Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/GT1ZG34_9XxxY1WGCuxRfhbPfXE.roa
File: GT1ZG34_9XxxY1WGCuxRfhbPfXE.roa (raw, json)
Hash identifier: o14LEo+c2TTIxIAK/r69jEduDWx46dtt01hXcq6dTCg=
Subject key identifier: 19:3D:59:1B:7E:3F:F5:7C:71:63:55:86:0A:EC:51:7E:16:CF:7D:71
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018611C6D883CB34BD2CD85542EAB22A54B9
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/GT1ZG34_9XxxY1WGCuxRfhbPfXE.roa
Signing time: Thu 02 Feb 2023 10:58:09 +0000
ROA not before: Thu 02 Feb 2023 10:58:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 37.128.203.0/24 maxlen: 24
37.128.202.0/24 maxlen: 24
37.128.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:c6:d8:83:cb:34:bd:2c:d8:55:42:ea:b2:2a:54:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 2 10:58:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=193d591b7e3ff57c716355860aec517e16cf7d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d2:35:20:82:ee:eb:02:c8:28:34:48:6f:2a:
ea:14:70:9b:90:02:80:d7:20:51:c3:04:6f:79:cd:
a6:14:7e:d9:2b:6b:ad:5e:76:2f:42:7a:0e:8f:11:
a6:78:fe:d0:70:91:6d:80:e8:b4:c9:a9:2e:3f:6a:
99:47:f2:f1:32:da:44:97:53:d3:a0:8d:d7:6d:4b:
9f:77:ee:9f:2f:bf:52:e7:27:6a:7f:3b:f1:23:ed:
b6:4e:2f:86:7e:43:a2:0c:c4:a9:1a:59:fd:2d:79:
f3:0f:b0:65:b8:e1:29:0b:6a:0f:19:39:0d:b6:04:
9d:33:ba:b6:de:ca:4a:30:0c:55:64:c0:a5:65:b0:
9e:88:28:4a:f5:c8:ac:d2:97:2d:53:26:27:59:fc:
a7:a1:e7:60:ed:63:53:51:0a:a8:40:23:d2:ee:b6:
a9:aa:c8:29:8b:10:b3:a0:d8:11:bd:e5:cc:d2:12:
01:c9:6b:38:fb:74:ac:d3:ec:59:89:72:ce:9f:b8:
45:28:9a:06:7c:e3:7d:5e:43:13:c3:5c:53:ce:ab:
ce:0f:e1:17:31:b7:f8:fd:88:ac:0a:be:09:a5:1c:
a7:98:ca:45:37:f7:0c:ea:26:70:57:59:58:58:03:
6c:ff:5a:57:64:51:74:de:fd:58:ee:f4:e4:12:92:
e8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3D:59:1B:7E:3F:F5:7C:71:63:55:86:0A:EC:51:7E:16:CF:7D:71
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/GT1ZG34_9XxxY1WGCuxRfhbPfXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.201.0-37.128.203.255
Signature Algorithm: sha256WithRSAEncryption
34:2b:72:1d:46:93:5d:65:72:e1:a0:76:12:1b:8d:65:d7:f6:
f8:41:c6:60:36:9c:62:09:dc:5c:78:06:91:ab:e1:1f:38:f9:
9b:d4:c0:24:26:e5:82:b9:ba:a7:46:7f:cc:37:ad:20:40:56:
2c:8d:a8:6b:cd:4a:0a:4d:a2:06:d3:b3:a9:6a:d5:e2:10:ee:
65:04:b7:74:fb:14:27:a6:bd:39:99:83:ef:7d:d8:15:ce:92:
a1:95:bf:fd:e0:cf:18:17:05:be:28:59:9a:e1:94:63:ac:66:
26:ad:44:52:9a:e9:f4:0e:50:41:7e:85:59:91:13:c8:3f:be:
be:86:3d:d2:98:ce:7c:d4:ec:fc:2b:b9:ad:ca:7f:22:b0:9c:
12:f0:81:08:e7:3a:08:cb:68:7b:9b:e4:15:ff:84:37:13:ce:
c2:ad:1e:db:6c:c5:81:85:ad:53:be:fd:b3:cd:e1:46:01:58:
67:89:6b:5f:61:70:fd:6d:bd:b1:5b:11:2d:50:64:c2:60:65:
4d:e2:5c:4b:52:04:dc:2f:c4:93:16:b7:25:f6:1b:9e:d3:85:
5a:17:48:2d:07:32:90:e7:b0:86:06:d3:7a:ef:79:f1:b5:24:
aa:d2:90:d5:d8:4b:8f:83:74:08:29:13:83:a3:47:1d:12:cb:
1e:1c:b7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org