Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/gGokBiJMpDn14R9ZO0iWhjI_mok.roa
File: gGokBiJMpDn14R9ZO0iWhjI_mok.roa (raw, json)
Hash identifier: B4XnXL5DX/tB6TlbcZdP4AKjNT/Ly2yBXAn+f3jinQ8=
Subject key identifier: 80:6A:24:06:22:4C:A4:39:F5:E1:1F:59:3B:48:96:86:32:3F:9A:89
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01856F5DD3D73B89A19686B608E070AB479F
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/gGokBiJMpDn14R9ZO0iWhjI_mok.roa
Signing time: Sun 01 Jan 2023 22:04:58 +0000
ROA not before: Sun 01 Jan 2023 22:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207637
IP address blocks: 212.183.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d3:d7:3b:89:a1:96:86:b6:08:e0:70:ab:47:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 22:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=806a2406224ca439f5e11f593b489686323f9a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:32:da:9e:e5:ad:23:d6:ea:0d:73:9b:95:19:
b9:f3:25:e2:ad:23:9c:d6:7e:98:9b:0e:10:c1:ed:
2f:69:01:61:d7:3e:7e:5e:fc:f6:6f:d4:68:f2:00:
12:ca:bf:8b:bf:64:ba:25:34:2e:c3:b1:ab:71:42:
52:4c:16:6e:3b:b4:8d:8f:4b:e7:45:33:cd:de:37:
1d:84:ae:6b:f1:7a:bf:88:ad:78:c7:5a:ce:46:66:
98:e7:c7:80:40:26:9f:e2:e1:db:95:47:73:68:bb:
f8:cb:c2:87:9e:00:84:18:48:34:fa:8d:7e:b0:b0:
0a:d4:6e:cc:10:57:d8:cb:b3:c4:5f:20:6b:e5:bc:
03:ba:10:0d:51:e0:b3:8d:fc:34:a2:a3:28:69:22:
a5:2a:6d:77:99:76:96:07:ce:ec:f8:54:5c:36:77:
f6:b8:52:2d:7b:0a:97:2e:5d:64:37:77:0c:3d:a1:
6c:c6:51:0e:30:9b:03:e1:12:26:49:49:52:53:cf:
81:a5:de:59:85:a8:69:8c:94:c0:90:65:ca:c0:47:
1d:11:97:67:7b:13:02:72:90:ae:90:02:50:42:80:
b3:cb:b2:a0:3f:6e:23:92:1f:23:30:6e:29:01:5f:
01:49:c0:79:58:eb:49:9f:10:e9:79:20:50:4a:c5:
77:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6A:24:06:22:4C:A4:39:F5:E1:1F:59:3B:48:96:86:32:3F:9A:89
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/gGokBiJMpDn14R9ZO0iWhjI_mok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.183.48.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5d:34:b0:94:87:5d:3b:ca:41:4c:92:2f:46:58:8f:0f:fd:
49:11:15:32:59:7c:01:b6:6c:68:aa:83:2e:2f:c0:89:0e:a6:
97:d2:e9:4b:aa:fe:5e:30:6f:54:2b:58:6e:1b:5f:44:dd:97:
5c:89:61:11:ec:4c:5c:2e:ef:ed:d6:f2:64:75:c8:5e:b9:5b:
77:bc:b5:66:da:86:8b:2c:6b:79:7e:8c:7b:01:d9:b7:b6:76:
1f:e3:b1:d2:38:9a:13:85:52:52:ea:b9:72:cb:d5:da:30:13:
21:85:0b:79:42:3b:3f:4e:a0:24:e5:ca:12:34:41:18:9c:9b:
c0:8b:1b:2a:27:21:f0:60:cd:e9:7c:7e:00:ca:bc:d3:27:ea:
01:e6:64:b3:1b:18:6a:87:c1:1a:77:c9:a1:1a:5f:39:64:1f:
e6:0b:a0:24:4c:39:a0:f0:12:73:3a:89:6e:be:ba:54:9d:26:
5e:33:11:e9:69:e0:8d:b5:14:01:02:94:ed:08:d6:6a:8c:31:
d6:88:7b:db:f9:5e:4e:34:f4:71:b3:31:5f:b1:6a:61:66:b9:
55:d2:6e:a8:06:56:96:7c:1c:f1:7b:8a:64:e5:61:f1:4e:75:
62:db:e1:09:bb:40:28:39:c1:7c:94:32:76:fb:6a:1d:6c:1e:
68:4d:4a:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXdPXO4mhloa2COBwq0efMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4
NzE3MjUwHhcNMjMwMTAxMjIwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDZhMjQwNjIyNGNhNDM5ZjVlMTFmNTkzYjQ4OTY4NjMyM2Y5YTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDLanuWtI9bqDXOblRm58yXirSOc
1n6Ymw4Qwe0vaQFh1z5+Xvz2b9Ro8gASyr+Lv2S6JTQuw7GrcUJSTBZuO7SNj0vn
RTPN3jcdhK5r8Xq/iK14x1rORmaY58eAQCaf4uHblUdzaLv4y8KHngCEGEg0+o1+
sLAK1G7MEFfYy7PEXyBr5bwDuhANUeCzjfw0oqMoaSKlKm13mXaWB87s+FRcNnf2
uFItewqXLl1kN3cMPaFsxlEOMJsD4RImSUlSU8+Bpd5ZhahpjJTAkGXKwEcdEZdn
exMCcpCukAJQQoCzy7KgP24jkh8jMG4pAV8BScB5WOtJnxDpeSBQSsV3uwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIBqJAYiTKQ59eEfWTtIloYyP5qJMB8GA1UdIwQY
MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt
ODQ5ZDNhNmI5YzJkLzEvZ0dva0JpSk1wRG4xNFI5Wk8waVdoaklfbW9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk
LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1LcwMA0G
CSqGSIb3DQEBCwUAA4IBAQBaXTSwlIddO8pBTJIvRliPD/1JERUyWXwBtmxoqoMu
L8CJDqaX0ulLqv5eMG9UK1huG19E3ZdciWER7ExcLu/t1vJkdcheuVt3vLVm2oaL
LGt5fox7Adm3tnYf47HSOJoThVJS6rlyy9XaMBMhhQt5Qjs/TqAk5coSNEEYnJvA
ixsqJyHwYM3pfH4AyrzTJ+oB5mSzGxhqh8Ead8mhGl85ZB/mC6AkTDmg8BJzOolu
vrpUnSZeMxHpaeCNtRQBApTtCNZqjDHWiHvb+V5ONPRxszFfsWphZrlV0m6oBlaW
fBzxe4pk5WHxTnVi2+EJu0AoOcF8lDJ2+2odbB5oTUq2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:16 2024 by rpki-client on console-ams.rpki-client.org