Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/gpC3rFyPgJePgr_ZWRXxOJzI5FA.roa
File: gpC3rFyPgJePgr_ZWRXxOJzI5FA.roa (raw, json)
Hash identifier: zMkLufkQxxn6GTK0MREE0iZKfzjPPelAoWCewjDYgsI=
Subject key identifier: 82:90:B7:AC:5C:8F:80:97:8F:82:BF:D9:59:15:F1:38:9C:C8:E4:50
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 01856FDDC62A602019681090A22D15809C70
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/gpC3rFyPgJePgr_ZWRXxOJzI5FA.roa
Signing time: Mon 02 Jan 2023 00:24:43 +0000
ROA not before: Mon 02 Jan 2023 00:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29129
IP address blocks: 80.247.80.0/21 maxlen: 21
80.247.88.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:c6:2a:60:20:19:68:10:90:a2:2d:15:80:9c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Jan 2 00:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8290b7ac5c8f80978f82bfd95915f1389cc8e450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:1a:99:64:9d:32:23:9f:ec:9b:42:c3:44:
25:a2:05:9f:d6:75:f5:5b:ec:ff:66:cb:ee:2f:2c:
a5:db:93:4f:86:56:9f:fb:a2:e1:42:05:b9:45:9f:
15:61:d1:26:f6:76:06:b3:f0:44:1b:4d:f4:0b:3f:
fb:76:8d:99:9d:b3:6a:a8:55:77:f1:fa:05:e4:87:
03:96:90:6f:9e:9f:b1:59:23:72:f0:bb:f4:95:b3:
aa:81:9c:ed:42:2e:27:ca:68:c1:5b:90:5b:d4:7d:
62:24:5c:b1:d3:4d:98:a4:3e:bd:71:fd:cc:ed:c9:
f9:48:f7:e7:f3:15:87:c0:f2:77:fd:96:32:34:86:
25:c0:16:4e:79:b8:78:8e:6b:d5:93:3c:f3:f0:8b:
0d:6c:d9:0a:26:0b:b7:e1:fc:35:9f:2a:0e:02:14:
13:ee:52:af:19:42:8e:e0:e9:3d:ad:c8:3f:f8:1d:
49:fd:50:fc:bf:6c:a3:aa:db:17:9f:b5:0b:59:75:
76:e3:f4:a9:1b:b8:f5:5d:e5:8f:7b:8c:41:cc:d1:
78:d4:1c:ab:a9:73:be:25:80:f1:3f:64:58:ba:6c:
ac:e8:b7:4e:ad:4a:79:68:09:9c:5e:2d:68:31:c1:
30:0d:5a:93:f9:be:fc:2b:c2:dd:9e:d0:04:d4:24:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:90:B7:AC:5C:8F:80:97:8F:82:BF:D9:59:15:F1:38:9C:C8:E4:50
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/gpC3rFyPgJePgr_ZWRXxOJzI5FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.80.0-80.247.91.255
Signature Algorithm: sha256WithRSAEncryption
89:de:1a:6d:80:1e:d4:89:85:15:00:67:d6:9a:e3:24:22:22:
b4:5c:f3:25:27:43:9a:7a:ba:72:05:92:33:e4:73:43:73:ae:
20:91:5f:cf:cd:d3:00:b8:26:7d:89:79:5c:4d:7b:b6:14:c9:
33:a5:2f:dc:e2:1c:7d:58:5f:f5:a8:a7:2c:8b:89:2e:4c:50:
09:63:f1:30:cf:f8:99:bd:ed:5b:13:40:39:04:52:7a:5e:01:
f8:47:c8:7b:ed:8f:9e:64:bd:5f:1b:0b:f0:4b:c4:fc:0b:3e:
17:87:04:b4:bc:a0:4c:f6:2d:5f:26:ad:b4:23:69:35:3b:57:
0b:29:c6:4c:f5:3a:ee:26:82:7a:3f:eb:d3:ed:b6:1d:69:e9:
be:2f:9a:87:47:40:f2:7d:14:34:26:97:1b:d6:e9:7b:92:c6:
77:38:f7:1f:3d:bb:ec:0a:db:9a:90:b1:6e:1d:a2:20:35:e7:
c4:0b:8e:0e:53:bd:c4:ef:fb:cf:1b:8a:5d:84:90:fa:80:e4:
f1:ff:1f:53:ea:5e:ea:44:a1:95:6e:4f:e8:91:1b:94:22:40:
7b:82:fa:74:b7:4f:2a:56:02:84:25:a5:1d:f0:67:29:a0:97:
9b:d3:89:83:5a:84:6a:98:94:da:f5:7f:bc:a2:b4:a2:ad:f5:
78:8b:11:66
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVv3cYqYCAZaBCQoi0VgJxwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNmYyZTQ5YTMxZThkZjljNWFhMDhhYWYyNDBiNWM4MzJi
OWNiOTMwHhcNMjMwMTAyMDAyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjkwYjdhYzVjOGY4MDk3OGY4MmJmZDk1OTE1ZjEzODljYzhlNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ssamWSdMiOf7JtCw0QlogWf1nX1
W+z/ZsvuLyyl25NPhlaf+6LhQgW5RZ8VYdEm9nYGs/BEG030Cz/7do2ZnbNqqFV3
8foF5IcDlpBvnp+xWSNy8Lv0lbOqgZztQi4nymjBW5Bb1H1iJFyx002YpD69cf3M
7cn5SPfn8xWHwPJ3/ZYyNIYlwBZOebh4jmvVkzzz8IsNbNkKJgu34fw1nyoOAhQT
7lKvGUKO4Ok9rcg/+B1J/VD8v2yjqtsXn7ULWXV24/SpG7j1XeWPe4xBzNF41Byr
qXO+JYDxP2RYumys6LdOrUp5aAmcXi1oMcEwDVqT+b78K8LdntAE1CTDGQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIKQt6xcj4CXj4K/2VkV8TicyORQMB8GA1UdIwQY
MBaAFF1vLkmjHo35xaoIqvJAtcgyucuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgt
MmU5ZGUyNTJkMWY2LzEvZ3BDM3JGeVBnSmVQZ3JfWldSWHhPSnpJNUZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgtMmU5ZGUyNTJkMWY2
LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARQ91AD
BAJQ91gwDQYJKoZIhvcNAQELBQADggEBAIneGm2AHtSJhRUAZ9aa4yQiIrRc8yUn
Q5p6unIFkjPkc0NzriCRX8/N0wC4Jn2JeVxNe7YUyTOlL9ziHH1YX/WopyyLiS5M
UAlj8TDP+Jm97VsTQDkEUnpeAfhHyHvtj55kvV8bC/BLxPwLPheHBLS8oEz2LV8m
rbQjaTU7Vwspxkz1Ou4mgno/69Ptth1p6b4vmodHQPJ9FDQmlxvW6XuSxnc49x89
u+wK25qQsW4doiA158QLjg5TvcTv+88bil2EkPqA5PH/H1PqXupEoZVuT+iRG5Qi
QHuC+nS3TypWAoQlpR3wZymgl5vTiYNahGqYlNr1f7yitKKt9XiLEWY=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:00 2023 by rpki-client on console-fra.rpki-client.org