Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/gwSV8LhcAV0ShygKFn4nhuTdBw8.roa
File: gwSV8LhcAV0ShygKFn4nhuTdBw8.roa (raw, json)
Hash identifier: bemRpmrsIQYGEnsV+GsPkoxgQXzvpjJfNK3ChngOpW4=
Subject key identifier: 83:04:95:F0:B8:5C:01:5D:12:87:28:0A:16:7E:27:86:E4:DD:07:0F
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018A672A6C55A9DFAFF7523388A9E3A47D5D
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/gwSV8LhcAV0ShygKFn4nhuTdBw8.roa
Signing time: Tue 05 Sep 2023 21:05:48 +0000
ROA not before: Tue 05 Sep 2023 21:05:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3352
IP address blocks: 194.187.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:67:2a:6c:55:a9:df:af:f7:52:33:88:a9:e3:a4:7d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Sep 5 21:05:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=830495f0b85c015d1287280a167e2786e4dd070f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bb:16:40:3d:03:8e:b7:2d:03:99:00:b7:60:
28:9d:b5:37:cb:3e:32:dc:a7:bf:e7:99:50:5d:2e:
cb:49:0c:47:98:c4:35:8c:4f:39:58:fe:d2:93:4b:
51:85:5f:8d:d2:99:0a:15:35:73:10:c8:9d:5d:ac:
4d:aa:f1:92:3d:52:a8:c3:5c:1e:67:24:c1:49:10:
fb:e2:5c:04:28:4a:1b:30:e7:cb:98:2d:94:a6:68:
bf:8f:0a:6e:09:06:8b:30:2a:14:cc:e5:07:be:24:
61:6c:f0:eb:26:ab:2a:ab:0d:fb:25:39:27:01:64:
88:f3:91:6c:b0:0f:2c:21:15:33:99:96:40:12:37:
04:ea:6a:72:09:33:aa:43:8f:e3:a8:da:49:6d:ae:
9d:32:ea:3d:c5:d8:fa:26:1a:f4:cf:6d:4c:de:fe:
8a:86:6d:b4:36:6d:80:7c:54:87:b4:97:39:79:a3:
6c:81:0a:87:67:a6:1b:be:68:3f:db:00:1c:61:7d:
3e:73:84:87:b2:06:3a:15:37:5e:37:6e:a8:b7:3b:
2c:46:de:07:84:93:97:d3:de:f5:3a:fb:af:e9:5c:
c8:10:bb:72:6f:aa:0d:00:a7:f5:9e:64:5c:dc:fb:
05:44:01:a2:de:9c:53:db:85:50:c7:53:6b:7a:48:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:04:95:F0:B8:5C:01:5D:12:87:28:0A:16:7E:27:86:E4:DD:07:0F
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/gwSV8LhcAV0ShygKFn4nhuTdBw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:c8:40:0e:2b:9f:ec:57:35:f5:08:02:47:56:81:0f:e8:70:
ff:65:5d:fa:48:4d:e3:94:51:54:fd:73:d1:3d:36:f7:1a:28:
7e:1e:07:21:d5:6c:de:88:51:c1:f1:28:9e:9f:c0:8b:c7:7c:
35:9f:c4:07:c2:e3:5f:3a:97:a6:1b:cc:ea:22:13:6a:4c:76:
ed:88:7e:59:fe:f8:a8:19:21:60:8b:39:ee:39:1d:f3:4e:cb:
f4:77:40:06:33:80:c6:ae:ca:d8:7b:30:4b:ff:c9:5f:58:3a:
69:d0:b4:1e:af:e7:c1:6b:54:66:fe:2a:68:23:fe:bd:11:36:
40:d8:65:a8:b2:6e:82:ea:b7:48:9f:80:55:0e:9c:02:9e:f1:
21:d6:30:69:c6:8a:89:b0:ae:51:72:c3:51:fb:4d:73:62:27:
c8:dd:59:de:3f:12:6d:52:aa:32:59:10:6e:f0:cb:0a:d6:0d:
a1:e4:7a:98:73:71:31:0e:5e:5c:c7:1f:77:55:d4:9a:54:5f:
a5:2f:f6:5c:f9:76:b3:74:d5:88:93:48:22:91:12:b4:ad:f8:
23:6d:25:88:b5:0b:d9:de:33:ae:85:e7:90:e7:30:a5:16:5a:
1e:d0:80:98:e9:be:d0:eb:70:86:e9:9c:6c:77:c8:68:46:35:
d8:c5:bb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:51 2024 by rpki-client on console-ams.rpki-client.org