Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/GBS47h-Spe0cL2sISW7TPspvtT4.roa
File: GBS47h-Spe0cL2sISW7TPspvtT4.roa (raw, json)
Hash identifier: 20ZNHFQoHrYbfv6Am+kB40Qwyc3XOUrDbnoIOVDJpuQ=
Subject key identifier: 18:14:B8:EE:1F:92:A5:ED:1C:2F:6B:08:49:6E:D3:3E:CA:6F:B5:3E
Certificate issuer: /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Certificate serial: 01873179A7FB2A26AE134FAEA66055BEBD00
Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/GBS47h-Spe0cL2sISW7TPspvtT4.roa
Signing time: Thu 30 Mar 2023 07:44:29 +0000
ROA not before: Thu 30 Mar 2023 07:44:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207390
IP address blocks: 185.151.248.0/22 maxlen: 22
2a07:7840::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:79:a7:fb:2a:26:ae:13:4f:ae:a6:60:55:be:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Validity
Not Before: Mar 30 07:44:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1814b8ee1f92a5ed1c2f6b08496ed33eca6fb53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4f:8f:de:ef:e4:59:bb:ae:20:a9:1b:5c:01:
d4:57:77:94:74:1b:38:1f:27:52:22:89:e0:81:44:
66:3b:8c:3d:14:00:8c:86:3b:c5:5d:11:4e:eb:8f:
8b:ee:89:88:a3:a8:df:49:21:83:30:ad:ce:c3:f0:
65:36:dd:71:1f:a9:76:ae:23:c9:fe:ac:2c:f4:09:
23:21:01:e9:a6:50:f3:82:a3:c7:78:5c:42:0f:89:
25:9d:0d:38:ab:04:ce:51:38:4d:c3:4a:af:62:cd:
2d:01:1f:bb:fe:97:3d:f1:ec:ea:20:79:04:b8:40:
4f:b3:05:6a:1b:92:3d:94:48:d5:bf:83:9b:31:99:
5a:59:11:6f:27:29:7a:da:49:74:51:e6:88:2b:6f:
ae:80:13:fd:eb:c1:a1:3c:46:e0:bb:f0:14:a8:68:
5b:1a:6a:13:cf:61:19:c4:b5:86:76:32:8a:03:2e:
92:23:27:30:93:2c:a6:43:17:bb:95:db:b5:55:4e:
44:ba:9e:85:5a:31:6a:b7:ea:e3:9e:e1:c8:d8:8d:
c0:81:0d:02:20:84:b0:ea:e4:6e:a6:75:38:99:c4:
bc:83:98:bf:db:30:50:0c:58:2c:a8:2b:9a:57:e7:
31:74:88:98:d7:1e:4d:f2:1c:31:d8:4f:af:09:e6:
91:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:14:B8:EE:1F:92:A5:ED:1C:2F:6B:08:49:6E:D3:3E:CA:6F:B5:3E
X509v3 Authority Key Identifier:
keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/GBS47h-Spe0cL2sISW7TPspvtT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.248.0/22
IPv6:
2a07:7840::/29
Signature Algorithm: sha256WithRSAEncryption
7a:f2:b5:1e:26:e3:39:dc:8c:f7:00:e0:75:bc:02:49:a6:84:
b3:81:e9:fe:4e:7f:1d:e8:79:44:97:80:28:7b:12:13:b3:c5:
74:97:78:74:8b:26:cf:d5:d0:6e:0e:25:3f:c6:ef:57:69:39:
80:21:a9:e8:89:3d:43:c3:ea:4a:d1:e7:15:33:e6:05:10:49:
87:b2:7e:bb:2e:fc:d4:57:9d:0c:3a:61:2e:a2:2e:16:77:1e:
ff:c7:5f:80:da:7a:db:29:9b:b3:d1:06:5e:e3:7a:1d:96:81:
26:36:79:3a:15:bf:87:b4:12:6b:61:52:e1:67:4a:5a:a5:09:
b7:63:89:00:67:95:24:11:aa:0d:00:0e:d6:f5:a5:88:61:64:
0d:0e:43:83:9b:d6:e6:08:bf:d2:30:28:5f:13:c7:59:8c:65:
d6:8f:07:ea:56:c0:5e:19:eb:47:76:cf:f4:d1:fd:54:ab:81:
48:00:a5:cc:7a:d9:80:c1:54:17:96:95:ee:5c:0b:6b:dd:90:
e8:99:b1:ed:0e:da:b3:3b:f6:be:32:94:0f:9c:a5:2c:e4:e4:
b7:93:b1:02:09:35:d8:b6:a5:aa:c1:e3:47:2e:6a:06:9b:ef:
e4:fa:1d:a0:4b:cb:04:3a:c7:3b:c4:57:7f:05:e1:65:63:c6:
c9:ea:48:b9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYcxeaf7KiauE0+upmBVvr0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOGJkYzljMTI3ZmI3MThlMjQwZGZiMjc1NmY1MjAyMDM2
ZmUzZDUwHhcNMjMwMzMwMDc0NDI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODE0YjhlZTFmOTJhNWVkMWMyZjZiMDg0OTZlZDMzZWNhNmZiNTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0+P3u/kWbuuIKkbXAHUV3eUdBs4
HydSIonggURmO4w9FACMhjvFXRFO64+L7omIo6jfSSGDMK3Ow/BlNt1xH6l2riPJ
/qws9AkjIQHpplDzgqPHeFxCD4klnQ04qwTOUThNw0qvYs0tAR+7/pc98ezqIHkE
uEBPswVqG5I9lEjVv4ObMZlaWRFvJyl62kl0UeaIK2+ugBP968GhPEbgu/AUqGhb
GmoTz2EZxLWGdjKKAy6SIycwkyymQxe7ldu1VU5Eup6FWjFqt+rjnuHI2I3AgQ0C
IISw6uRupnU4mcS8g5i/2zBQDFgsqCuaV+cxdIiY1x5N8hwx2E+vCeaRqwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBgUuO4fkqXtHC9rCElu0z7Kb7U+MB8GA1UdIwQY
MBaAFCqL3JwSf7cY4kDfsnVvUgIDb+PVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMjJjZGUtNWQ3NS00ZjUwLWE5NDUt
OGY1OWEzOTEwYmRkLzEvR0JTNDdoLVNwZTBjTDJzSVNXN1RQc3B2dFQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zMjJjZGUtNWQ3NS00ZjUwLWE5NDUtOGY1OWEzOTEwYmRk
LzEvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZf4MA0E
AgACMAcDBQMqB3hAMA0GCSqGSIb3DQEBCwUAA4IBAQB68rUeJuM53Iz3AOB1vAJJ
poSzgen+Tn8d6HlEl4AoexITs8V0l3h0iybP1dBuDiU/xu9XaTmAIanoiT1Dw+pK
0ecVM+YFEEmHsn67LvzUV50MOmEuoi4Wdx7/x1+A2nrbKZuz0QZe43odloEmNnk6
Fb+HtBJrYVLhZ0papQm3Y4kAZ5UkEaoNAA7W9aWIYWQNDkODm9bmCL/SMChfE8dZ
jGXWjwfqVsBeGetHds/00f1Uq4FIAKXMetmAwVQXlpXuXAtr3ZDombHtDtqzO/a+
MpQPnKUs5OS3k7ECCTXYtqWqweNHLmoGm+/k+h2gS8sEOsc7xFd/BeFlY8bJ6ki5
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:16:25 2024 by rpki-client on console.sobornost.net