Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/Gp_3CXRedxV01zdFdNg-d7n9Cro.roa
File: Gp_3CXRedxV01zdFdNg-d7n9Cro.roa (raw, json)
Hash identifier: qD2d0YJ9X4Ay4BtOf40ga67/uFFgfVkd0J2CP/8LzeY=
Subject key identifier: 1A:9F:F7:09:74:5E:77:15:74:D7:37:45:74:D8:3E:77:B9:FD:0A:BA
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 018C9245D146EF2899F22A6C9280714B68F5
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/Gp_3CXRedxV01zdFdNg-d7n9Cro.roa
Signing time: Fri 22 Dec 2023 16:04:58 +0000
ROA not before: Fri 22 Dec 2023 16:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197927
IP address blocks: 146.19.85.0/24 maxlen: 24
130.255.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:92:45:d1:46:ef:28:99:f2:2a:6c:92:80:71:4b:68:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Dec 22 16:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a9ff709745e771574d7374574d83e77b9fd0aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d9:0d:b3:6a:9c:68:61:6b:a9:18:c3:f3:83:
36:a3:c7:e3:06:27:94:df:6e:3a:54:53:7f:e8:58:
1a:85:d4:93:83:ab:77:75:af:3d:84:2e:4a:1a:bd:
84:f4:c8:8f:01:56:f9:54:04:da:70:79:a6:69:37:
fe:30:36:97:aa:9a:9f:89:06:0f:c2:51:b0:e7:c9:
b3:70:9e:9f:7a:35:92:06:7f:7e:6e:9f:86:f0:30:
0a:bd:f8:fa:02:87:b2:4d:9d:4e:46:ac:31:cd:2a:
81:f8:61:ed:d7:73:f2:a8:07:60:37:b4:5b:40:63:
c1:64:46:b4:e4:da:a5:11:db:4c:dc:68:bb:72:24:
8e:18:2a:e1:5d:97:1a:60:0c:6d:2c:2f:6f:28:3a:
6e:75:aa:a9:ec:5d:a7:d4:44:99:bf:aa:37:2d:23:
a8:fb:01:44:19:25:f3:9a:b6:3b:79:36:c6:0c:49:
dd:17:88:d7:ee:3d:ea:b9:64:04:4b:08:24:88:f7:
77:c2:e8:61:8e:29:49:23:92:10:b8:8e:24:10:c3:
84:16:9c:0b:0b:39:92:9c:b5:a9:9f:07:b8:4b:44:
af:ab:03:d0:2d:bc:e8:ff:17:ec:7d:0c:56:0d:2b:
6f:dd:49:cf:85:fa:41:c0:c0:74:ef:79:38:28:e0:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9F:F7:09:74:5E:77:15:74:D7:37:45:74:D8:3E:77:B9:FD:0A:BA
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/Gp_3CXRedxV01zdFdNg-d7n9Cro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.174.0/24
146.19.85.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a4:dc:21:ee:0e:94:4b:8b:34:e9:9f:0b:c2:e7:ad:2f:5d:
aa:c2:c0:4e:24:83:44:cb:9d:1a:21:9c:dd:d7:fa:49:9f:0a:
c6:be:8b:b1:1a:44:08:46:95:fb:49:63:b7:83:95:13:24:95:
8e:a3:e1:cc:9d:37:c9:a7:bc:a6:8c:1e:9e:c4:c6:5b:06:53:
7f:e5:24:7a:d8:dd:3b:49:a5:b8:7c:92:8f:02:95:3d:aa:26:
af:1e:c5:cd:6e:4d:76:e1:3f:05:a2:59:51:cd:a7:6f:51:e2:
9d:c1:c9:bd:16:a2:f2:13:dc:7d:ab:2b:21:f7:04:2a:8e:5c:
5a:82:4d:13:3c:9f:81:40:18:84:5c:be:bc:5f:8d:fa:62:23:
d8:41:ab:f7:37:ce:8c:8e:4e:06:91:02:05:76:db:c4:39:61:
20:0a:d3:12:cf:6a:6f:e2:1d:95:84:e5:2d:71:f0:5a:cb:2b:
38:16:fa:ec:b8:8b:4f:7c:33:0f:47:e3:c4:7e:10:16:4a:f8:
07:ed:cc:1e:0c:86:b1:be:c8:1a:90:03:48:99:4b:36:b3:8c:
0e:15:9c:b0:d3:17:05:10:aa:5a:43:c2:b3:b3:49:eb:06:9e:
e6:f8:ac:13:3e:4b:6c:ff:5e:62:a2:00:91:56:3c:ff:4f:a2:
6e:c5:41:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:03 2024 by rpki-client on console-ams.rpki-client.org