Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/gqmnJmoYfkFjaK1uYWfMH-c5z8Y.roa
File: gqmnJmoYfkFjaK1uYWfMH-c5z8Y.roa (raw, json)
Hash identifier: akWbK3hNNkWYJqpk13aCXO8B2WFYHoWPRueRMUzDLT0=
Subject key identifier: 82:A9:A7:26:6A:18:7E:41:63:68:AD:6E:61:67:CC:1F:E7:39:CF:C6
Certificate issuer: /CN=a7f1a0af5a7e92077ce3a2988d7976d1f5c74b19
Certificate serial: 01856DDD476AA603EBEF6E228929E28CA6EC
Authority key identifier: A7:F1:A0:AF:5A:7E:92:07:7C:E3:A2:98:8D:79:76:D1:F5:C7:4B:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_Ggr1p-kgd846KYjXl20fXHSxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/gqmnJmoYfkFjaK1uYWfMH-c5z8Y.roa
Signing time: Sun 01 Jan 2023 15:04:56 +0000
ROA not before: Sun 01 Jan 2023 15:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 194.29.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:47:6a:a6:03:eb:ef:6e:22:89:29:e2:8c:a6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f1a0af5a7e92077ce3a2988d7976d1f5c74b19
Validity
Not Before: Jan 1 15:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82a9a7266a187e416368ad6e6167cc1fe739cfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:92:50:5f:97:e6:82:c4:92:14:65:9f:59:
39:cc:d5:e2:b1:e5:d0:1d:1b:9a:5d:d4:4c:29:7c:
19:77:2c:a8:96:e7:aa:1a:43:04:16:98:c3:75:ff:
96:ae:57:98:bb:a3:67:05:0e:8b:ef:ef:9a:ec:d3:
ef:d0:91:a3:f5:34:38:9f:a8:fd:10:fd:4b:b5:8f:
ed:48:81:db:1e:8a:22:d0:de:6b:29:50:6b:08:c5:
70:b2:b1:be:e3:f7:f4:11:cd:fc:a6:2a:a0:98:d0:
2c:61:38:e7:3e:38:fd:ff:cd:f5:6c:23:8a:09:f7:
12:63:5f:50:58:5a:2f:f7:ae:6c:5b:82:0e:d1:a1:
9f:5a:9a:ea:87:d1:82:1e:57:2a:07:ed:1e:82:61:
b4:e7:76:bb:2d:0a:0c:c5:a4:4e:1e:db:01:74:51:
01:c0:19:01:eb:87:c1:56:96:dd:e3:60:03:78:f2:
45:82:61:76:6a:b7:69:5b:81:59:8a:96:84:7b:e8:
dd:4b:e3:99:54:86:bb:0a:40:fe:f7:ea:ac:38:d6:
b5:fa:9c:0a:19:b0:b1:3b:ce:75:02:59:3c:fc:57:
72:f7:4e:f4:8f:c5:e8:1e:96:c4:32:1c:f3:80:6b:
cf:31:62:b9:88:7f:ce:c1:47:29:49:10:fd:8d:b2:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A9:A7:26:6A:18:7E:41:63:68:AD:6E:61:67:CC:1F:E7:39:CF:C6
X509v3 Authority Key Identifier:
keyid:A7:F1:A0:AF:5A:7E:92:07:7C:E3:A2:98:8D:79:76:D1:F5:C7:4B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ggr1p-kgd846KYjXl20fXHSxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/gqmnJmoYfkFjaK1uYWfMH-c5z8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/p_Ggr1p-kgd846KYjXl20fXHSxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.58.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:b4:cd:b3:59:4b:86:7b:bb:13:53:89:7d:f2:7e:f9:bf:39:
25:29:67:98:83:12:84:32:72:c7:e8:f4:55:44:57:16:88:95:
06:f1:63:52:3e:a0:ec:f6:af:da:5c:04:10:d6:22:c7:be:09:
3b:8c:13:c9:2b:cc:ea:7d:81:e6:6d:fe:8e:9c:0a:55:d5:46:
65:0f:0a:c5:9b:f6:7b:c6:0b:1e:9a:4a:7a:d6:d1:c8:b7:8b:
4b:cb:f6:69:b3:ab:6e:2e:18:60:2a:0a:5d:ef:91:63:f8:61:
10:c2:7c:3a:bd:b1:f4:aa:0e:4e:23:b4:6c:5c:be:40:49:b7:
b4:ca:d6:c4:66:a3:7c:c0:d8:d3:05:6b:d3:2d:54:95:04:71:
f8:5d:88:a1:a8:ab:59:3d:c1:8c:0c:ae:01:ac:d3:1d:ff:a6:
3c:4f:49:a5:57:db:a0:36:c1:0c:f9:f8:e4:b3:b7:ba:dc:31:
a7:01:5c:11:f7:10:cd:a8:f0:3c:e8:16:bb:cd:69:46:d2:ba:
8a:19:05:a3:bf:99:d4:3a:c9:82:de:1f:fa:82:77:d5:1e:e6:
a3:34:6f:b4:5f:da:2f:c3:29:76:7b:09:6c:a8:95:76:ef:c7:
66:42:d3:ad:07:0c:c1:8b:7b:04:4b:1c:79:b6:a6:93:58:32:
06:a7:37:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVt3UdqpgPr724iiSnijKbsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZjFhMGFmNWE3ZTkyMDc3Y2UzYTI5ODhkNzk3NmQxZjVj
NzRiMTkwHhcNMjMwMTAxMTUwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmE5YTcyNjZhMTg3ZTQxNjM2OGFkNmU2MTY3Y2MxZmU3MzljZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY+SUF+X5oLEkhRln1k5zNXiseXQ
HRuaXdRMKXwZdyyolueqGkMEFpjDdf+WrleYu6NnBQ6L7++a7NPv0JGj9TQ4n6j9
EP1LtY/tSIHbHooi0N5rKVBrCMVwsrG+4/f0Ec38piqgmNAsYTjnPjj9/831bCOK
CfcSY19QWFov965sW4IO0aGfWprqh9GCHlcqB+0egmG053a7LQoMxaROHtsBdFEB
wBkB64fBVpbd42ADePJFgmF2ardpW4FZipaEe+jdS+OZVIa7CkD+9+qsONa1+pwK
GbCxO851Alk8/Fdy9070j8XoHpbEMhzzgGvPMWK5iH/OwUcpSRD9jbIQAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIKppyZqGH5BY2itbmFnzB/nOc/GMB8GA1UdIwQY
MBaAFKfxoK9afpIHfOOimI15dtH1x0sZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF9HZ3IxcC1rZ2Q4NDZLWWpYbDIwZlhIU3hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85MTY2NzAtMWQwYS00ZTZkLWFmNGEt
MjdjNjgyMGEyM2ZhLzEvZ3Ftbkptb1lma0ZqYUsxdVlXZk1ILWM1ejhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi85MTY2NzAtMWQwYS00ZTZkLWFmNGEtMjdjNjgyMGEyM2Zh
LzEvcF9HZ3IxcC1rZ2Q4NDZLWWpYbDIwZlhIU3hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh06MA0G
CSqGSIb3DQEBCwUAA4IBAQDPtM2zWUuGe7sTU4l98n75vzklKWeYgxKEMnLH6PRV
RFcWiJUG8WNSPqDs9q/aXAQQ1iLHvgk7jBPJK8zqfYHmbf6OnApV1UZlDwrFm/Z7
xgsemkp61tHIt4tLy/Zps6tuLhhgKgpd75Fj+GEQwnw6vbH0qg5OI7RsXL5ASbe0
ytbEZqN8wNjTBWvTLVSVBHH4XYihqKtZPcGMDK4BrNMd/6Y8T0mlV9ugNsEM+fjk
s7e63DGnAVwR9xDNqPA86Ba7zWlG0rqKGQWjv5nUOsmC3h/6gnfVHuajNG+0X9ov
wyl2ewlsqJV278dmQtOtBwzBi3sESxx5tqaTWDIGpzcH
Generated at Sun Aug 6 09:54:57 2023 by rpki-client on console-ams.rpki-client.org