Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/GZdyH9dp0139_Ezq-7D5hJ0mFYk.roa
File: GZdyH9dp0139_Ezq-7D5hJ0mFYk.roa (raw, json)
Hash identifier: T//e0QK0KMiKC96Zxbe8k/y2OuhL8z+YViYbTxceIQw=
Subject key identifier: 19:97:72:1F:D7:69:D3:5D:FD:FC:4C:EA:FB:B0:F9:84:9D:26:15:89
Certificate issuer: /CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Certificate serial: 01856F5DBDB936796362A692ED587C86C6E8
Authority key identifier: E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/GZdyH9dp0139_Ezq-7D5hJ0mFYk.roa
Signing time: Sun 01 Jan 2023 22:04:52 +0000
ROA not before: Sun 01 Jan 2023 22:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49588
IP address blocks: 176.101.192.0/19 maxlen: 19
193.169.134.0/24 maxlen: 24
2001:67c:2c44::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 28 Sep 2023 23:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:bd:b9:36:79:63:62:a6:92:ed:58:7c:86:c6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Validity
Not Before: Jan 1 22:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1997721fd769d35dfdfc4ceafbb0f9849d261589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3c:20:78:7e:42:1d:1c:6c:70:7c:7e:bd:f8:
da:6a:fb:b6:22:65:b8:91:92:a7:83:1d:d1:74:37:
8c:0a:7d:69:b4:6e:a4:2c:63:84:e5:c0:65:c8:30:
6a:47:e7:39:40:3d:3d:4e:7b:68:65:72:f8:c9:39:
d1:bd:29:3b:52:71:2a:19:f2:0f:9c:c1:e4:b3:36:
b7:14:4f:b7:08:92:a1:b6:f5:39:e4:e8:11:38:a0:
65:ec:7d:db:49:71:13:42:30:a7:44:a3:60:19:4a:
dd:ae:09:3f:46:de:0e:58:07:3d:fc:1f:d4:68:cd:
48:29:db:31:31:9c:30:86:29:a0:02:ee:ad:db:cb:
93:7b:83:10:f4:ab:20:23:8a:e1:e5:85:4b:92:a6:
07:7a:c7:6a:6f:7b:7d:3a:43:37:ef:fe:c0:73:61:
cb:3e:84:d3:ff:80:a3:a8:e4:f8:32:4b:db:62:08:
5d:df:53:0a:ce:6f:28:17:71:6c:5a:48:4c:83:f7:
30:f9:90:41:be:79:ba:eb:84:01:bd:e5:af:fe:61:
d9:5f:59:fb:5e:d0:35:65:2b:c6:df:aa:33:b0:38:
e9:75:be:55:35:1f:f4:d0:f5:a4:35:03:69:31:a2:
4d:09:f7:be:b2:78:64:71:c1:cb:dd:53:69:be:64:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:97:72:1F:D7:69:D3:5D:FD:FC:4C:EA:FB:B0:F9:84:9D:26:15:89
X509v3 Authority Key Identifier:
keyid:E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/GZdyH9dp0139_Ezq-7D5hJ0mFYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.101.192.0/19
193.169.134.0/24
IPv6:
2001:67c:2c44::/48
Signature Algorithm: sha256WithRSAEncryption
41:db:c4:d3:80:9f:f5:99:c3:2b:29:d3:b4:e3:54:e9:9c:28:
ee:2e:de:92:b7:74:59:b4:0e:63:e6:9e:97:d3:f6:c9:30:51:
00:cc:cc:c0:c5:53:3b:a1:fe:1a:ce:30:58:2d:99:99:df:b9:
e3:63:ba:ae:92:e9:33:1d:0f:32:76:48:ef:30:db:6b:33:33:
a7:23:12:37:72:c4:05:2d:6c:fb:fc:98:38:92:20:a9:59:1b:
f0:b8:c4:4e:15:bc:07:63:2a:47:32:b2:b8:d3:f5:20:72:60:
4f:d0:8f:a6:7a:34:46:ce:e3:17:dd:e5:ea:1f:88:59:27:09:
73:cb:79:ca:97:67:2e:44:b9:b1:ca:de:9a:ba:15:40:fd:43:
f2:ed:af:c3:f3:92:0d:13:c8:54:98:cc:56:f7:f0:69:db:c1:
ce:a3:43:1e:02:c9:1d:94:48:29:17:6a:f3:e5:96:30:82:b4:
c4:4d:27:5c:da:78:90:de:8b:e2:dd:87:1c:cd:80:2d:97:0f:
74:cc:a6:f8:f7:6b:85:7b:59:e2:7e:ca:4c:f6:ba:97:df:85:
0b:b0:ee:79:89:01:70:18:a0:aa:2e:79:1f:7c:79:38:cd:87:
bf:c0:ad:82:c2:86:fc:fb:1c:11:03:74:e4:81:37:a1:22:db:
7a:f6:95:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:06 2024 by rpki-client on console-ams.rpki-client.org