Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/GKTG7ZuUq6_LYgDTpEJUd8SE9Hw.roa
File: GKTG7ZuUq6_LYgDTpEJUd8SE9Hw.roa (raw, json)
Hash identifier: 92U1BB8SslPOVQpYTqrzNglTpdQZeZPPYR+0yebEzC0=
Subject key identifier: 18:A4:C6:ED:9B:94:AB:AF:CB:62:00:D3:A4:42:54:77:C4:84:F4:7C
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018E10993AAD0EBF4072B14F2BD777E78625
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/GKTG7ZuUq6_LYgDTpEJUd8SE9Hw.roa
Signing time: Tue 05 Mar 2024 21:51:01 +0000
ROA not before: Tue 05 Mar 2024 21:51:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51692
IP address blocks: 91.186.216.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Mar 2024 08:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:10:99:3a:ad:0e:bf:40:72:b1:4f:2b:d7:77:e7:86:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Mar 5 21:51:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18a4c6ed9b94abafcb6200d3a4425477c484f47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d3:b9:8d:1f:e4:76:fd:12:be:ae:b5:c4:f4:
c0:63:f6:17:62:30:83:fb:ce:63:96:48:24:c4:43:
0c:c9:73:72:c5:69:4a:db:52:c5:38:4b:dc:8c:c0:
b9:c6:84:c8:40:8c:03:c6:f0:da:a3:81:d4:fa:18:
b9:8d:01:0c:ef:86:b9:6d:35:d2:89:4d:81:0d:4f:
79:16:84:ff:be:6a:76:4b:e3:88:49:99:36:aa:82:
eb:49:54:f2:9f:f9:09:b9:63:c3:c7:8d:18:e2:ea:
33:86:cf:c8:99:19:04:f5:bb:ea:95:23:da:d8:e5:
c2:5c:a5:ff:9f:d3:81:8d:51:6c:15:d9:dd:8a:3a:
8d:fb:53:28:22:59:7e:d0:39:22:7b:17:97:cb:28:
aa:82:5c:98:e6:1d:80:b7:9e:e7:44:06:a8:1f:fa:
d3:01:92:ea:f4:78:df:1b:61:89:1e:0c:ac:ab:9d:
93:ed:db:02:d6:47:c9:da:f6:b5:48:ec:92:ef:54:
0e:a0:a4:65:96:4a:22:30:06:a0:71:fa:3e:ea:93:
08:fe:40:38:10:86:09:09:c7:4f:34:4d:06:d6:87:
27:06:b0:0f:70:be:f5:56:1e:93:6d:5f:19:06:e8:
01:4e:f6:1b:a4:60:ea:de:84:a3:35:62:5f:d6:3d:
ac:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A4:C6:ED:9B:94:AB:AF:CB:62:00:D3:A4:42:54:77:C4:84:F4:7C
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/GKTG7ZuUq6_LYgDTpEJUd8SE9Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.216.0/23
Signature Algorithm: sha256WithRSAEncryption
51:03:92:21:09:2d:2c:15:1b:d2:d7:c1:44:58:4d:ee:8d:10:
b3:3a:88:f8:52:7c:f6:1c:4a:1c:c7:3f:2e:9f:2e:aa:6b:c6:
10:56:a0:0e:06:e6:e0:45:53:5e:b7:4e:ed:94:6d:37:2f:fa:
af:f6:c0:fa:fa:b1:c4:e9:7c:73:2c:eb:71:05:b8:16:62:68:
ae:40:0a:05:42:18:04:66:98:61:67:e1:95:46:67:d5:20:d8:
b5:e3:2d:7d:d8:f4:d1:30:11:e3:a5:e5:a8:96:09:cd:a0:6e:
34:8b:e6:1c:48:21:35:d0:c2:1c:c6:75:51:02:61:55:cb:61:
11:3e:fd:b5:da:c2:34:b2:f9:e3:ed:b5:5c:35:22:3f:56:61:
e3:ec:b9:b8:99:a4:12:db:86:a3:97:c3:63:06:2d:b3:73:43:
60:67:43:57:52:83:a0:a8:23:91:0b:9e:56:7c:d4:00:2b:dc:
47:a3:b8:5e:74:4c:80:b5:58:fe:8a:1b:6f:8e:a7:da:80:96:
1f:27:10:23:f8:7e:52:57:48:0f:c2:3f:f7:6c:22:31:23:85:
c6:2d:27:6e:47:ef:e9:de:55:2e:c1:bf:0e:17:22:a4:d0:97:
61:ab:15:5f:f4:b4:dd:1c:29:14:23:81:6b:14:01:9f:e0:8d:
62:bd:89:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4QmTqtDr9AcrFPK9d354YlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjQwMzA1MjE1MTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGE0YzZlZDliOTRhYmFmY2I2MjAwZDNhNDQyNTQ3N2M0ODRmNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltO5jR/kdv0Svq61xPTAY/YXYjCD
+85jlkgkxEMMyXNyxWlK21LFOEvcjMC5xoTIQIwDxvDao4HU+hi5jQEM74a5bTXS
iU2BDU95FoT/vmp2S+OISZk2qoLrSVTyn/kJuWPDx40Y4uozhs/ImRkE9bvqlSPa
2OXCXKX/n9OBjVFsFdndijqN+1MoIll+0DkiexeXyyiqglyY5h2At57nRAaoH/rT
AZLq9HjfG2GJHgysq52T7dsC1kfJ2va1SOyS71QOoKRllkoiMAagcfo+6pMI/kA4
EIYJCcdPNE0G1ocnBrAPcL71Vh6TbV8ZBugBTvYbpGDq3oSjNWJf1j2s5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBikxu2blKuvy2IA06RCVHfEhPR8MB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvR0tURzdadVVxNl9MWWdEVHBFSlVkOFNFOUh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW7rYMA0G
CSqGSIb3DQEBCwUAA4IBAQBRA5IhCS0sFRvS18FEWE3ujRCzOoj4Unz2HEocxz8u
ny6qa8YQVqAOBubgRVNet07tlG03L/qv9sD6+rHE6XxzLOtxBbgWYmiuQAoFQhgE
ZphhZ+GVRmfVINi14y192PTRMBHjpeWolgnNoG40i+YcSCE10MIcxnVRAmFVy2ER
Pv212sI0svnj7bVcNSI/VmHj7Lm4maQS24ajl8NjBi2zc0NgZ0NXUoOgqCORC55W
fNQAK9xHo7hedEyAtVj+ihtvjqfagJYfJxAj+H5SV0gPwj/3bCIxI4XGLSduR+/p
3lUuwb8OFyKk0JdhqxVf9LTdHCkUI4FrFAGf4I1ivYme
-----END CERTIFICATE-----
Generated at Sat Mar 30 09:21:14 2024 by rpki-client on console-fra.rpki-client.org