Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/GJgJf3Lh-RNA_1ei5iSsefoJppE.roa
File: GJgJf3Lh-RNA_1ei5iSsefoJppE.roa (raw, json)
Hash identifier: kthDb+OG4QMgZpCTNO93maTcf1u8ZlkRpvvuCIn0kxg=
Subject key identifier: 18:98:09:7F:72:E1:F9:13:40:FF:57:A2:E6:24:AC:79:FA:09:A6:91
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CC79517A2F1B1FFC24EF9348A3756C4CF
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/GJgJf3Lh-RNA_1ei5iSsefoJppE.roa
Signing time: Tue 02 Jan 2024 00:31:26 +0000
ROA not before: Tue 02 Jan 2024 00:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 92.63.176.0/22 maxlen: 22
92.63.176.0/24 maxlen: 24
92.63.177.0/24 maxlen: 24
92.63.178.0/24 maxlen: 24
92.63.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 16:32:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:17:a2:f1:b1:ff:c2:4e:f9:34:8a:37:56:c4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 00:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1898097f72e1f91340ff57a2e624ac79fa09a691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6f:2b:51:fa:29:e3:56:c6:dc:07:e8:28:c1:
d8:f8:7c:5f:3f:44:dc:11:e3:a8:36:40:8c:19:e0:
04:85:bd:d9:9b:0c:4b:bc:7d:05:e0:27:a4:a0:12:
83:0e:b0:33:df:c7:3a:72:58:18:f3:cb:8c:e8:b2:
80:eb:67:1e:59:33:20:37:e2:45:ae:94:85:9c:48:
85:c4:ef:c3:31:af:85:ab:3e:2b:4b:41:09:0a:d0:
28:a0:49:72:6d:3b:6a:f9:6c:a5:8e:ba:ae:ea:f0:
cc:de:b1:86:b4:a5:c3:25:40:26:14:99:0c:a4:fa:
85:67:6b:69:48:55:c2:1d:30:70:9b:53:c8:56:74:
55:b7:32:a1:25:18:20:0c:79:28:ec:8d:4c:90:35:
1c:5f:1d:f6:06:c4:ef:3f:48:9e:b5:28:92:4a:3d:
f7:1a:6a:ca:64:3d:e2:3c:14:9b:5e:9e:c9:b4:e8:
c7:d4:9c:f7:af:79:b2:b9:e5:b3:1e:ec:08:2a:ca:
2a:eb:dc:35:f2:50:28:23:95:09:44:01:12:6e:af:
5f:6c:ec:d9:14:8f:36:15:80:77:1e:fa:0e:f7:10:
40:78:bc:27:d3:05:73:37:2a:10:41:25:54:fa:9a:
ee:e3:cf:68:06:6d:fe:53:bf:85:34:45:22:56:8f:
b7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:98:09:7F:72:E1:F9:13:40:FF:57:A2:E6:24:AC:79:FA:09:A6:91
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/GJgJf3Lh-RNA_1ei5iSsefoJppE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.176.0/22
Signature Algorithm: sha256WithRSAEncryption
11:92:b6:87:7e:f7:cb:60:7d:9e:bf:0d:a2:5c:64:6d:21:06:
40:56:e1:d4:77:20:ed:f0:95:aa:54:7a:a6:08:af:59:a7:10:
31:cb:f4:22:83:ff:f1:61:16:15:d8:79:3b:0f:46:95:94:34:
87:7e:1c:69:a4:c9:cc:dd:a9:c4:cd:28:86:df:12:1e:9c:37:
49:79:4f:72:4b:c3:12:43:25:2b:0c:aa:16:1c:81:d1:67:f5:
10:15:1c:87:2f:75:36:4d:bf:ca:41:88:e9:6d:00:a7:47:c8:
e6:8e:06:54:13:a8:c9:5b:26:15:80:e4:df:2c:bd:53:33:29:
48:be:5d:58:4b:1a:94:c9:8b:13:50:93:94:7b:46:7a:dd:2f:
a7:95:ca:23:33:f2:eb:b5:fd:f1:3e:a8:3f:2d:90:55:8a:16:
b8:61:b9:0d:52:29:01:a3:57:f8:ae:42:96:1c:49:94:ac:09:
a0:58:55:77:2c:87:f0:a0:e4:92:66:f8:5e:45:db:78:c6:c1:
58:13:d2:cc:dd:5a:2d:1c:75:ea:97:62:e9:4c:eb:ea:68:ea:
c3:44:0d:a3:e7:a6:32:12:e5:ed:02:cb:84:0f:69:3e:8c:90:
8b:d1:61:7c:aa:38:29:a8:b2:89:b3:bf:86:3d:20:61:43:2e:
48:37:14:fd
-----BEGIN CERTIFICATE-----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Generated at Fri Feb 9 21:18:02 2024 by rpki-client on console-fra.rpki-client.org