Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/GqmdU589srvsn_B0eBqGtyIM3Ok.roa
File: GqmdU589srvsn_B0eBqGtyIM3Ok.roa (raw, json)
Hash identifier: 2+CzCPrRDWPiO9F6Qa1k9CusbQ5QGxgPcgx5sVUDO64=
Subject key identifier: 1A:A9:9D:53:9F:3D:B2:BB:EC:9F:F0:74:78:1A:86:B7:22:0C:DC:E9
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 0185723108F7B90F1027CEAC4C277073DB10
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/GqmdU589srvsn_B0eBqGtyIM3Ok.roa
Signing time: Mon 02 Jan 2023 11:14:54 +0000
ROA not before: Mon 02 Jan 2023 11:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211874
IP address blocks: 194.93.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:08:f7:b9:0f:10:27:ce:ac:4c:27:70:73:db:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Jan 2 11:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aa99d539f3db2bbec9ff074781a86b7220cdce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:00:ab:16:d4:f6:1b:22:0f:a2:51:26:f8:
3f:b8:ba:69:37:a9:8f:1b:b3:bd:ee:d6:f0:ef:ef:
f8:57:34:04:e0:ac:57:e7:0d:31:39:06:59:17:00:
e5:cc:6a:43:01:91:eb:24:ea:03:da:29:37:a4:6a:
a5:b5:6d:26:6f:fc:b9:67:26:12:44:2c:dd:7c:37:
ac:32:e6:51:dc:ae:19:6f:a1:1d:92:b7:28:4b:16:
a1:5f:8f:09:2f:a0:67:56:71:87:cc:17:c0:3d:93:
01:65:61:4e:02:aa:86:77:4b:d4:bb:1c:9f:46:9a:
f2:a3:07:4c:27:16:9c:33:06:e9:ce:eb:ca:58:3a:
27:ec:26:5b:43:f7:bf:4e:db:4a:bb:c2:f4:a9:fa:
06:8c:fa:26:79:66:6e:66:5b:bf:af:98:95:fb:3f:
5e:1c:4e:ea:79:00:bc:60:ac:62:fd:64:e5:bf:92:
95:20:8a:63:0f:8d:2f:3b:e1:bd:a3:06:03:08:fc:
ea:36:3a:67:78:65:3d:07:a3:29:a2:a4:af:09:83:
38:76:6f:86:f3:79:74:a4:f5:bd:31:7d:d2:29:bf:
4c:64:3a:55:91:07:80:03:9b:0a:e9:6a:21:df:a8:
45:40:28:c5:72:ef:30:b6:9f:3e:c6:f3:0f:e9:8a:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A9:9D:53:9F:3D:B2:BB:EC:9F:F0:74:78:1A:86:B7:22:0C:DC:E9
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/GqmdU589srvsn_B0eBqGtyIM3Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.44.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:44:87:c3:1a:bd:f9:1e:d1:a5:30:c6:dc:03:b8:a5:99:42:
29:24:84:87:e8:9a:da:99:d6:e0:37:11:18:63:a6:7c:11:1c:
88:44:5f:65:b5:17:94:6a:6a:5e:c7:a9:11:d3:7a:6c:ca:d8:
ec:4c:38:a3:3a:38:92:0f:48:60:db:38:28:e5:33:1c:84:8a:
f9:88:b8:48:bb:60:7a:d8:38:85:10:a5:83:e8:1c:8b:47:96:
0e:84:90:40:5b:a1:3c:f0:b1:1d:d9:8b:8d:c3:e8:23:46:85:
8a:f4:94:2d:01:88:43:35:e4:37:b4:0c:8a:4f:29:15:46:81:
ef:d9:45:a3:18:fa:27:f7:9a:66:90:a9:9e:c6:72:e4:df:0f:
cb:45:5d:a7:8c:bf:e4:28:89:ea:23:ed:7d:bd:b7:1f:30:b0:
ad:70:5c:af:92:5a:9d:91:0a:3c:2a:99:98:aa:ba:eb:b7:eb:
e6:dc:79:9e:0a:75:a2:f1:37:3f:87:57:3e:69:c9:fb:b7:ef:
6e:26:a4:51:7a:be:5e:7e:fe:41:47:58:bd:2a:fb:4e:13:ab:
63:d4:aa:d4:e2:ad:51:d3:7a:89:dd:59:7b:63:eb:5c:72:77:
8d:a7:e0:90:aa:16:d1:ee:f3:5f:03:89:7f:39:38:76:84:13:
51:b8:40:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:43 2024 by rpki-client on console-ams.rpki-client.org