Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/tGUSoqx8sQQchQGlxiBuCOJfC_I.roa
File: tGUSoqx8sQQchQGlxiBuCOJfC_I.roa (raw, json)
Hash identifier: M6fjC1ygARt7bohBppL3xHiPzxpKZc8exwnRgmIrrsw=
Subject key identifier: B4:65:12:A2:AC:7C:B1:04:1C:85:01:A5:C6:20:6E:08:E2:5F:0B:F2
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 018572CCC47D181D27C54C4564BA31D9A490
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/tGUSoqx8sQQchQGlxiBuCOJfC_I.roa
Signing time: Mon 02 Jan 2023 14:05:00 +0000
ROA not before: Mon 02 Jan 2023 14:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8698
IP address blocks: 155.192.55.0/24 maxlen: 24
155.131.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:c4:7d:18:1d:27:c5:4c:45:64:ba:31:d9:a4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Jan 2 14:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b46512a2ac7cb1041c8501a5c6206e08e25f0bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0d:66:7e:ca:2e:a5:b5:da:45:f9:69:f1:a1:
d6:ea:fc:25:1a:40:41:ae:69:fa:9e:f9:f0:08:d0:
b4:4f:f6:89:07:a4:d0:1c:98:e1:f9:15:04:5a:5b:
f6:17:86:c9:a4:cb:b5:75:99:83:bc:b9:91:69:ce:
af:85:40:98:2e:39:b6:9a:cb:e7:ce:e1:72:37:51:
bb:80:e9:2d:e6:8c:01:e6:24:29:65:0e:04:09:fa:
1a:a1:00:d2:e7:e0:24:e3:e3:28:aa:44:e5:da:a9:
a3:e4:50:a4:71:a1:2d:e3:47:9c:5a:87:35:d0:76:
10:d7:e8:02:a5:d0:65:d3:b8:a8:87:8a:45:9b:35:
28:fb:76:af:c1:b8:81:39:91:8a:d8:16:16:35:21:
f3:3e:39:1f:21:50:4e:21:5c:93:41:cb:ff:ca:9f:
ed:a6:53:ac:a4:77:e2:27:3d:95:4b:31:a7:0a:20:
3c:34:70:ce:40:59:f2:88:89:ee:52:c2:46:0b:56:
df:30:b6:5e:c2:8c:92:35:eb:35:98:a1:aa:91:22:
67:8f:8e:e9:75:d3:ed:78:94:37:ac:f7:f8:5a:d9:
93:7d:40:93:5a:ac:b6:ec:9f:53:95:51:d7:32:cb:
2c:5d:c3:a6:11:ce:b9:16:ab:78:30:1b:23:d2:aa:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:65:12:A2:AC:7C:B1:04:1C:85:01:A5:C6:20:6E:08:E2:5F:0B:F2
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/tGUSoqx8sQQchQGlxiBuCOJfC_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.131.55.0/24
155.192.55.0/24
Signature Algorithm: sha256WithRSAEncryption
44:cb:2e:e4:dc:86:aa:cd:c4:32:22:c7:3c:76:e2:a2:09:73:
38:2f:e5:5e:e6:ef:56:c1:ac:2f:43:75:e0:37:e1:bd:52:96:
55:33:52:6a:84:10:3f:9f:7f:ab:53:78:24:b8:99:be:5f:77:
5b:25:8c:3e:4b:2b:b7:b4:96:26:13:b3:5d:56:a6:fb:a2:47:
ff:e7:db:68:5e:4b:6d:32:6f:a4:ab:6b:ba:f8:cc:e7:43:06:
ed:66:3b:ec:de:95:de:82:86:16:dc:6c:d7:65:76:0a:f9:0f:
82:2c:74:9d:10:cc:cd:ae:f2:68:8a:d6:02:d7:6a:fe:72:07:
c9:20:c0:fe:3e:81:f7:2e:d5:b2:c3:48:4a:e0:ca:24:9a:5b:
34:35:d1:0a:1b:54:28:d4:ed:11:b4:c3:82:5b:ed:71:3a:d6:
df:e4:a1:e2:69:61:b0:6b:b8:35:f5:75:95:9a:bc:4f:fb:a5:
54:f4:3d:ca:02:2d:cc:39:00:5b:1a:71:d5:2b:c8:ec:7c:67:
fe:b6:6d:87:67:ae:e6:d2:d0:ef:dd:ba:0c:75:63:1c:62:41:
51:da:7d:6c:41:36:76:5f:fa:b7:64:aa:41:0a:36:89:b0:0f:
40:06:b2:f0:f6:92:f5:02:f5:74:94:c1:82:fb:bb:1f:1f:72:
cd:9d:80:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:12 2024 by rpki-client on console-fra.rpki-client.org