Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/GGkkvs3xg3RRvffdjr4Rdh4zZK8.roa
File: GGkkvs3xg3RRvffdjr4Rdh4zZK8.roa (raw, json)
Hash identifier: DDwWXKQPUf3nFR+ORwBrjJVpykRuWXQvh61TsSEHFpI=
Subject key identifier: 18:69:24:BE:CD:F1:83:74:51:BD:F7:DD:8E:BE:11:76:1E:33:64:AF
Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial: 0187AF4B035323E820A7B475DD64C1227782
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/GGkkvs3xg3RRvffdjr4Rdh4zZK8.roa
Signing time: Sun 23 Apr 2023 18:05:41 +0000
ROA not before: Sun 23 Apr 2023 18:05:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.76.42.0/24 maxlen: 24
185.76.43.0/24 maxlen: 24
185.76.40.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:af:4b:03:53:23:e8:20:a7:b4:75:dd:64:c1:22:77:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Validity
Not Before: Apr 23 18:05:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=186924becdf1837451bdf7dd8ebe11761e3364af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:25:f3:c2:9f:01:71:16:00:38:d3:4a:2a:39:
2e:9a:9f:41:31:6f:30:f6:cb:01:48:e0:dc:2f:b6:
eb:72:a0:34:2c:57:3d:1e:54:d7:6e:69:bc:a8:84:
9b:af:f9:50:b4:8b:28:08:5c:84:ca:73:3a:17:6b:
11:1b:30:bf:f3:8e:5a:9a:c0:7d:c8:a2:be:6c:26:
fe:c6:f6:e4:37:36:1b:6c:45:67:d5:bd:c6:74:e5:
6c:65:4b:c3:35:ac:4f:4a:06:f0:3c:0c:d6:43:47:
83:62:71:11:26:a1:55:cf:8f:9c:70:fb:f9:4b:1e:
47:e5:4b:4f:3e:48:10:af:c9:85:8d:8b:a8:3c:f3:
cd:e7:3b:e6:c3:6d:b7:d6:f8:34:ba:4e:cb:3e:10:
3b:81:e9:4b:d8:b0:77:35:05:b5:58:02:63:16:6d:
c2:01:79:58:40:fe:ef:bd:a8:dd:a9:a0:88:2f:16:
62:dd:d5:4a:c7:65:46:33:28:09:d3:0f:9d:b3:8a:
04:eb:7e:15:3e:0f:d7:40:b3:56:1e:03:70:a1:a6:
7b:8f:24:c3:56:ec:91:40:56:7e:73:a4:23:b7:d9:
26:15:a9:55:e5:9e:87:32:64:89:20:f1:24:4d:13:
e2:cc:0c:2c:da:87:b9:0e:c5:25:4a:8c:6d:84:2b:
5d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:69:24:BE:CD:F1:83:74:51:BD:F7:DD:8E:BE:11:76:1E:33:64:AF
X509v3 Authority Key Identifier:
keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/GGkkvs3xg3RRvffdjr4Rdh4zZK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.40.0/22
Signature Algorithm: sha256WithRSAEncryption
86:a7:e0:f1:b2:80:2f:4b:db:d3:92:70:9b:a8:ea:b5:77:1a:
1d:dc:62:6a:7e:ae:ab:8b:ca:2d:54:37:ee:f0:00:75:60:8a:
ef:d3:9c:5d:38:34:eb:17:8c:69:68:7b:1a:ae:76:7d:fa:24:
9e:b9:ed:5f:e6:ea:a1:a8:b0:47:6f:ea:c5:cb:cb:6d:9a:37:
dc:9b:60:25:ef:0b:30:2b:2b:7f:36:38:ad:f9:5a:d8:d8:5c:
83:39:51:b1:cb:1b:28:ff:2f:83:2c:fa:39:3c:36:b1:73:cf:
9d:06:4b:1c:6e:e3:4e:b7:2f:3b:a1:2c:fc:78:d8:e5:7b:3f:
17:f8:07:b7:ff:64:9f:19:b0:48:8f:a6:69:47:97:7d:d9:17:
10:53:4d:66:d4:52:67:72:34:99:f4:a3:d3:c7:8b:26:f2:69:
60:ad:6c:60:18:53:fb:1f:0d:73:57:ca:75:34:5c:f4:fb:c3:
50:66:40:24:3d:06:76:c2:16:5f:de:f0:dd:bf:73:bd:71:eb:
8b:04:5a:a8:5b:70:3b:f5:76:37:1e:6d:cc:c3:7b:6f:82:2e:
42:89:ed:a6:7d:d4:2f:d5:ee:72:4b:ac:0d:21:5f:a5:a9:31:
06:5c:b8:d2:09:96:ce:9e:d1:7f:a6:3e:91:6f:0f:78:87:0b:
1d:81:a3:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYevSwNTI+ggp7R13WTBIneCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYTVjOTBjYTkyODMxM2JjNzBkMjY4M2JiMGY2NGQ2MzJi
MjczYTEwHhcNMjMwNDIzMTgwNTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODY5MjRiZWNkZjE4Mzc0NTFiZGY3ZGQ4ZWJlMTE3NjFlMzM2NGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSXzwp8BcRYAONNKKjkump9BMW8w
9ssBSODcL7brcqA0LFc9HlTXbmm8qISbr/lQtIsoCFyEynM6F2sRGzC/845amsB9
yKK+bCb+xvbkNzYbbEVn1b3GdOVsZUvDNaxPSgbwPAzWQ0eDYnERJqFVz4+ccPv5
Sx5H5UtPPkgQr8mFjYuoPPPN5zvmw2231vg0uk7LPhA7gelL2LB3NQW1WAJjFm3C
AXlYQP7vvajdqaCILxZi3dVKx2VGMygJ0w+ds4oE634VPg/XQLNWHgNwoaZ7jyTD
VuyRQFZ+c6Qjt9kmFalV5Z6HMmSJIPEkTRPizAws2oe5DsUlSoxthCtdaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBhpJL7N8YN0Ub333Y6+EXYeM2SvMB8GA1UdIwQY
MBaAFFKlyQypKDE7xw0mg7sPZNYysnOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUt
MTNlZDYzM2Y5MjJhLzEvR0dra3ZzM3hnM1JSdmZmZGpyNFJkaDR6Wks4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUtMTNlZDYzM2Y5MjJh
LzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUwoMA0G
CSqGSIb3DQEBCwUAA4IBAQCGp+DxsoAvS9vTknCbqOq1dxod3GJqfq6ri8otVDfu
8AB1YIrv05xdODTrF4xpaHsarnZ9+iSeue1f5uqhqLBHb+rFy8ttmjfcm2Al7wsw
Kyt/Njit+VrY2FyDOVGxyxso/y+DLPo5PDaxc8+dBkscbuNOty87oSz8eNjlez8X
+Ae3/2SfGbBIj6ZpR5d92RcQU01m1FJncjSZ9KPTx4sm8mlgrWxgGFP7Hw1zV8p1
NFz0+8NQZkAkPQZ2whZf3vDdv3O9ceuLBFqoW3A79XY3Hm3Mw3tvgi5Cie2mfdQv
1e5yS6wNIV+lqTEGXLjSCZbOntF/pj6Rbw94hwsdgaNo
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:25 2023 by rpki-client on console-ams.rpki-client.org