Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/gxt1TjQO-Z7iE5vJmczAGBamJyo.roa
File: gxt1TjQO-Z7iE5vJmczAGBamJyo.roa (raw, json)
Hash identifier: MoyESX0hWfTsqI7MWbjJjDI4Td4aFNs9/OrqLyxRAqQ=
Subject key identifier: 83:1B:75:4E:34:0E:F9:9E:E2:13:9B:C9:99:CC:C0:18:16:A6:27:2A
Certificate issuer: /CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
Certificate serial: 018571FA0B14EB1D2669CFF9A7F6FE49ECC9
Authority key identifier: 57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/gxt1TjQO-Z7iE5vJmczAGBamJyo.roa
Signing time: Mon 02 Jan 2023 10:14:50 +0000
ROA not before: Mon 02 Jan 2023 10:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42929
IP address blocks: 195.225.80.0/24 maxlen: 24
2a11:e600::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:0b:14:eb:1d:26:69:cf:f9:a7:f6:fe:49:ec:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
Validity
Not Before: Jan 2 10:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=831b754e340ef99ee2139bc999ccc01816a6272a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:69:bc:d2:18:8b:5a:9f:de:cb:e2:14:cb:e7:
ec:37:df:89:92:9b:51:79:83:77:dd:ac:d4:88:64:
05:86:05:e9:b3:09:3c:a9:f3:d2:81:6a:55:d7:f7:
84:17:23:ad:13:64:dd:ab:80:80:a2:82:2b:42:ed:
d0:5d:9a:63:d7:12:45:cd:73:f6:33:00:55:65:53:
37:5f:77:fe:48:10:9c:d4:bc:b4:9a:28:08:a4:05:
ed:cd:17:06:d4:81:0f:fa:ef:41:4d:93:18:b6:69:
4c:67:e1:c5:54:30:97:d2:94:54:64:41:fa:93:2f:
6e:b0:2a:08:88:6d:28:b3:e9:32:90:95:00:65:d0:
d5:19:75:57:33:69:8b:41:60:7a:5f:c3:83:01:54:
e8:74:b6:91:d2:60:72:13:0e:11:4d:27:6a:47:e2:
e9:c8:28:b8:4e:75:f5:fb:2c:2c:f1:4b:7d:e0:21:
4b:cd:a6:31:ab:2b:fc:dc:f9:0c:98:45:7e:d6:dd:
77:03:c7:8c:2c:8d:fd:c0:b4:76:cb:44:c9:7a:04:
bd:09:3e:e3:ea:ca:e0:61:c8:1f:a3:ce:30:86:4d:
f9:10:74:62:67:ce:93:c7:84:dc:f2:44:09:94:91:
61:7f:6c:cc:fb:1d:06:55:54:66:79:76:4c:c7:f0:
1a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1B:75:4E:34:0E:F9:9E:E2:13:9B:C9:99:CC:C0:18:16:A6:27:2A
X509v3 Authority Key Identifier:
keyid:57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/gxt1TjQO-Z7iE5vJmczAGBamJyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.80.0/24
IPv6:
2a11:e600::/29
Signature Algorithm: sha256WithRSAEncryption
6d:fc:02:8f:0d:32:e3:d6:86:92:54:36:3d:55:3e:7b:eb:5a:
99:40:47:70:ef:e9:64:22:97:d2:19:83:5b:03:84:ef:db:ec:
62:99:26:95:e1:0c:00:c6:48:ad:60:e0:cb:3d:a7:10:28:06:
c1:8d:2d:70:8d:7d:ba:31:4e:58:26:c8:20:3b:88:6b:15:8f:
e7:12:b4:9e:c4:67:62:e6:89:80:44:d0:8f:0a:00:9f:51:01:
e1:95:24:67:4f:15:7e:02:d8:32:2d:7b:89:36:95:0c:c4:cd:
e1:92:42:4c:a2:ac:83:6e:3b:b2:8b:c9:e9:fc:46:4e:82:f8:
34:ee:1c:6c:31:23:01:31:a2:74:8e:23:f0:a4:9d:21:5b:46:
2f:72:cb:82:09:57:04:e2:dd:f5:05:e7:5e:68:2b:2d:c0:d0:
d0:13:bd:f5:31:ab:9f:c3:ab:1f:fc:d4:30:bc:d3:2f:44:14:
98:69:8f:d9:2d:86:15:58:4d:54:11:81:a5:1e:0a:1b:2f:fd:
c6:8e:fd:e4:6d:b2:0c:9c:cf:1b:08:77:75:da:04:5c:cc:77:
ea:f6:3b:c7:fa:d3:7b:ca:b0:c2:24:70:56:30:3d:35:06:7a:
48:63:9e:7c:93:62:5b:dd:46:83:b5:f1:83:fa:43:1e:0f:7b:
11:8b:da:91
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVx+gsU6x0mac/5p/b+SezJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZmJiNmViMmNlYzlhOWI3YmI4MWEzYjE2MGMxYWFiOTkw
ZTQ4MjYwHhcNMjMwMTAyMTAxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzFiNzU0ZTM0MGVmOTllZTIxMzliYzk5OWNjYzAxODE2YTYyNzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Wm80hiLWp/ey+IUy+fsN9+JkptR
eYN33azUiGQFhgXpswk8qfPSgWpV1/eEFyOtE2Tdq4CAooIrQu3QXZpj1xJFzXP2
MwBVZVM3X3f+SBCc1Ly0migIpAXtzRcG1IEP+u9BTZMYtmlMZ+HFVDCX0pRUZEH6
ky9usCoIiG0os+kykJUAZdDVGXVXM2mLQWB6X8ODAVTodLaR0mByEw4RTSdqR+Lp
yCi4TnX1+yws8Ut94CFLzaYxqyv83PkMmEV+1t13A8eMLI39wLR2y0TJegS9CT7j
6srgYcgfo84whk35EHRiZ86Tx4Tc8kQJlJFhf2zM+x0GVVRmeXZMx/Aa3QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIMbdU40Dvme4hObyZnMwBgWpicqMB8GA1UdIwQY
MBaAFFf7tuss7Jqbe7gaOxYMGquZDkgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVl91MjZ5enNtcHQ3dUJvN0Znd2FxNWtPU0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81ODg4ZmYtM2I4ZS00NTU2LWFkZjQt
NGQ5ZWNmY2UwZGJjLzEvZ3h0MVRqUU8tWjdpRTV2Sm1jekFHQmFtSnlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81ODg4ZmYtM2I4ZS00NTU2LWFkZjQtNGQ5ZWNmY2UwZGJj
LzEvVl91MjZ5enNtcHQ3dUJvN0Znd2FxNWtPU0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw+FQMA0E
AgACMAcDBQMqEeYAMA0GCSqGSIb3DQEBCwUAA4IBAQBt/AKPDTLj1oaSVDY9VT57
61qZQEdw7+lkIpfSGYNbA4Tv2+ximSaV4QwAxkitYODLPacQKAbBjS1wjX26MU5Y
JsggO4hrFY/nErSexGdi5omARNCPCgCfUQHhlSRnTxV+AtgyLXuJNpUMxM3hkkJM
oqyDbjuyi8np/EZOgvg07hxsMSMBMaJ0jiPwpJ0hW0YvcsuCCVcE4t31BedeaCst
wNDQE731Maufw6sf/NQwvNMvRBSYaY/ZLYYVWE1UEYGlHgobL/3Gjv3kbbIMnM8b
CHd12gRczHfq9jvH+tN7yrDCJHBWMD01BnpIY558k2Jb3UaDtfGD+kMeD3sRi9qR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:06 2024 by rpki-client on console-ams.rpki-client.org