Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/GT2osMOxRQMwpLPLGS1fmjVJFx0.roa
File: GT2osMOxRQMwpLPLGS1fmjVJFx0.roa (raw, json)
Hash identifier: ve8YTJPqzYdvMBPof18JdLdGQt2l2QTs26sHqwlMRi8=
Subject key identifier: 19:3D:A8:B0:C3:B1:45:03:30:A4:B3:CB:19:2D:5F:9A:35:49:17:1D
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 01856BC115C819E505211488A55DBE54856C
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/GT2osMOxRQMwpLPLGS1fmjVJFx0.roa
Signing time: Sun 01 Jan 2023 05:14:54 +0000
ROA not before: Sun 01 Jan 2023 05:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59674
IP address blocks: 188.132.184.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:15:c8:19:e5:05:21:14:88:a5:5d:be:54:85:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Jan 1 05:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=193da8b0c3b1450330a4b3cb192d5f9a3549171d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:a0:06:9e:52:e4:5c:d1:fe:f8:3b:1b:73:
16:c6:4c:75:13:5f:92:54:3f:7c:c1:e4:07:d5:5a:
6d:27:c4:33:fb:6b:b3:c2:4d:bf:90:63:3a:df:34:
8d:0a:38:58:b2:e0:58:2d:3f:47:11:62:4e:72:da:
d4:43:3c:cd:f1:f0:a4:65:78:0f:93:1d:0c:2c:06:
20:b5:b2:2c:15:fe:64:85:d7:29:71:dd:aa:c4:a1:
cb:e5:85:c0:a5:65:09:ba:6e:47:5e:99:92:60:42:
74:ee:57:f5:8a:f7:3d:82:96:97:f4:60:e1:32:df:
e9:f2:f4:b7:4f:1a:ec:16:11:83:f4:7e:20:74:17:
9e:b6:3c:be:90:9a:ec:e3:51:1d:37:14:f2:21:a6:
4c:da:ac:7c:79:86:af:22:c2:bb:f9:aa:ba:aa:7b:
ce:51:95:c6:98:02:d8:49:12:79:cd:ca:2c:db:bf:
78:c8:81:44:2a:fb:dc:cc:d2:34:84:dc:08:25:77:
50:74:68:07:37:2d:64:16:ba:4b:18:58:77:45:81:
60:58:ed:e0:b8:f1:b9:f9:77:c5:92:6b:2c:25:6f:
74:ba:7f:41:e6:10:5c:e4:a5:98:be:fe:ce:26:61:
49:f3:c2:de:fa:fa:71:dd:47:7f:b4:bb:f7:95:8e:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3D:A8:B0:C3:B1:45:03:30:A4:B3:CB:19:2D:5F:9A:35:49:17:1D
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/GT2osMOxRQMwpLPLGS1fmjVJFx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.184.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:d3:41:a7:31:ae:e4:b4:11:6a:c5:98:f8:40:97:ff:c8:0b:
ea:ff:4e:d4:05:63:c0:29:35:22:76:45:e9:c1:b4:65:79:b7:
b2:da:89:34:a8:65:77:84:6c:98:db:fe:ff:6d:3b:b7:3e:18:
50:9e:dd:83:c9:45:c6:7d:0b:33:4f:f3:bf:3a:53:14:9d:e2:
98:d3:30:4e:06:7d:a1:76:cb:b3:0e:be:7f:e9:43:71:a2:62:
17:5e:b6:4f:fa:a2:f7:9e:2a:39:a5:aa:93:d3:de:de:4d:47:
97:25:85:11:25:b9:89:21:d6:86:c5:29:6d:7b:1d:b2:92:9c:
f3:47:1a:96:20:f4:04:a2:27:09:5a:b7:3a:3f:d7:10:43:48:
77:31:8a:df:a5:0c:93:9c:57:7b:8d:80:d3:00:1c:06:f5:f8:
52:b6:89:bd:c7:f0:1a:a2:dd:ab:67:93:03:bc:ba:00:13:64:
6f:a2:9a:79:10:95:31:ab:28:d4:68:0e:e8:80:79:82:44:79:
40:22:6a:65:68:9a:ca:b4:e1:ee:ee:57:79:13:50:5e:8c:c5:
60:12:b0:b7:62:fc:22:15:6c:6f:37:40:98:8f:79:a2:0f:50:
2b:74:1e:18:fa:94:0a:f5:f4:e6:25:52:30:85:58:c3:27:fd:
2e:79:b3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 4 22:58:17 2023 by rpki-client on console-fra.rpki-client.org