Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/GIdkLkeW7kaXH1htDeCOzrBcU1w.roa
File: GIdkLkeW7kaXH1htDeCOzrBcU1w.roa (raw, json)
Hash identifier: 4/CJEZt1WFLk7R1ghvdUS93ulaY+klYm2LEi4n+FDZg=
Subject key identifier: 18:87:64:2E:47:96:EE:46:97:1F:58:6D:0D:E0:8E:CE:B0:5C:53:5C
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0185F352CD21F4E40C6551A52911C72FA455
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/GIdkLkeW7kaXH1htDeCOzrBcU1w.roa
Signing time: Fri 27 Jan 2023 13:02:48 +0000
ROA not before: Fri 27 Jan 2023 13:02:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 31.129.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:52:cd:21:f4:e4:0c:65:51:a5:29:11:c7:2f:a4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 27 13:02:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1887642e4796ee46971f586d0de08eceb05c535c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:9e:9f:38:5d:6d:19:40:27:24:35:e5:0f:
12:eb:33:99:d2:15:a4:2b:56:0f:fc:a0:7f:8e:1b:
61:47:68:85:1b:95:d1:07:1f:b6:95:ed:cc:c8:4f:
6c:12:34:3f:cd:05:34:be:8f:8c:c4:39:94:1b:92:
33:d1:bf:5d:cd:5c:eb:79:0b:47:19:33:a5:ec:68:
90:f8:2b:e8:d0:8f:1d:8f:4f:f1:9f:6c:31:a9:d3:
80:00:7c:a2:d9:49:49:79:62:6f:b4:39:b9:ce:6d:
74:6c:0b:cf:df:60:ed:c9:92:6a:07:11:a3:5e:14:
5c:f6:ff:29:1e:13:ad:3c:0b:10:da:89:e1:3a:e5:
fb:0c:86:56:35:18:6f:31:16:19:34:b6:8e:42:e1:
e6:bf:13:75:f1:46:35:52:14:56:d4:82:28:fe:88:
51:40:4a:3a:6b:f4:8d:38:84:68:3b:f7:d4:5c:78:
29:ea:c1:48:a0:41:d0:ba:29:f9:ce:0e:cc:6b:7c:
de:ee:a9:e7:2b:db:61:5f:52:ad:86:4a:77:5e:bd:
56:4f:f6:a6:f4:eb:dd:74:77:a7:f0:e8:81:cf:d6:
3a:6b:c8:8f:28:7b:72:4f:dc:d5:32:d1:5d:c1:35:
52:14:e2:47:f4:22:2b:83:f1:c1:ec:54:7b:40:13:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:87:64:2E:47:96:EE:46:97:1F:58:6D:0D:E0:8E:CE:B0:5C:53:5C
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/GIdkLkeW7kaXH1htDeCOzrBcU1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.30.0/24
Signature Algorithm: sha256WithRSAEncryption
53:be:ed:1a:d6:9c:18:0c:2c:2e:24:a8:54:4d:60:c7:e7:bf:
bb:3b:a1:b4:59:d4:e5:bc:df:55:d8:34:d8:c4:55:93:0a:35:
ef:77:1e:f0:f3:7b:a9:4d:22:7a:3c:71:a0:c8:6b:6b:a1:bd:
c3:ff:9d:dc:0e:1c:4f:e6:0a:e5:63:16:19:9e:79:2e:81:b4:
18:c0:2a:01:51:92:d4:3e:1a:b4:37:d1:3b:ef:3d:81:e9:1f:
59:42:54:95:26:9f:e0:2f:c1:a6:05:81:e7:a8:ee:25:27:c2:
86:16:2f:d8:e0:ec:70:f3:5d:2b:f4:2a:5b:9d:76:72:c5:8c:
f2:f8:7c:09:57:c6:2d:a0:12:69:c8:df:e2:27:d6:a7:af:03:
50:9f:e7:28:2b:ae:66:56:07:97:8a:4c:65:38:33:5b:7b:01:
04:22:0f:8b:60:c5:65:be:c6:a9:2a:ce:80:33:2b:fc:5c:3a:
8a:62:f2:a3:b6:28:d8:4c:3e:7f:a0:f2:43:50:08:52:f6:ab:
b2:a3:32:18:40:52:71:d9:18:65:3a:58:fe:b9:db:55:23:47:
fc:42:98:be:8e:c8:ce:36:99:8b:fc:21:ed:b8:72:59:80:ce:
35:0c:0b:bb:59:34:b1:d1:3d:a0:7a:f0:d6:01:e5:af:f9:ba:
1f:91:b5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-fra.rpki-client.org