Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/GvYolZYpzZx4Gey_3CMGdo50vto.roa
File: GvYolZYpzZx4Gey_3CMGdo50vto.roa (raw, json)
Hash identifier: leJ9QcCA/KRSlemUKX6dW1xK54qSr7MVjKWldQGUmRE=
Subject key identifier: 1A:F6:28:95:96:29:CD:9C:78:19:EC:BF:DC:23:06:76:8E:74:BE:DA
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018AE31FB2BBF36BA2B730B01BE7462DBE9C
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/GvYolZYpzZx4Gey_3CMGdo50vto.roa
Signing time: Fri 29 Sep 2023 22:46:59 +0000
ROA not before: Fri 29 Sep 2023 22:46:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52053
IP address blocks: 193.38.250.0/24 maxlen: 24
185.255.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e3:1f:b2:bb:f3:6b:a2:b7:30:b0:1b:e7:46:2d:be:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Sep 29 22:46:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1af628959629cd9c7819ecbfdc2306768e74beda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:ee:bf:2f:f8:1f:b4:ad:fd:08:96:95:1b:
c7:cf:a4:13:60:99:cc:0d:91:7f:1a:74:3c:cb:6e:
16:3a:da:59:fa:de:23:5f:87:ae:38:c6:e3:65:fe:
59:e5:67:ab:1a:f8:ae:c6:9f:91:6e:60:08:9c:24:
9d:ab:62:ff:57:6e:24:e2:cc:69:cd:41:2a:ba:75:
e4:3f:a9:52:31:9c:97:66:d0:02:41:d7:55:bf:59:
0e:a0:90:c7:7c:b7:b2:07:66:77:4a:46:89:a1:38:
e3:f1:a5:87:c2:96:30:18:4a:08:9e:e9:74:13:37:
3d:fb:4e:2a:53:f4:68:2f:69:93:c0:6d:14:f7:c0:
f1:4a:ca:6b:bd:77:ea:a9:c9:99:ab:c8:1a:ac:18:
d2:8b:78:7f:8f:7d:a6:f9:52:43:34:52:f4:a2:a1:
20:c7:b4:23:40:4b:7a:6f:b4:94:e8:44:57:7f:03:
24:05:ab:a5:5e:d0:3e:7f:2b:01:3a:a3:ca:49:21:
2a:c3:9b:97:72:00:48:51:39:78:9b:cb:40:ac:3c:
7a:38:f0:ea:94:ad:6d:1e:a2:6d:f6:0f:8d:63:d9:
93:da:a7:94:5d:04:b4:47:f0:fe:d3:7d:44:f3:52:
cf:ca:73:b0:b1:97:7b:f9:32:0c:ed:b5:04:3b:79:
d8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F6:28:95:96:29:CD:9C:78:19:EC:BF:DC:23:06:76:8E:74:BE:DA
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/GvYolZYpzZx4Gey_3CMGdo50vto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.112.0/24
193.38.250.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:b5:fc:ea:de:2d:f6:cd:28:c9:52:e3:95:a5:5b:28:15:20:
7b:03:ab:a2:70:0e:61:e8:f9:0c:d0:63:c5:19:4c:50:f5:03:
b3:f7:01:9c:e0:f7:a7:6e:b4:d2:89:ae:1f:72:01:07:0f:5d:
03:16:61:43:ef:b2:d3:07:28:0f:71:a4:cb:7b:45:7c:cd:89:
d3:6c:b9:b7:c1:71:8e:b2:30:43:2e:14:30:4c:65:af:63:53:
b2:b3:18:fc:78:2b:8c:e6:71:58:18:82:cf:d2:4b:37:ad:5c:
6b:21:16:c3:a1:47:cc:43:37:20:ed:d2:cd:d8:c0:70:2f:80:
d2:a6:37:5b:61:0c:4a:1b:77:4c:bd:4f:9b:3a:0e:b2:43:d8:
cf:f8:f4:1a:de:8c:48:eb:30:95:e9:eb:cb:26:78:1c:b6:56:
f1:3c:24:cb:8e:85:d3:58:44:c9:92:69:85:34:27:f6:96:47:
1b:fa:a2:f9:fe:7b:73:b5:2b:3f:99:84:c1:ab:20:f5:6d:27:
93:fe:db:b9:49:d1:44:9a:64:75:f7:c5:5d:94:dd:24:a5:c2:
e1:b6:6b:5c:c4:84:be:2a:88:d1:10:11:d0:ee:bf:55:05:e8:
0b:aa:b4:a5:92:d4:78:55:10:16:e7:8f:9d:13:22:10:2d:48:
73:79:0c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:58 2024 by rpki-client on console-ams.rpki-client.org