Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/R_GqLicarMfpecSmqjGUFNa55HE.roa
File: R_GqLicarMfpecSmqjGUFNa55HE.roa (raw, json)
Hash identifier: kFT6h8s2vPFC8IJR1lPEArgSF8LXnkE3olUVwVqCIXc=
Subject key identifier: 47:F1:AA:2E:27:1A:AC:C7:E9:79:C4:A6:AA:31:94:14:D6:B9:E4:71
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 018CFE6685AFC222D29A503CE00083712322
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/R_GqLicarMfpecSmqjGUFNa55HE.roa
Signing time: Fri 12 Jan 2024 15:59:40 +0000
ROA not before: Fri 12 Jan 2024 15:59:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60427
IP address blocks: 87.247.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 20:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:66:85:af:c2:22:d2:9a:50:3c:e0:00:83:71:23:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: Jan 12 15:59:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47f1aa2e271aacc7e979c4a6aa319414d6b9e471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:a2:5d:d0:7c:f0:57:9d:c8:25:ba:35:17:
df:f6:e2:01:eb:d4:8b:4a:bb:e2:c4:a0:46:4b:bd:
30:46:27:78:be:0b:ec:47:e4:c4:d5:bf:0c:23:c3:
d0:c1:3a:8a:b5:3e:d2:7b:93:54:2c:b9:68:bf:cc:
33:a3:42:54:53:f6:dc:a6:38:27:44:8d:42:38:16:
37:46:cd:d4:50:38:cc:7f:df:3f:e6:0b:23:15:1f:
06:6d:fe:e3:31:a4:bc:f9:2f:97:4a:ac:b3:b1:b0:
2f:82:93:cc:02:82:42:24:f7:93:21:a9:44:37:cb:
c9:0a:23:9f:c4:7e:28:03:26:f4:e9:3c:db:41:31:
2c:3d:40:ad:fa:9e:e5:a1:5f:a9:59:6a:83:b2:ed:
b9:77:df:18:e6:eb:f9:cb:bc:2e:44:95:15:6a:7c:
0c:16:87:18:c4:41:57:de:ce:e6:8e:e8:b7:63:ab:
44:63:d7:a1:d8:f4:af:c8:39:98:c2:5c:14:af:fb:
3b:bd:34:50:c7:13:23:9b:9b:82:42:00:e5:11:a8:
95:60:0e:fd:46:30:2c:16:d6:de:bb:f6:7a:28:3c:
12:bd:fb:91:8c:5f:0a:cd:49:9d:66:cd:eb:cf:c9:
37:6b:90:31:cd:0f:af:8c:04:d6:90:36:a3:ce:99:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F1:AA:2E:27:1A:AC:C7:E9:79:C4:A6:AA:31:94:14:D6:B9:E4:71
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/R_GqLicarMfpecSmqjGUFNa55HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.226.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f9:01:1f:36:a2:e6:4f:ae:1c:28:17:43:ee:24:72:6f:b4:
2c:14:73:23:6d:05:7b:dd:8f:37:e7:27:44:96:5a:93:45:72:
71:d7:84:24:ac:70:86:cf:f1:bf:1a:88:33:5d:f5:32:9b:23:
8a:76:96:ba:27:ce:ce:32:36:b1:db:1b:b8:de:83:39:b8:ff:
f5:46:8d:1c:60:76:6e:4f:3f:3c:b9:93:f2:dd:8a:51:ac:9c:
ae:b6:17:86:cb:a7:ca:29:cf:5b:11:f8:0c:5d:51:8c:30:c2:
fc:5b:ba:d6:93:3f:7f:5f:4d:b8:e3:92:49:8c:1c:87:5f:d5:
b0:9f:ff:34:60:52:fe:e1:e7:d7:22:c5:de:e8:1e:67:78:91:
b9:ec:e4:35:6d:e6:a1:ba:3c:36:1b:fe:86:4b:2b:67:f1:bf:
6b:a2:33:1d:27:13:0c:92:b1:01:f4:31:fa:4c:bc:ec:2b:f1:
3b:9a:de:67:39:fd:b0:20:b0:8f:ce:70:5e:d1:8a:84:8b:dc:
fe:37:83:a3:a2:31:85:81:54:aa:66:05:ca:c1:7f:2d:7a:93:
e4:ad:67:f3:4b:d5:da:f3:a6:73:b5:e8:64:e0:9b:bd:5d:30:
61:b9:f1:e0:3c:f1:cf:8a:61:dc:db:c2:84:cd:7f:17:4b:48:
93:93:0c:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYz+ZoWvwiLSmlA84ACDcSMiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOTU1Y2E0NTg0NjhjNTc3NmI4ZDk5MzZkZmU5YjBiMjY2
ODczMWMwHhcNMjQwMTEyMTU1OTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2YxYWEyZTI3MWFhY2M3ZTk3OWM0YTZhYTMxOTQxNGQ2YjllNDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3OiXdB88FedyCW6NRff9uIB69SL
SrvixKBGS70wRid4vgvsR+TE1b8MI8PQwTqKtT7Se5NULLlov8wzo0JUU/bcpjgn
RI1COBY3Rs3UUDjMf98/5gsjFR8Gbf7jMaS8+S+XSqyzsbAvgpPMAoJCJPeTIalE
N8vJCiOfxH4oAyb06TzbQTEsPUCt+p7loV+pWWqDsu25d98Y5uv5y7wuRJUVanwM
FocYxEFX3s7mjui3Y6tEY9eh2PSvyDmYwlwUr/s7vTRQxxMjm5uCQgDlEaiVYA79
RjAsFtbeu/Z6KDwSvfuRjF8KzUmdZs3rz8k3a5AxzQ+vjATWkDajzpnAzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEfxqi4nGqzH6XnEpqoxlBTWueRxMB8GA1UdIwQY
MBaAFFqVXKRYRoxXdrjZk23+mwsmaHMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3BWY3BGaEdqRmQydU5tVGJmNmJDeVpvY3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iZTlhMDAtZTBiMS00NTQxLTljMGYt
MTM4NThkYTg1ZjUzLzEvUl9HcUxpY2FyTWZwZWNTbXFqR1VGTmE1NUhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9iZTlhMDAtZTBiMS00NTQxLTljMGYtMTM4NThkYTg1ZjUz
LzEvV3BWY3BGaEdqRmQydU5tVGJmNmJDeVpvY3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/fiMA0G
CSqGSIb3DQEBCwUAA4IBAQB5+QEfNqLmT64cKBdD7iRyb7QsFHMjbQV73Y835ydE
llqTRXJx14QkrHCGz/G/GogzXfUymyOKdpa6J87OMjax2xu43oM5uP/1Ro0cYHZu
Tz88uZPy3YpRrJyutheGy6fKKc9bEfgMXVGMMML8W7rWkz9/X02445JJjByHX9Ww
n/80YFL+4efXIsXe6B5neJG57OQ1beahujw2G/6GSytn8b9rojMdJxMMkrEB9DH6
TLzsK/E7mt5nOf2wILCPznBe0YqEi9z+N4OjojGFgVSqZgXKwX8tepPkrWfzS9Xa
86Zztehk4Ju9XTBhufHgPPHPimHc28KEzX8XS0iTkww0
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:30 2025 by rpki-client