Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/gpz6WdvTRg5HYh-C1YaEAIJjxRw.roa
File: gpz6WdvTRg5HYh-C1YaEAIJjxRw.roa (raw, json)
Hash identifier: ggwLYZar4HO28e045bhskwwlUjUm4cH5fLR9F4cYwHI=
Subject key identifier: 82:9C:FA:59:DB:D3:46:0E:47:62:1F:82:D5:86:84:00:82:63:C5:1C
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019035D119F9BF3788C1FA7CA9FE5E7327C2
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/gpz6WdvTRg5HYh-C1YaEAIJjxRw.roa
Signing time: Thu 20 Jun 2024 13:23:34 +0000
ROA not before: Thu 20 Jun 2024 13:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.43.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jul 2024 05:43:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:d1:19:f9:bf:37:88:c1:fa:7c:a9:fe:5e:73:27:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Jun 20 13:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=829cfa59dbd3460e47621f82d58684008263c51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:a0:14:db:41:1a:97:d3:1f:45:33:c5:75:
59:18:96:22:ff:6b:82:e9:58:ed:66:5b:bc:78:a9:
08:8f:a7:60:31:18:80:87:fc:85:ea:98:bb:76:de:
cf:0a:c3:ff:30:1b:99:2a:a1:0d:d0:d5:d5:93:57:
93:25:b7:f4:13:f0:1e:db:fa:3d:ba:c4:d1:38:26:
89:c3:4e:1d:60:d1:5c:95:bd:49:4b:fd:3d:43:b4:
98:18:41:fe:24:69:4d:9b:c6:a4:c4:00:a1:88:b3:
c1:d0:11:30:33:63:a5:3c:2b:8f:1d:e4:95:34:15:
85:ec:24:49:45:c0:52:ed:2c:22:be:f1:ed:ef:5b:
37:dc:23:89:83:c3:f7:94:ab:8e:77:ed:a8:c2:89:
97:ec:b8:c4:6b:9e:6d:5d:89:99:b6:4a:89:fa:a9:
34:69:51:b9:96:4a:52:25:09:dc:b1:16:08:aa:d2:
ea:4d:26:e0:41:39:5c:a7:fa:ca:1d:7a:92:b1:c5:
36:aa:78:35:c7:67:ca:0c:fa:b8:d1:36:2f:1b:f7:
97:5a:31:9c:8c:ef:86:a5:8c:53:79:75:81:e0:f2:
df:ec:82:48:3a:a9:53:9f:11:e0:48:7d:b1:0d:cc:
f8:3c:27:4c:3a:26:dc:85:76:eb:ef:8f:80:b0:90:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9C:FA:59:DB:D3:46:0E:47:62:1F:82:D5:86:84:00:82:63:C5:1C
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/gpz6WdvTRg5HYh-C1YaEAIJjxRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.142.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:61:43:0c:ac:4a:ab:89:89:a8:ab:2f:a0:f7:a3:42:1d:2c:
89:28:4f:ac:5e:9d:f7:d3:ed:fe:bf:de:9c:d7:68:50:98:a3:
b1:11:4b:1c:dd:91:3d:cb:da:3f:13:b4:6f:d0:4f:de:c0:3a:
09:c7:a8:c4:6f:e0:45:af:9c:d2:77:f2:ca:d3:d4:98:bc:5b:
4a:73:a3:c2:47:b7:a9:7f:70:10:48:69:a8:9a:ee:fc:d5:56:
b4:c1:85:b0:16:90:09:36:35:43:e6:9f:69:f3:6d:ab:ee:59:
19:78:d1:84:5a:38:8b:08:65:f3:c1:f4:35:55:92:92:d2:6c:
87:9b:7d:fe:5b:81:17:f0:c5:70:04:90:ee:e6:08:d9:9e:14:
67:4d:05:19:42:85:38:56:cc:8c:b0:3b:67:88:99:fa:7e:2a:
62:53:ba:55:19:4a:a4:72:46:d0:bd:de:0d:15:8f:53:11:76:
5f:bb:c7:20:6b:ef:8b:e6:09:64:84:40:21:ac:c0:48:9a:cf:
aa:8d:08:b4:9f:e1:fd:c4:79:58:ac:d1:6c:b4:92:25:55:aa:
d4:58:35:22:4c:0a:a5:42:91:b3:49:c2:16:6d:29:8d:5b:6b:
55:ee:f5:79:cb:f4:45:96:06:a0:05:f6:c0:27:f2:b9:ab:25:
0f:21:11:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZA10Rn5vzeIwfp8qf5ecyfCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw
MzdjNmMwHhcNMjQwNjIwMTMyMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjljZmE1OWRiZDM0NjBlNDc2MjFmODJkNTg2ODQwMDgyNjNjNTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfqgFNtBGpfTH0UzxXVZGJYi/2uC
6VjtZlu8eKkIj6dgMRiAh/yF6pi7dt7PCsP/MBuZKqEN0NXVk1eTJbf0E/Ae2/o9
usTROCaJw04dYNFclb1JS/09Q7SYGEH+JGlNm8akxAChiLPB0BEwM2OlPCuPHeSV
NBWF7CRJRcBS7SwivvHt71s33COJg8P3lKuOd+2owomX7LjEa55tXYmZtkqJ+qk0
aVG5lkpSJQncsRYIqtLqTSbgQTlcp/rKHXqSscU2qng1x2fKDPq40TYvG/eXWjGc
jO+GpYxTeXWB4PLf7IJIOqlTnxHgSH2xDcz4PCdMOibchXbr74+AsJC84wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIKc+lnb00YOR2IfgtWGhACCY8UcMB8GA1UdIwQY
MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt
YzM2OWMxZDRjMzM3LzEvZ3B6NldkdlRSZzVIWWgtQzFZYUVBSUpqeFJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3
LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSuOMA0G
CSqGSIb3DQEBCwUAA4IBAQBLYUMMrEqriYmoqy+g96NCHSyJKE+sXp330+3+v96c
12hQmKOxEUsc3ZE9y9o/E7Rv0E/ewDoJx6jEb+BFr5zSd/LK09SYvFtKc6PCR7ep
f3AQSGmomu781Va0wYWwFpAJNjVD5p9p822r7lkZeNGEWjiLCGXzwfQ1VZKS0myH
m33+W4EX8MVwBJDu5gjZnhRnTQUZQoU4VsyMsDtniJn6fipiU7pVGUqkckbQvd4N
FY9TEXZfu8cga++L5glkhEAhrMBIms+qjQi0n+H9xHlYrNFstJIlVarUWDUiTAql
QpGzScIWbSmNW2tV7vV5y/RFlgagBfbAJ/K5qyUPIREr
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:49 2025 by rpki-client