Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/gtn_cnCuikABjNwN6Uk0MMyT3eY.roa
File: gtn_cnCuikABjNwN6Uk0MMyT3eY.roa (raw, json)
Hash identifier: t0KlCndSA3MGN0mjYIIKa0RadyNUxMS3BABVueXCSYg=
Subject key identifier: 82:D9:FF:72:70:AE:8A:40:01:8C:DC:0D:E9:49:34:30:CC:93:DD:E6
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0188F7891881E0244AA88FE2D8D5C833DA2B
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/gtn_cnCuikABjNwN6Uk0MMyT3eY.roa
Signing time: Mon 26 Jun 2023 11:48:56 +0000
ROA not before: Mon 26 Jun 2023 11:48:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 92.63.176.0/22 maxlen: 22
92.63.176.0/24 maxlen: 24
92.63.177.0/24 maxlen: 24
92.63.178.0/24 maxlen: 24
92.63.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f7:89:18:81:e0:24:4a:a8:8f:e2:d8:d5:c8:33:da:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jun 26 11:48:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82d9ff7270ae8a40018cdc0de9493430cc93dde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5b:db:0d:8c:f4:b6:ba:42:96:97:57:aa:ab:
3e:2d:e6:24:3d:4b:19:dc:26:d4:b3:a5:84:aa:ba:
9f:67:c8:64:11:d2:60:82:41:6d:a1:91:03:78:d6:
40:56:5f:74:ea:e7:13:79:8f:5d:b3:1a:07:16:35:
ec:ba:33:3a:44:a3:92:cf:c9:e8:ea:2c:c5:c2:d1:
3e:c2:37:e1:34:f8:b2:7c:87:99:98:08:d8:68:96:
45:73:e5:c7:7f:90:5c:c0:89:f6:1d:0d:dd:22:10:
ca:ff:ae:a1:c1:17:e7:6a:13:b1:35:ef:d2:2a:0c:
f7:b2:43:87:39:0c:d1:62:67:27:11:d5:74:6b:98:
5a:33:da:19:54:56:ec:a5:ab:ae:1d:08:b8:6a:29:
8b:eb:68:6b:ef:c5:11:b1:25:40:03:ec:a2:d8:34:
0f:55:30:ed:5a:67:f9:17:01:61:90:b8:94:87:7f:
85:3c:3e:44:49:8e:01:aa:47:da:45:6d:8f:71:a7:
0d:7f:1a:96:69:b0:67:6c:b2:fb:e2:d3:4e:8b:89:
d0:97:84:28:78:e0:2d:69:08:5e:83:eb:ad:cc:3a:
b3:86:c3:d9:69:40:8d:75:1f:37:1e:ed:f8:f6:72:
7a:c8:ab:08:a8:1f:82:99:9e:3d:e2:76:2b:25:b7:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D9:FF:72:70:AE:8A:40:01:8C:DC:0D:E9:49:34:30:CC:93:DD:E6
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/gtn_cnCuikABjNwN6Uk0MMyT3eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.176.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:07:7e:e3:cc:9c:79:99:99:d6:a0:d9:d1:78:38:bf:13:e6:
70:e2:1e:7e:9f:66:07:6e:b1:9d:a6:14:88:5d:60:28:86:bd:
6a:09:ee:0c:96:c2:7a:7e:97:c4:4f:1a:fe:19:80:32:9c:66:
2e:08:63:c0:a8:4c:65:52:3f:ea:d9:59:c6:86:ca:e5:4a:18:
e2:48:e6:00:1f:f6:65:66:aa:8b:9b:23:82:97:1d:b4:0b:dc:
1a:04:97:f0:3d:6d:fc:8b:9f:10:45:0d:cc:8b:1b:b3:c6:25:
4b:9d:d4:78:d1:9f:59:58:68:a5:f8:6f:22:1c:05:2a:d6:8c:
08:87:6b:19:6c:bd:19:bd:70:68:17:b9:a1:44:b0:95:4a:ce:
6e:b5:8e:33:c0:84:7d:dd:9a:07:91:e8:0a:01:cf:b3:eb:52:
82:38:44:2d:11:04:d3:a3:46:0a:de:51:f7:15:ea:5c:e7:21:
8d:f7:49:03:9e:73:17:5c:72:b5:99:de:ad:00:43:47:da:52:
76:3b:4f:50:c2:b8:7a:b8:a2:32:24:48:25:7f:de:f8:2c:db:
fb:e4:4e:ab:f1:83:e9:aa:06:af:8d:3c:b3:61:6d:44:e9:77:
f2:f0:23:1a:6e:37:f3:2d:6b:db:e9:4f:b3:48:3d:a2:20:30:
24:12:76:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org