Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/Gpns6mTAqRTPgGuNaxeJl8GESCc.roa
File: Gpns6mTAqRTPgGuNaxeJl8GESCc.roa (raw, json)
Hash identifier: y+lMNzLnfFlL94IyclVsrhybWXBr14Ght5duiFlsmMg=
Subject key identifier: 1A:99:EC:EA:64:C0:A9:14:CF:80:6B:8D:6B:17:89:97:C1:84:48:27
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 01856E78E79FD8F05093EC3DBE44F9509779
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/Gpns6mTAqRTPgGuNaxeJl8GESCc.roa
Signing time: Sun 01 Jan 2023 17:54:55 +0000
ROA not before: Sun 01 Jan 2023 17:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24631
IP address blocks: 176.122.211.0/24 maxlen: 24
176.122.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:e7:9f:d8:f0:50:93:ec:3d:be:44:f9:50:97:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Jan 1 17:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a99ecea64c0a914cf806b8d6b178997c1844827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:b0:8c:f4:5c:09:a6:41:67:b4:f1:b2:ed:
f5:56:f2:cc:bc:59:65:ec:02:bd:15:22:25:5c:71:
76:b5:d1:7a:a4:6d:d2:84:b4:51:b3:e6:55:67:41:
7c:a7:c3:f9:1e:8a:75:ce:f4:03:e9:85:75:2f:f4:
ae:99:4f:55:77:b3:ca:d9:01:57:34:09:aa:e1:96:
e2:49:5c:eb:97:bc:53:1f:ef:83:22:17:d7:90:51:
13:a8:aa:64:66:a0:51:a0:89:1b:35:87:bf:cb:de:
05:3a:6b:7b:80:6a:f4:59:e8:44:41:f0:23:f9:f1:
7a:a3:3a:0c:12:46:4d:0e:2b:df:48:de:b4:46:ac:
a6:34:90:10:95:b8:76:ef:d4:d9:f6:61:b5:e7:50:
e6:80:b3:c6:37:e4:e9:d0:d3:a1:72:de:76:7d:8e:
5e:fd:04:43:b3:5d:09:65:38:73:c3:fb:d4:e4:98:
7a:c2:69:84:fb:35:b9:2c:21:9b:69:8f:ce:5f:a1:
a8:e5:44:9c:5b:33:e0:81:bd:be:25:42:d7:ba:3e:
43:3d:74:32:53:66:ea:d5:bc:8e:d4:a9:e8:ec:92:
06:57:4f:0b:d8:72:f3:da:12:67:a9:cd:73:a3:5c:
a9:13:dd:4a:d3:dd:f0:c0:a6:3c:6b:ed:13:2d:1e:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:99:EC:EA:64:C0:A9:14:CF:80:6B:8D:6B:17:89:97:C1:84:48:27
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/Gpns6mTAqRTPgGuNaxeJl8GESCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.122.210.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:af:76:39:c1:d4:9a:f0:78:1d:d6:59:35:10:18:e2:ed:14:
c2:27:0d:e9:7e:67:56:08:51:95:27:6a:15:1f:e0:30:be:dd:
b5:6c:11:c4:2b:8b:6f:25:6f:6a:20:31:a9:87:32:7e:1d:fd:
ce:86:06:77:f3:61:c9:25:54:56:03:85:e3:5c:7d:5c:9e:e6:
45:18:7b:fb:c8:c1:0a:a5:ce:52:9f:a9:74:48:0d:52:a4:9f:
b8:92:c3:70:8d:65:12:97:e3:ef:48:d0:02:9c:19:e0:20:b8:
bc:b2:d4:ee:39:0e:2d:52:7c:46:a4:26:73:54:70:27:cb:34:
a7:95:2f:fb:7e:d2:15:08:f5:12:a8:48:f0:7e:e3:ec:7d:eb:
48:41:4f:3c:a8:a3:05:dc:d1:12:3b:ed:60:29:03:19:a6:e4:
ef:ef:8f:66:d7:78:c0:f5:21:f2:76:2b:cb:62:fe:0d:95:03:
af:db:8e:09:99:e4:76:f1:4e:ab:ef:00:5c:af:bb:e8:eb:1c:
f8:96:ce:7c:14:e4:f6:ea:78:8c:aa:0c:9c:c7:a4:e6:98:87:
34:72:f6:20:78:a1:08:c2:33:2e:ea:e0:9e:50:c1:a8:43:36:
ed:76:6e:33:87:21:ae:de:71:e0:94:88:25:50:e4:f1:17:b4:
8d:10:04:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVueOef2PBQk+w9vkT5UJd5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZGYwYmQwNGFhODQzZTY4MDgyZjZkZWNlMDc5ODczMmI2
Zjg4MzIwHhcNMjMwMTAxMTc1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTk5ZWNlYTY0YzBhOTE0Y2Y4MDZiOGQ2YjE3ODk5N2MxODQ0ODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocCwjPRcCaZBZ7Txsu31VvLMvFll
7AK9FSIlXHF2tdF6pG3ShLRRs+ZVZ0F8p8P5Hop1zvQD6YV1L/SumU9Vd7PK2QFX
NAmq4ZbiSVzrl7xTH++DIhfXkFETqKpkZqBRoIkbNYe/y94FOmt7gGr0WehEQfAj
+fF6ozoMEkZNDivfSN60RqymNJAQlbh279TZ9mG151DmgLPGN+Tp0NOhct52fY5e
/QRDs10JZThzw/vU5Jh6wmmE+zW5LCGbaY/OX6Go5UScWzPggb2+JULXuj5DPXQy
U2bq1byO1Kno7JIGV08L2HLz2hJnqc1zo1ypE91K093wwKY8a+0TLR7vaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBqZ7OpkwKkUz4BrjWsXiZfBhEgnMB8GA1UdIwQY
MBaAFMTfC9BKqEPmgIL23s4HmHMrb4gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAt
Y2I5ZTFlZDc3OWFjLzEvR3BuczZtVEFxUlRQZ0d1TmF4ZUpsOEdFU0NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAtY2I5ZTFlZDc3OWFj
LzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHrSMA0G
CSqGSIb3DQEBCwUAA4IBAQA9r3Y5wdSa8Hgd1lk1EBji7RTCJw3pfmdWCFGVJ2oV
H+Awvt21bBHEK4tvJW9qIDGphzJ+Hf3OhgZ382HJJVRWA4XjXH1cnuZFGHv7yMEK
pc5Sn6l0SA1SpJ+4ksNwjWUSl+PvSNACnBngILi8stTuOQ4tUnxGpCZzVHAnyzSn
lS/7ftIVCPUSqEjwfuPsfetIQU88qKMF3NESO+1gKQMZpuTv749m13jA9SHydivL
Yv4NlQOv244JmeR28U6r7wBcr7vo6xz4ls58FOT26niMqgycx6TmmIc0cvYgeKEI
wjMu6uCeUMGoQzbtdm4zhyGu3nHglIglUOTxF7SNEAQT
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:51 2024 by rpki-client on console-ams.rpki-client.org