Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/GXE15p5tppnIIFPru_k0pFAUzCs.roa
File: GXE15p5tppnIIFPru_k0pFAUzCs.roa (raw, json)
Hash identifier: aXEaIOClR6tRw5qcgTfZQaWBgnpic9L3305RQYhVJEw=
Subject key identifier: 19:71:35:E6:9E:6D:A6:99:C8:20:53:EB:BB:F9:34:A4:50:14:CC:2B
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 01856C9CC16512E8413D3D45F6410265A4D6
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/GXE15p5tppnIIFPru_k0pFAUzCs.roa
Signing time: Sun 01 Jan 2023 09:14:50 +0000
ROA not before: Sun 01 Jan 2023 09:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207983
IP address blocks: 193.33.165.0/24 maxlen: 24
193.33.164.0/24 maxlen: 24
193.33.205.0/24 maxlen: 24
193.33.204.0/24 maxlen: 24
2a0f:640::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:c1:65:12:e8:41:3d:3d:45:f6:41:02:65:a4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Jan 1 09:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=197135e69e6da699c82053ebbbf934a45014cc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cf:06:78:a2:60:78:06:de:30:7b:3e:07:4e:
20:e9:78:dc:7b:d9:76:1c:ab:70:35:e1:7e:ad:4d:
a2:9c:63:5d:92:e7:cf:48:30:8e:8e:7d:2b:e8:f5:
86:8e:15:59:ed:e3:6a:21:d8:b6:c2:fd:c6:1b:95:
d8:c2:16:cf:85:00:ce:da:da:65:63:fb:41:eb:cc:
fb:29:8f:98:72:d4:a6:e6:11:78:21:86:eb:16:6b:
8d:46:1f:9b:a2:c6:1a:2f:c9:33:41:a2:40:13:ed:
cb:5b:99:11:b3:26:9a:30:1b:1c:c0:f2:ea:1e:7b:
ae:ea:65:1a:c5:0e:80:8f:cf:4d:84:8f:22:16:72:
e5:d5:66:67:12:4f:98:a9:25:eb:29:09:dc:60:d1:
c2:2e:b0:c6:0c:e9:d0:1e:d2:ce:1f:a6:2e:5e:40:
83:30:0c:00:1d:9d:bd:b3:e3:a3:43:42:dd:bc:3b:
d3:c7:3d:be:54:f2:bd:dc:f2:97:c3:ea:05:3e:50:
e6:02:8b:21:e4:d4:83:a6:af:c9:0a:b8:e9:37:06:
d3:4e:e1:08:f3:19:27:7e:d7:4f:a5:72:0d:8a:97:
ee:89:01:8b:83:40:02:c3:fc:88:ba:34:56:60:d5:
34:8a:3b:d4:db:41:0e:54:03:a4:38:71:da:a8:78:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:71:35:E6:9E:6D:A6:99:C8:20:53:EB:BB:F9:34:A4:50:14:CC:2B
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/GXE15p5tppnIIFPru_k0pFAUzCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.164.0/23
193.33.204.0/23
IPv6:
2a0f:640::/48
Signature Algorithm: sha256WithRSAEncryption
35:9b:bb:69:5c:99:5f:00:b6:d3:ed:4d:a6:94:36:b9:6d:2a:
da:db:9c:54:cc:b7:99:1b:e8:77:87:23:5e:a0:20:75:c9:5b:
25:40:4b:f6:6f:7b:7f:ec:b4:c4:f9:62:0e:44:b1:3b:9c:da:
c3:1b:4f:5d:72:34:2b:74:dd:e9:af:bb:e8:2d:34:2a:91:69:
19:66:0b:90:9a:c0:ce:b3:54:19:65:d0:7c:67:0b:96:80:e3:
52:fa:9b:ac:e6:ed:1e:51:1a:a6:3f:cc:56:90:6c:e2:c9:d0:
75:19:9f:ea:58:4a:18:04:04:75:47:a8:6c:41:d6:d4:b8:01:
c9:d0:43:3b:89:e5:9d:ad:64:6b:e2:87:b8:bb:5a:d3:c3:05:
4c:87:64:b3:7f:93:f8:be:4f:45:ec:57:ed:c5:c4:37:f5:61:
2a:07:9a:a5:9f:e9:f6:20:90:6f:88:f5:d2:d8:e0:a7:15:b5:
77:b0:3c:06:f1:25:f4:c2:ef:90:c2:cc:f3:2d:f7:41:97:81:
71:a5:83:cd:da:01:e8:50:20:72:d2:c9:d8:1d:f4:67:b5:aa:
b8:59:a3:8d:b5:07:f1:d0:0c:5a:80:2a:97:bf:2a:5f:ac:6e:
0c:6a:d8:58:1f:8c:12:30:da:64:aa:f2:ce:a0:d6:2d:2d:d6:
8b:18:89:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:23 2024 by rpki-client on console-ams.rpki-client.org