Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/gcPHWRR7DeHpcyg9zlyvmFJuDcg.roa
File: gcPHWRR7DeHpcyg9zlyvmFJuDcg.roa (raw, json)
Hash identifier: zsCoVliKpLRuUVrHuEek1GKzenmmN8w0iuCW7w5lcdQ=
Subject key identifier: 81:C3:C7:59:14:7B:0D:E1:E9:73:28:3D:CE:5C:AF:98:52:6E:0D:C8
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01863C384F01EB442F165BA447946B90C263
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/gcPHWRR7DeHpcyg9zlyvmFJuDcg.roa
Signing time: Fri 10 Feb 2023 16:46:08 +0000
ROA not before: Fri 10 Feb 2023 16:46:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 92.114.107.0/24 maxlen: 24
62.197.134.0/24 maxlen: 24
213.32.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3c:38:4f:01:eb:44:2f:16:5b:a4:47:94:6b:90:c2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 10 16:46:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81c3c759147b0de1e973283dce5caf98526e0dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c3:4d:19:a1:22:ec:9b:b2:eb:78:03:b0:fa:
d6:76:ee:60:5d:2e:57:2f:ad:ec:5e:73:77:e4:43:
67:2b:b0:6d:7d:d7:b7:0c:4f:79:8b:f7:82:1e:ce:
12:f2:4a:81:02:c1:23:eb:74:a0:ae:82:b0:15:b6:
97:c1:db:76:14:c6:9f:59:94:a6:5b:45:10:16:ee:
02:80:b2:ea:22:3f:28:ad:22:b6:c2:23:ae:bf:c3:
d2:fd:b7:58:da:42:f9:9f:0c:01:0d:87:85:3b:1d:
88:c4:24:52:55:80:3f:2b:bb:e1:21:75:f7:7e:cb:
af:a4:2a:ac:e5:45:a3:84:7d:1f:4c:44:a5:b1:b1:
45:9e:57:aa:d2:ad:c1:f9:3d:7d:94:20:f1:b7:da:
2c:21:d5:91:f0:b8:72:f8:7b:c1:25:aa:75:c2:09:
0d:b9:a7:71:22:2b:ed:b2:40:f7:87:c7:df:7f:99:
0d:30:73:c1:71:b2:d0:3c:b3:db:9f:27:06:12:46:
b0:4e:64:fa:4a:c9:e1:13:14:dd:c4:eb:88:49:ad:
5b:75:52:5a:d7:e0:38:98:42:86:09:45:bd:ed:10:
2f:ed:a9:da:35:56:5f:15:86:68:35:31:45:fc:3c:
a1:bb:da:35:9b:12:d1:43:2f:a0:f0:49:64:c3:58:
9a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C3:C7:59:14:7B:0D:E1:E9:73:28:3D:CE:5C:AF:98:52:6E:0D:C8
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/gcPHWRR7DeHpcyg9zlyvmFJuDcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.134.0/24
92.114.107.0/24
213.32.251.0/24
Signature Algorithm: sha256WithRSAEncryption
82:1b:a5:e4:9c:e5:a0:99:5f:75:72:52:c4:7d:2a:52:97:ec:
3a:eb:ef:d3:41:9b:b1:d8:ac:05:9f:1f:e1:3c:66:bb:d0:04:
7f:07:47:a2:05:ee:dd:11:72:91:92:7a:46:f1:4f:63:e4:84:
38:62:3d:8d:70:c5:0e:6e:d2:cd:81:1f:1d:41:74:25:84:bf:
7d:01:2b:99:25:54:38:32:96:6a:0f:d8:1f:dc:06:f7:09:61:
87:66:30:1e:fc:a5:c2:87:38:a1:d0:a1:ca:b9:30:c6:29:8d:
eb:ca:5e:28:b6:70:95:25:e6:70:95:a9:7f:07:2b:d1:98:10:
cd:5f:5c:4c:86:d0:78:5c:85:52:fc:04:11:31:5f:0c:6d:4c:
97:1b:c9:f4:3f:63:4a:a1:06:c7:f8:c5:7c:b2:10:da:06:96:
e5:e8:c4:26:13:ba:15:7d:1e:48:03:bc:36:10:3a:d5:27:d6:
e6:3b:5a:2b:90:2d:37:cb:b4:26:4b:00:9f:b5:fd:67:74:7a:
50:7c:4d:e7:d4:c7:05:f3:df:d5:2d:51:0f:9f:89:0a:37:f8:
f8:79:0c:bf:aa:f6:42:11:3b:1f:93:5b:fd:6b:fe:15:a4:11:
e3:f9:6a:28:2b:5f:56:81:ba:45:a9:45:40:4a:9d:6b:ff:4c:
b3:13:4e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org