Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/GYn3f-zUjVrkvODN36oLX4kUUjE.roa
File: GYn3f-zUjVrkvODN36oLX4kUUjE.roa (raw, json)
Hash identifier: F0JxpV/bjsrqRe0POf3yc5b+LQvaH41h6eSFt1BQMd0=
Subject key identifier: 19:89:F7:7F:EC:D4:8D:5A:E4:BC:E0:CD:DF:AA:0B:5F:89:14:52:31
Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial: 01857246CD3AA3CAD33E9FD5B14058C50888
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/GYn3f-zUjVrkvODN36oLX4kUUjE.roa
Signing time: Mon 02 Jan 2023 11:38:40 +0000
ROA not before: Mon 02 Jan 2023 11:38:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47232
IP address blocks: 147.161.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:cd:3a:a3:ca:d3:3e:9f:d5:b1:40:58:c5:08:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Validity
Not Before: Jan 2 11:38:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1989f77fecd48d5ae4bce0cddfaa0b5f89145231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7f:bb:cd:9b:d4:1a:70:5e:33:6e:7e:80:d6:
ec:6b:10:1d:ea:cb:b9:e8:94:4e:c7:8f:38:29:f2:
4c:df:37:2d:8c:f3:eb:0c:8d:a6:df:02:71:6e:85:
ea:e1:f7:73:13:2a:de:6b:7d:32:49:fa:5d:1b:60:
52:c8:b8:ef:9a:df:eb:4b:bd:85:28:6e:23:ff:47:
89:b6:52:dc:20:7a:ac:a6:75:49:17:71:7f:c7:b6:
5f:17:07:8c:5c:95:f0:c2:e6:a0:39:5b:0b:47:0a:
70:86:67:bc:67:3e:c7:c7:4f:cd:9f:4b:89:dc:53:
1b:0c:20:9b:cc:27:42:2f:40:41:42:5e:95:50:0b:
58:f0:14:b1:9e:d1:4c:5b:08:7d:7f:e8:50:4e:3d:
f9:ce:8b:f4:03:30:a8:9c:c1:6e:22:46:37:b8:db:
df:24:a4:fa:6e:9e:56:a3:79:b0:d2:7b:af:03:c3:
1c:52:73:a1:2e:2f:69:e1:b0:8f:89:02:94:3e:3e:
30:0f:29:d3:b7:ef:30:3e:43:be:2c:ce:80:28:a1:
ff:22:f9:70:03:72:f1:9d:af:f7:93:66:73:e3:af:
ea:7e:24:db:e9:30:f2:ad:0a:09:e6:5e:bd:ad:34:
25:38:9f:5c:a3:47:1c:08:79:82:80:4c:8b:7b:35:
d0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:89:F7:7F:EC:D4:8D:5A:E4:BC:E0:CD:DF:AA:0B:5F:89:14:52:31
X509v3 Authority Key Identifier:
keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/GYn3f-zUjVrkvODN36oLX4kUUjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.28.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:18:ee:a7:91:b4:9a:e0:1f:33:ec:af:00:d6:90:05:47:bb:
6c:fa:2f:92:20:3f:36:18:a6:3e:35:6f:2f:9f:6d:26:3d:da:
e8:2c:53:76:14:db:ea:97:36:71:69:a0:8d:28:fa:32:03:b7:
52:8f:02:41:a8:bf:2b:c6:a0:f5:34:c2:5e:8c:7c:21:6f:6d:
bc:de:2e:66:b2:ab:02:e7:0c:81:71:05:ea:37:ef:62:0c:3d:
da:f6:c5:a0:ee:56:63:a6:43:2a:a0:ae:3f:cb:0f:ab:f9:12:
b2:3d:78:3b:e8:25:83:ef:40:d2:5f:26:dd:1f:9c:2b:e7:9f:
48:9a:21:c7:51:58:62:05:74:7b:85:17:2e:8d:02:81:8a:8c:
58:5e:a4:86:4a:86:21:00:fa:3b:9a:af:83:44:4e:37:71:b9:
4d:8d:81:f1:b1:46:3d:4a:21:c9:8f:fc:6e:32:9a:ea:dd:5a:
75:09:bb:5f:c8:6e:22:dd:32:bf:d8:48:bd:99:3e:f0:37:11:
f6:90:a4:c2:97:c2:93:ec:93:e3:61:76:5c:b6:cd:ea:30:9c:
cb:0b:73:5a:55:c3:61:b4:18:ae:54:dc:12:2f:29:09:15:0b:
bc:11:d8:2f:3c:47:84:a5:d8:e5:fd:33:3a:33:0b:c7:73:67:
86:ac:b7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:07 2024 by rpki-client on console-fra.rpki-client.org