZYeuvbjGlT11nkFGHKlFPYpZGB6AaVogFiBxbUIn2X26bp7wga4I5x2e9FAxH
DH81oLVQmCs2xbMjOSoAKo9iW5k0DlL9C0jHvlcP68C9EfdgqVs3leLe0Na/5NAl
ymCuQdXIJFK05Xz+xbwYff7TJTSK/zLBTOaATwOjsegH9YEZkt1T9fAtCGsQ9qFY
YSN1R4f6gIOXcSOkvMAWMQ/IgbG4gwqoh0FKxX4DgdkdMaLXWsix+JzY5oPhkamf
fyMhgsp73C3P8vTZCsj6IEnHwb0qf2xd4RpiJogjWXT9
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:37 2023 by rpki-client on console-ams.rpki-client.org