Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GGdOOKoK8iope1ey6db5obqpSKI.roa
File: GGdOOKoK8iope1ey6db5obqpSKI.roa (raw, json)
Hash identifier: /h3zsvb9dVLvn7vN0ForKH1rXtbMoNR/3uiSMrNPPJQ=
Subject key identifier: 18:67:4E:38:AA:0A:F2:2A:29:7B:57:B2:E9:D6:F9:A1:BA:A9:48:A2
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01933DB8A020C06B4EDD1B3971F6169F3E9C
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GGdOOKoK8iope1ey6db5obqpSKI.roa
Signing time: Mon 18 Nov 2024 05:22:09 +0000
ROA not before: Mon 18 Nov 2024 05:22:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 83.147.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 18 Nov 2024 06:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3d:b8:a0:20:c0:6b:4e:dd:1b:39:71:f6:16:9f:3e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 18 05:22:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18674e38aa0af22a297b57b2e9d6f9a1baa948a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b2:aa:32:6e:e3:9d:46:6e:8e:a6:26:5d:89:
c1:1c:64:71:3f:7e:15:0b:10:b9:52:06:99:98:10:
69:20:8e:51:87:99:52:3e:fc:13:75:52:05:a2:85:
d9:86:57:c6:bb:a2:54:ae:4c:a2:03:9f:69:0b:5c:
8d:4c:f7:6d:22:63:4b:47:7e:cb:1e:0f:f5:6e:56:
7d:5f:b5:c1:ad:0b:4e:1f:de:1b:19:c6:79:f1:a7:
3d:1f:8f:15:d7:0b:32:53:6c:39:2d:54:81:b1:b3:
f9:1e:49:b1:10:18:9c:77:4e:7c:e8:77:28:a3:bb:
87:5d:c5:f6:a3:7a:cd:9e:2e:f3:ce:e4:ec:fe:f4:
33:1c:99:3d:4b:d2:81:c4:84:16:e2:c1:02:42:ac:
0b:d7:d8:e2:df:81:fc:78:e4:f6:f6:e9:86:c1:10:
37:3a:89:42:0c:77:74:bb:31:bf:96:c2:df:d5:83:
60:9e:ee:86:c9:7b:d7:bd:09:fe:46:ff:db:b9:ca:
a8:90:48:40:5d:b6:1c:63:44:69:65:5d:02:af:b3:
95:70:f1:36:3a:e2:31:cb:35:42:f4:c2:27:b8:7c:
33:5a:98:02:02:15:1e:83:51:be:50:f1:0d:e1:01:
19:7c:61:a1:00:52:ac:27:cc:37:82:ad:42:85:cc:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:67:4E:38:AA:0A:F2:2A:29:7B:57:B2:E9:D6:F9:A1:BA:A9:48:A2
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GGdOOKoK8iope1ey6db5obqpSKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.44.0/22
Signature Algorithm: sha256WithRSAEncryption
62:a9:55:9e:86:20:98:12:66:fc:56:bf:a6:c3:56:80:7a:8a:
e7:aa:10:fc:b6:31:ba:ea:fd:fc:f8:69:ab:72:34:3f:5e:d8:
61:22:58:f8:d7:d1:bd:9c:17:97:6d:0c:61:e5:c3:e1:0b:b1:
40:50:8c:c6:7f:22:5e:56:01:bf:e7:c3:d9:ca:48:4d:29:54:
18:8e:1a:4a:e9:d5:8e:2e:b1:e4:79:ab:c3:b2:1a:ff:aa:af:
53:a5:f4:6b:7c:d0:cd:37:44:9f:d8:67:9a:e6:df:c3:64:63:
0d:21:ab:86:5c:4e:d1:00:43:4b:02:48:54:fc:3b:9e:a9:d0:
bd:e2:fa:3f:09:41:4f:25:b3:ef:33:4f:12:da:ad:ed:86:1c:
c6:ed:b9:f3:b8:f5:25:91:9c:6e:0e:d6:a5:6d:0b:b3:ce:b9:
3a:bf:d5:cb:98:7a:dc:5d:f2:be:e5:ae:9e:ed:12:7b:9d:69:
2b:e1:e9:52:64:e1:6f:47:41:54:13:79:98:a9:63:cf:62:50:
e7:5a:f8:c6:3b:80:63:cd:92:cd:44:25:d6:c6:61:ad:09:eb:
f9:1c:61:75:71:61:f5:ab:10:a2:af:77:97:52:85:23:b0:c2:
ef:28:08:f8:53:0a:d4:f9:bf:5a:16:06:d2:f6:75:00:3b:4f:
cf:c1:32:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZM9uKAgwGtO3Rs5cfYWnz6cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjQxMTE4MDUyMjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODY3NGUzOGFhMGFmMjJhMjk3YjU3YjJlOWQ2ZjlhMWJhYTk0OGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bKqMm7jnUZujqYmXYnBHGRxP34V
CxC5UgaZmBBpII5Rh5lSPvwTdVIFooXZhlfGu6JUrkyiA59pC1yNTPdtImNLR37L
Hg/1blZ9X7XBrQtOH94bGcZ58ac9H48V1wsyU2w5LVSBsbP5HkmxEBicd0586Hco
o7uHXcX2o3rNni7zzuTs/vQzHJk9S9KBxIQW4sECQqwL19ji34H8eOT29umGwRA3
OolCDHd0uzG/lsLf1YNgnu6GyXvXvQn+Rv/bucqokEhAXbYcY0RpZV0Cr7OVcPE2
OuIxyzVC9MInuHwzWpgCAhUeg1G+UPEN4QEZfGGhAFKsJ8w3gq1ChcyERQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBhnTjiqCvIqKXtXsunW+aG6qUiiMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvR0dkT09Lb0s4aW9wZTFleTZkYjVvYnFwU0tJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5MsMA0G
CSqGSIb3DQEBCwUAA4IBAQBiqVWehiCYEmb8Vr+mw1aAeornqhD8tjG66v38+Gmr
cjQ/XthhIlj419G9nBeXbQxh5cPhC7FAUIzGfyJeVgG/58PZykhNKVQYjhpK6dWO
LrHkeavDshr/qq9TpfRrfNDNN0Sf2Gea5t/DZGMNIauGXE7RAENLAkhU/DueqdC9
4vo/CUFPJbPvM08S2q3thhzG7bnzuPUlkZxuDtalbQuzzrk6v9XLmHrcXfK+5a6e
7RJ7nWkr4elSZOFvR0FUE3mYqWPPYlDnWvjGO4BjzZLNRCXWxmGtCev5HGF1cWH1
qxCir3eXUoUjsMLvKAj4UwrU+b9aFgbS9nUAO0/PwTLL
-----END CERTIFICATE-----
Generated at Mon Nov 18 09:02:43 2024 by rpki-client on console-ams.rpki-client.org