Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GqUMhZQcDu4s3zWZhha0F6bWEyM.roa
File: GqUMhZQcDu4s3zWZhha0F6bWEyM.roa (raw, json)
Hash identifier: qLwzav12pk0SWC3bpvale2+LZdVL6roHip/6GwfCZk0=
Subject key identifier: 1A:A5:0C:85:94:1C:0E:EE:2C:DF:35:99:86:16:B4:17:A6:D6:13:23
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0189089212EE1E038AC61E08EF9F292DE544
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GqUMhZQcDu4s3zWZhha0F6bWEyM.roa
Signing time: Thu 29 Jun 2023 19:12:17 +0000
ROA not before: Thu 29 Jun 2023 19:12:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 188.64.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:08:92:12:ee:1e:03:8a:c6:1e:08:ef:9f:29:2d:e5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jun 29 19:12:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aa50c85941c0eee2cdf35998616b417a6d61323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:a9:c0:b7:ef:10:c5:28:9a:e3:e6:9b:dd:
7a:17:46:29:af:94:6c:5a:d9:ed:e4:01:11:c2:da:
ac:48:86:3f:2c:b8:01:46:85:a6:20:70:42:1f:27:
fc:4d:b2:1d:49:5d:77:5c:ff:94:da:cd:61:c1:cd:
44:34:57:8b:1e:e8:5c:9d:1a:c2:d3:c3:0f:81:6b:
1d:a7:fa:6f:1e:21:d8:6c:ef:58:11:52:01:0a:b2:
11:73:82:db:62:df:4a:a1:8a:94:b4:de:fb:6c:f7:
6f:71:ae:45:93:c3:b0:24:4d:1d:60:cb:bf:84:b0:
f7:f3:91:c0:3e:cb:01:76:69:24:75:20:1d:ce:81:
46:6f:d7:77:84:b7:d2:7c:cc:ce:84:c3:2a:98:cb:
c8:97:90:85:f1:29:46:c7:45:83:12:6e:92:13:8c:
9e:3f:be:0e:0b:d8:a1:a8:f2:24:d2:29:f0:64:fb:
31:cc:41:e9:d6:08:4d:17:c9:64:d8:ee:5b:cb:a9:
87:67:a3:5d:d0:85:4d:73:54:26:1b:62:40:48:e6:
1e:a5:46:52:82:87:c4:8e:a6:9b:ae:77:4f:7a:47:
8d:09:e0:f9:e8:d5:ea:c9:43:77:8c:d1:5c:5c:39:
d3:08:82:1f:b4:56:8c:ac:db:3a:5c:1e:10:d5:22:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A5:0C:85:94:1C:0E:EE:2C:DF:35:99:86:16:B4:17:A6:D6:13:23
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GqUMhZQcDu4s3zWZhha0F6bWEyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.104.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:a1:4d:0a:94:5c:72:fb:96:09:3f:64:17:8a:ab:e4:84:72:
b6:22:8a:e3:36:1a:99:ac:cf:67:7e:70:01:56:fa:45:e5:2f:
cb:13:08:19:23:20:90:ce:da:a3:25:0a:f5:0b:79:bf:0e:66:
14:43:52:1d:e3:ee:02:45:77:fb:37:0b:90:ee:30:58:c0:4c:
ec:97:bf:e4:17:45:e8:99:a7:90:39:c5:56:65:34:aa:34:35:
b7:ea:ee:a4:59:0a:63:b2:89:2c:40:fe:03:be:87:c2:0c:25:
e1:d6:9b:e2:39:f5:c0:4e:8c:03:7a:00:29:fe:33:14:00:18:
91:e7:3e:e0:87:79:83:5e:6f:b3:9d:0a:4f:29:32:7e:df:da:
75:03:43:b4:64:de:8d:03:b5:01:3f:ac:0b:a7:80:fa:b5:80:
0b:0f:71:64:92:82:b2:ae:38:7a:b9:c9:96:cb:ba:8e:47:d3:
e1:37:98:90:d4:cb:92:f3:ff:09:8e:42:d2:fa:cd:60:66:a7:
7e:56:66:27:48:9f:99:db:bb:46:71:58:f1:73:62:86:ee:88:
11:c0:c8:64:b9:c3:7f:66:44:1b:25:9f:2b:1b:f4:f4:84:65:
cd:bc:84:35:06:10:08:dd:f1:44:67:54:96:3a:cc:75:84:9e:
ca:c6:79:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkIkhLuHgOKxh4I758pLeVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjMwNjI5MTkxMjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWE1MGM4NTk0MWMwZWVlMmNkZjM1OTk4NjE2YjQxN2E2ZDYxMzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYSpwLfvEMUomuPmm916F0Ypr5Rs
Wtnt5AERwtqsSIY/LLgBRoWmIHBCHyf8TbIdSV13XP+U2s1hwc1ENFeLHuhcnRrC
08MPgWsdp/pvHiHYbO9YEVIBCrIRc4LbYt9KoYqUtN77bPdvca5Fk8OwJE0dYMu/
hLD385HAPssBdmkkdSAdzoFGb9d3hLfSfMzOhMMqmMvIl5CF8SlGx0WDEm6SE4ye
P74OC9ihqPIk0inwZPsxzEHp1ghNF8lk2O5by6mHZ6Nd0IVNc1QmG2JASOYepUZS
gofEjqabrndPekeNCeD56NXqyUN3jNFcXDnTCIIftFaMrNs6XB4Q1SKZxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBqlDIWUHA7uLN81mYYWtBem1hMjMB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEvR3FVTWhaUWNEdTRzM3pXWmhoYTBGNmJXRXlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw
LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvEBoMA0G
CSqGSIb3DQEBCwUAA4IBAQCjoU0KlFxy+5YJP2QXiqvkhHK2IorjNhqZrM9nfnAB
VvpF5S/LEwgZIyCQztqjJQr1C3m/DmYUQ1Id4+4CRXf7NwuQ7jBYwEzsl7/kF0Xo
maeQOcVWZTSqNDW36u6kWQpjsoksQP4DvofCDCXh1pviOfXATowDegAp/jMUABiR
5z7gh3mDXm+znQpPKTJ+39p1A0O0ZN6NA7UBP6wLp4D6tYALD3FkkoKyrjh6ucmW
y7qOR9PhN5iQ1MuS8/8JjkLS+s1gZqd+VmYnSJ+Z27tGcVjxc2KG7ogRwMhkucN/
ZkQbJZ8rG/T0hGXNvIQ1BhAI3fFEZ1SWOsx1hJ7Kxnmz
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:52 2023 by rpki-client on console.sobornost.net