Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/Gkxglqdd9W3CO6XQMqXmbEVjxtA.roa
File: Gkxglqdd9W3CO6XQMqXmbEVjxtA.roa (raw, json)
Hash identifier: duTu1zGjEoqA8Z+HMb0J7hNt3Vje0NNbDxpt16UH75s=
Subject key identifier: 1A:4C:60:96:A7:5D:F5:6D:C2:3B:A5:D0:32:A5:E6:6C:45:63:C6:D0
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 01856D13DB32782FD217524F644C6B08ED96
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/Gkxglqdd9W3CO6XQMqXmbEVjxtA.roa
Signing time: Sun 01 Jan 2023 11:24:55 +0000
ROA not before: Sun 01 Jan 2023 11:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210392
IP address blocks: 93.126.38.0/24 maxlen: 24
93.126.37.0/24 maxlen: 24
93.126.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:db:32:78:2f:d2:17:52:4f:64:4c:6b:08:ed:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jan 1 11:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a4c6096a75df56dc23ba5d032a5e66c4563c6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:34:49:6c:b0:ca:19:fc:dd:77:41:a5:a6:2f:
f7:ed:33:eb:bb:98:0a:d2:f9:01:0c:29:77:c4:2e:
b3:84:42:dc:e3:bc:83:d7:7c:aa:2a:a4:5d:d9:57:
bb:ea:fa:60:fb:99:dc:48:6e:7b:74:37:b5:46:7c:
d2:7b:6d:3e:ee:8f:be:bf:46:6c:8e:24:82:bf:be:
49:e8:42:c6:90:43:f5:7e:3e:9a:11:e2:ca:49:36:
30:4d:9d:87:97:fb:e7:2a:d6:aa:1d:e9:dd:ec:fe:
b2:b4:52:5e:bb:75:04:a3:74:cd:f6:b3:24:b2:fe:
e2:1b:f6:c9:e5:8e:b1:92:e1:71:47:f5:3c:d4:9a:
76:b8:14:01:77:7c:03:05:fb:a9:f6:5c:d7:2f:e5:
95:32:82:fa:8e:35:f0:df:6d:26:92:90:86:01:ce:
3c:f0:c0:8e:65:8b:2f:0b:08:50:ef:9e:6d:9f:03:
e5:6c:7e:52:26:85:2a:32:11:df:17:93:ef:08:63:
e0:e9:13:c8:b8:cb:1c:1e:fb:c7:a2:03:a8:a1:10:
a3:ea:03:92:95:8f:9b:a3:36:0d:54:70:31:bc:99:
e6:52:5a:c6:91:b7:86:b5:bb:76:9e:ca:d8:fc:cc:
18:df:89:5b:89:04:ad:46:1d:fd:6b:3a:a1:df:ec:
23:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4C:60:96:A7:5D:F5:6D:C2:3B:A5:D0:32:A5:E6:6C:45:63:C6:D0
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/Gkxglqdd9W3CO6XQMqXmbEVjxtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.36.0-93.126.38.255
Signature Algorithm: sha256WithRSAEncryption
99:90:e5:f3:65:02:24:cc:81:b2:77:5c:fd:35:c2:bd:df:21:
35:d2:18:37:e4:f9:97:57:b6:75:1a:97:d9:11:0d:d1:d8:b9:
fc:35:23:67:4b:ef:d2:4a:a3:f8:d5:1c:c3:85:bb:3b:57:b2:
02:5a:02:95:8d:32:26:68:cf:58:06:6d:3d:5a:63:ed:d6:0d:
41:ea:23:50:d0:8b:7e:f2:1f:2b:a6:a1:fb:71:a7:d1:3b:6d:
7a:b2:60:7a:3c:d8:20:35:3f:58:fa:ae:d7:90:17:4f:57:cc:
64:19:55:7e:ff:a6:25:f6:98:e1:22:54:5b:66:5b:71:d9:e9:
db:02:05:38:c0:6c:29:4e:2f:d8:0b:9c:a1:9d:4a:3f:05:a2:
e2:1c:19:fb:3c:23:94:8d:7f:9a:b8:41:07:8c:19:f8:fd:48:
cb:c7:85:99:18:34:d4:ed:c8:97:f3:23:81:7d:c2:20:54:a9:
6b:9b:66:ba:eb:3f:3b:56:97:b4:d9:3e:ca:c9:36:51:fc:f4:
68:0f:b6:de:8a:e8:5e:8b:04:bb:4b:b5:88:16:4f:fc:36:22:
6e:f8:e6:b9:ab:4a:87:a4:ce:de:e6:ea:71:be:ee:e2:e7:ad:
bc:8e:4c:54:b3:4d:f6:2f:e9:f2:24:fc:2a:da:e6:bf:44:32:
03:52:04:be
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVtE9syeC/SF1JPZExrCO2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNTNhY2NiOTRlMTBjZjhjMmMyOTY3OTA2N2VlMzkwOTlm
NDA0ZDMwHhcNMjMwMTAxMTEyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTRjNjA5NmE3NWRmNTZkYzIzYmE1ZDAzMmE1ZTY2YzQ1NjNjNmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizRJbLDKGfzdd0Glpi/37TPru5gK
0vkBDCl3xC6zhELc47yD13yqKqRd2Ve76vpg+5ncSG57dDe1RnzSe20+7o++v0Zs
jiSCv75J6ELGkEP1fj6aEeLKSTYwTZ2Hl/vnKtaqHend7P6ytFJeu3UEo3TN9rMk
sv7iG/bJ5Y6xkuFxR/U81Jp2uBQBd3wDBfup9lzXL+WVMoL6jjXw320mkpCGAc48
8MCOZYsvCwhQ755tnwPlbH5SJoUqMhHfF5PvCGPg6RPIuMscHvvHogOooRCj6gOS
lY+bozYNVHAxvJnmUlrGkbeGtbt2nsrY/MwY34lbiQStRh39azqh3+wjAwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBpMYJanXfVtwjul0DKl5mxFY8bQMB8GA1UdIwQY
MBaAFINTrMuU4Qz4wsKWeQZ+45CZ9ATTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEt
NmMzOTUwMTk0MzcwLzEvR2t4Z2xxZGQ5VzNDTzZYUU1xWG1iRVZqeHRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEtNmMzOTUwMTk0Mzcw
LzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJdfiQD
BABdfiYwDQYJKoZIhvcNAQELBQADggEBAJmQ5fNlAiTMgbJ3XP01wr3fITXSGDfk
+ZdXtnUal9kRDdHYufw1I2dL79JKo/jVHMOFuztXsgJaApWNMiZoz1gGbT1aY+3W
DUHqI1DQi37yHyumoftxp9E7bXqyYHo82CA1P1j6rteQF09XzGQZVX7/piX2mOEi
VFtmW3HZ6dsCBTjAbClOL9gLnKGdSj8FouIcGfs8I5SNf5q4QQeMGfj9SMvHhZkY
NNTtyJfzI4F9wiBUqWubZrrrPztWl7TZPsrJNlH89GgPtt6K6F6LBLtLtYgWT/w2
Im745rmrSoekzt7m6nG+7uLnrbyOTFSzTfYv6fIk/Cra5r9EMgNSBL4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:00 2024 by rpki-client on console-ams.rpki-client.org