Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/GUWGA6VJJCrWGA9lg39IT3d0tzI.roa
File: GUWGA6VJJCrWGA9lg39IT3d0tzI.roa (raw, json)
Hash identifier: tDGZS3K5eCv6RgX6/0GPQcFnt/AhPwrFwD1hTMEMabs=
Subject key identifier: 19:45:86:03:A5:49:24:2A:D6:18:0F:65:83:7F:48:4F:77:74:B7:32
Certificate issuer: /CN=101fdf7c89989242919835759c9b62f8cc69d492
Certificate serial: 01856DB88FD8DA76161814EC557D9D4DC2AF
Authority key identifier: 10:1F:DF:7C:89:98:92:42:91:98:35:75:9C:9B:62:F8:CC:69:D4:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EB_ffImYkkKRmDV1nJti-Mxp1JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/GUWGA6VJJCrWGA9lg39IT3d0tzI.roa
Signing time: Sun 01 Jan 2023 14:24:49 +0000
ROA not before: Sun 01 Jan 2023 14:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39648
IP address blocks: 195.24.160.0/19 maxlen: 19
193.93.4.0/22 maxlen: 22
2a02:17c8::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:8f:d8:da:76:16:18:14:ec:55:7d:9d:4d:c2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101fdf7c89989242919835759c9b62f8cc69d492
Validity
Not Before: Jan 1 14:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19458603a549242ad6180f65837f484f7774b732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:88:f1:a9:2f:15:e7:d8:0a:15:44:33:61:
b7:c5:91:1d:7e:82:92:36:09:7e:2d:af:3b:47:be:
25:e7:ed:b5:08:eb:41:ee:d0:70:95:c7:9d:61:fc:
4a:4c:7d:2c:1c:1d:0a:ad:94:96:80:40:80:85:78:
9b:78:9b:01:7f:e3:07:93:e9:db:9d:98:36:e3:c3:
64:8e:3e:a3:ed:9a:ec:73:c3:cc:ae:8d:c0:94:69:
4a:c7:07:00:5a:05:9c:c2:89:88:b8:5f:a4:eb:49:
47:10:28:da:32:44:89:9b:7e:19:e7:c0:ad:c1:c1:
bc:3b:17:0a:9b:81:99:8e:fc:2f:b5:fa:f2:0b:4e:
cc:01:ec:5e:ec:18:1f:3b:76:04:30:20:1d:32:aa:
92:47:3d:50:c1:65:27:15:cc:44:20:d1:32:77:a5:
bb:f8:2a:80:96:1f:b8:2f:df:23:89:1b:a2:17:57:
f3:0c:7d:eb:73:d4:a5:a3:97:25:29:e9:d5:02:0d:
7e:cf:04:4e:4d:c8:c9:34:fa:e6:e1:1a:4a:51:e7:
9c:da:39:d2:48:8a:2d:b7:14:46:1f:eb:7b:6d:7f:
ab:db:10:22:24:ce:fa:fb:c1:cb:a9:aa:f7:68:8d:
9b:97:4e:c4:26:64:75:33:27:86:4b:5e:18:f7:fe:
97:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:45:86:03:A5:49:24:2A:D6:18:0F:65:83:7F:48:4F:77:74:B7:32
X509v3 Authority Key Identifier:
keyid:10:1F:DF:7C:89:98:92:42:91:98:35:75:9C:9B:62:F8:CC:69:D4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EB_ffImYkkKRmDV1nJti-Mxp1JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/GUWGA6VJJCrWGA9lg39IT3d0tzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.4.0/22
195.24.160.0/19
IPv6:
2a02:17c8::/32
Signature Algorithm: sha256WithRSAEncryption
03:fa:48:36:f0:8c:10:f3:17:37:af:b8:b4:0a:b7:fc:c4:69:
ec:7e:41:3d:f3:f0:e7:a3:28:a6:14:55:3f:df:22:36:57:40:
2d:64:c5:41:c9:b5:e8:bc:64:12:6f:ce:34:f7:88:ff:4b:e9:
d3:fb:bc:33:d2:fa:40:e8:fd:6e:59:dc:19:a4:d0:31:60:52:
38:ce:f9:79:db:a5:87:45:1c:2c:54:d8:68:dd:fb:95:54:9e:
7a:59:6a:97:cf:6b:33:c8:84:a5:d4:e4:a8:6c:b2:10:36:7c:
0b:78:60:10:dd:71:98:4d:fe:33:75:cf:35:fe:2c:95:7a:01:
a8:61:87:5d:50:b3:4a:fa:aa:ea:b2:77:87:dc:39:2b:5d:7b:
fa:9a:26:1c:cb:b1:8e:86:3a:e4:85:da:25:15:00:70:51:f9:
8a:44:b6:d0:42:07:c9:58:84:5f:96:43:d7:18:56:f2:2a:69:
31:42:95:cc:92:a7:72:18:3d:47:97:cb:ee:1b:2b:da:af:e5:
70:b7:83:74:06:53:ee:35:67:36:a5:c3:52:1c:36:b3:4c:55:
9e:41:27:fa:a3:d7:a0:1b:a6:25:ea:4b:b5:8d:b3:9a:19:8e:
a5:7e:c7:cb:e4:3e:bd:bd:56:26:c9:17:62:55:da:14:a2:47:
09:2e:f1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:45 2024 by rpki-client on console-fra.rpki-client.org