Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/GI3T_M3-gUv94oQpeEtu4RkUMao.roa
File: GI3T_M3-gUv94oQpeEtu4RkUMao.roa (raw, json)
Hash identifier: a2RNvMdu2YCyckZsefseGrDJwlIbvbJjIz4vu2ov4Ao=
Subject key identifier: 18:8D:D3:FC:CD:FE:81:4B:FD:E2:84:29:78:4B:6E:E1:19:14:31:AA
Certificate issuer: /CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
Certificate serial: 01856FD5148FCE63CEF0F70E7E21F85ED177
Authority key identifier: BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/GI3T_M3-gUv94oQpeEtu4RkUMao.roa
Signing time: Mon 02 Jan 2023 00:15:13 +0000
ROA not before: Mon 02 Jan 2023 00:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39223
IP address blocks: 194.105.144.0/23 maxlen: 23
91.221.166.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:14:8f:ce:63:ce:f0:f7:0e:7e:21:f8:5e:d1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
Validity
Not Before: Jan 2 00:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=188dd3fccdfe814bfde28429784b6ee1191431aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:08:0c:57:46:4a:20:8a:bb:fd:78:96:72:
d9:0e:9e:28:7a:f2:17:74:89:6d:a8:ac:9e:85:76:
04:ba:44:68:bc:0d:40:4c:13:7a:ad:03:f6:6f:d3:
ae:25:6d:f1:6a:85:c4:de:4e:db:4d:88:11:2a:6f:
22:ac:37:71:4f:88:5d:b2:de:cc:5d:d1:fa:5b:c8:
4c:8f:da:db:73:76:b8:5d:d4:52:98:b1:32:08:a4:
e8:e2:3c:b6:6d:05:a7:03:81:f3:4d:5e:73:57:e7:
3f:f8:1d:ce:b0:30:ab:1a:f4:6e:f9:3e:c0:ce:aa:
56:5f:1d:ca:95:33:f8:bc:15:43:6f:63:24:ea:9e:
ed:69:52:79:37:16:1a:a1:07:69:cc:b2:ab:69:23:
b2:07:4d:69:a0:4b:1d:d4:c1:be:f4:c3:e2:ed:54:
94:f0:c1:4c:f2:00:97:4a:dc:f5:c3:ec:d7:b6:90:
ba:ff:51:23:e7:be:49:55:d0:f8:e4:65:72:2a:2f:
43:55:38:e4:82:c8:76:da:58:16:41:8f:47:c7:a0:
aa:4a:ff:bc:c3:13:9e:b1:22:95:91:46:5f:5b:57:
c8:99:5e:66:92:22:51:b8:a3:7d:0a:92:cc:2f:a7:
cc:bf:8e:d3:2c:30:d4:e6:b6:5b:36:07:e9:b0:11:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8D:D3:FC:CD:FE:81:4B:FD:E2:84:29:78:4B:6E:E1:19:14:31:AA
X509v3 Authority Key Identifier:
keyid:BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/GI3T_M3-gUv94oQpeEtu4RkUMao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.166.0/23
194.105.144.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:1e:f6:63:46:ad:f0:96:96:ca:35:82:30:3a:85:19:3e:04:
72:fe:5a:04:fc:3a:22:46:fc:9c:fe:ec:96:58:bc:73:57:42:
01:bb:98:4b:ff:23:33:63:3b:3f:dd:4a:eb:fe:54:15:9b:79:
bc:b3:2b:b0:eb:2f:ff:91:50:5b:91:50:56:ee:2a:ef:15:59:
43:19:f6:50:3d:e2:ed:1c:20:fa:df:39:8d:90:91:91:4c:dd:
7b:ad:b4:37:1b:d4:9e:6d:8e:3c:e9:f2:66:cd:4b:f7:38:4f:
32:67:e7:5c:a6:f7:09:b1:b4:f2:3f:c0:4f:00:b2:26:08:5d:
bd:b9:df:d8:73:a8:42:b5:30:ff:22:dc:4c:c9:23:e8:02:3e:
3f:a8:18:b6:a6:e1:03:d7:f8:d7:27:ec:6a:0f:ed:87:e6:2d:
62:92:c2:9e:f2:a8:11:7f:65:41:29:c5:92:be:ef:0e:a5:4f:
fb:82:a4:36:39:58:1a:af:dd:e9:6c:4c:5c:5a:00:d6:bc:3a:
15:e0:02:89:b9:81:6b:e4:de:7a:2a:4f:49:44:d9:e1:21:90:
15:4b:a9:73:5c:b4:cd:eb:2f:92:8f:d0:55:22:be:c6:df:f3:
86:9d:bc:60:e7:72:ff:5c:96:06:fe:88:09:88:5a:35:e7:e8:
8c:17:4d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:23 2024 by rpki-client on console-fra.rpki-client.org