Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/GXEHklAoTLyph2hX2AKQO78K1sI.roa
File: GXEHklAoTLyph2hX2AKQO78K1sI.roa (raw, json)
Hash identifier: hNd0F1WdATR6Np1uwGRfQrgmNxmh85dLBK/70eiYlBc=
Subject key identifier: 19:71:07:92:50:28:4C:BC:A9:87:68:57:D8:02:90:3B:BF:0A:D6:C2
Certificate issuer: /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Certificate serial: 018572835484D92A0DCC60E18B22621CE6FA
Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/GXEHklAoTLyph2hX2AKQO78K1sI.roa
Signing time: Mon 02 Jan 2023 12:44:47 +0000
ROA not before: Mon 02 Jan 2023 12:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200548
IP address blocks: 194.147.174.0/24 maxlen: 24
194.147.174.0/23 maxlen: 23
194.147.175.0/24 maxlen: 24
194.147.239.0/24 maxlen: 24
194.147.238.0/24 maxlen: 24
194.147.238.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:54:84:d9:2a:0d:cc:60:e1:8b:22:62:1c:e6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Validity
Not Before: Jan 2 12:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1971079250284cbca9876857d802903bbf0ad6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:7b:cf:a5:43:9d:23:e6:44:19:38:f3:52:
44:76:74:07:01:04:76:8e:02:f2:5b:10:45:eb:4b:
78:0a:ce:df:6a:c3:c6:dd:11:04:a8:30:f4:ed:d9:
e2:ea:57:b6:e9:bd:3c:79:61:d9:02:db:f9:33:96:
db:89:7d:74:85:f7:a3:b3:d6:15:62:bc:b2:4e:ab:
39:5a:b2:1c:51:08:3b:66:56:77:f9:e5:45:5f:b6:
16:95:39:f7:d8:b1:f2:ed:f4:70:04:f0:e3:f4:98:
44:3e:79:82:70:eb:2b:de:4d:f5:7f:e7:e4:d8:83:
c4:dc:87:2f:bc:c1:a4:0a:0c:da:18:f0:87:b9:10:
f7:d5:8d:ad:f7:0d:57:c7:a4:56:92:9e:25:e8:6e:
68:21:02:ec:cf:1f:8a:1b:44:a7:b6:15:89:8f:11:
54:81:8c:c8:6b:fc:50:cc:0f:f4:74:d6:5c:11:94:
41:8f:f4:76:86:2a:52:60:8f:60:35:e2:ed:fe:ce:
fb:73:00:3f:74:74:eb:47:99:a7:94:59:61:94:31:
dc:ea:f9:77:0f:a7:9c:28:2b:d4:91:2c:86:19:a5:
44:3a:e3:96:d0:12:11:d4:d5:f8:b6:6b:a6:94:48:
34:c3:58:c7:b3:ee:1b:6f:9a:eb:b8:a9:02:19:98:
b0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:71:07:92:50:28:4C:BC:A9:87:68:57:D8:02:90:3B:BF:0A:D6:C2
X509v3 Authority Key Identifier:
keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/GXEHklAoTLyph2hX2AKQO78K1sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.174.0/23
194.147.238.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:b3:66:63:db:10:21:d0:a9:f3:fe:d2:2b:84:89:75:8d:63:
f5:a3:30:af:47:30:79:53:3f:91:01:51:f5:43:f4:87:fb:09:
b3:34:0e:55:a0:9b:ee:ea:12:17:ca:85:89:21:b7:87:96:ce:
b0:d1:e1:72:df:6f:fa:c1:18:b5:d2:ba:d8:a1:0c:a2:ca:b8:
fe:35:da:41:59:6e:41:f7:69:dc:b0:47:3a:03:f7:26:58:29:
82:75:44:30:6a:48:4f:fa:0b:7f:06:e9:61:1a:6c:55:b9:6b:
ed:ad:23:6d:77:d5:19:6f:3a:73:6e:8c:f8:e0:7f:0e:d7:0e:
e7:51:39:22:8b:bc:e3:4c:86:a6:d2:03:9b:54:4e:75:e1:e7:
93:9f:9e:54:56:f1:62:b3:fb:03:0d:fc:c8:1c:dd:fd:9f:f1:
19:50:ab:4c:f8:bd:14:33:7c:36:e7:61:e8:fa:cd:d2:1b:e6:
5f:2f:59:d5:2c:15:63:ff:d8:1f:8a:ba:cd:0a:88:e9:ff:3d:
10:9f:99:e2:98:f7:8f:e6:ea:ac:43:e7:01:20:ac:06:92:0a:
74:63:95:01:f5:18:68:ba:5a:43:07:8f:55:fa:4b:7b:56:ee:
f1:a5:21:c0:30:21:bd:0d:1d:5e:f4:9e:4b:55:ed:1f:a7:78:
0b:c4:50:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:46 2024 by rpki-client on console-ams.rpki-client.org