Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GAj9oYa1GO7ogK6jTIwsY3ltfYk.roa
File: GAj9oYa1GO7ogK6jTIwsY3ltfYk.roa (raw, json)
Hash identifier: ygnAt8JMnVtyEtBZZzKhn8lpLw1rO3bmAWy1eGbf6fI=
Subject key identifier: 18:08:FD:A1:86:B5:18:EE:E8:80:AE:A3:4C:8C:2C:63:79:6D:7D:89
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCE611FC9511FDD09582E4EFA4DBB1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GAj9oYa1GO7ogK6jTIwsY3ltfYk.roa
Signing time: Tue 02 Jan 2024 06:29:29 +0000
ROA not before: Tue 02 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47890
IP address blocks: 193.37.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e6:11:fc:95:11:fd:d0:95:82:e4:ef:a4:db:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1808fda186b518eee880aea34c8c2c63796d7d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:71:23:97:39:14:25:fa:40:14:98:4d:b1:36:
8c:c3:16:f1:aa:70:cb:6c:3d:88:c3:3a:33:2a:75:
ab:8c:9e:c8:4c:37:25:20:4a:8d:87:c9:e6:b2:f3:
a7:1f:5b:ca:bf:46:0b:9e:7e:ee:c7:81:24:bc:ab:
92:10:3b:82:da:31:e6:db:af:ed:97:bf:9b:3d:be:
1a:82:e2:3e:c3:70:91:df:55:34:9f:f7:01:3c:4e:
86:1b:94:6e:96:5b:29:0d:ac:e5:be:fb:4b:39:80:
ac:68:03:9d:1d:b5:f8:c2:1b:00:01:73:8c:17:e3:
39:34:5c:97:4b:c8:89:61:6e:56:54:d2:fd:f9:8e:
24:36:ee:10:6b:ff:4e:d4:24:69:8b:d1:26:55:dd:
03:80:0d:a5:bf:3a:ba:67:75:be:7f:e3:1a:be:13:
51:bd:0b:83:5b:98:e2:b6:79:39:87:00:c0:d7:cd:
61:c6:64:d8:37:3c:15:e3:42:3c:0f:91:e8:dd:06:
9a:a9:16:61:9e:d0:5c:be:7c:28:a4:72:48:89:4a:
33:a0:c2:2a:e4:2a:6f:75:f8:0a:37:39:63:60:9b:
4b:0d:62:fd:94:1d:1d:98:b7:13:1c:1c:27:ca:cc:
63:f9:67:13:7a:85:2f:a9:13:1c:2f:a6:55:81:4a:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:FD:A1:86:B5:18:EE:E8:80:AE:A3:4C:8C:2C:63:79:6D:7D:89
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GAj9oYa1GO7ogK6jTIwsY3ltfYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.41.0/24
Signature Algorithm: sha256WithRSAEncryption
40:cc:3c:20:69:2e:0f:4b:43:d2:05:a1:ef:74:a7:d8:c5:9b:
09:71:9f:34:36:a5:c3:5c:48:e5:c1:25:32:f6:fc:f4:65:ad:
3d:8e:ec:27:f9:05:da:b2:1f:21:b6:17:9a:7d:3d:72:61:27:
e6:ca:1f:c9:04:d0:77:c0:25:59:eb:49:be:6c:a7:2a:a3:10:
ac:89:09:04:89:72:f8:6d:2c:3e:bf:c7:11:2b:a4:13:92:05:
da:84:e3:a7:a9:d9:0f:4f:2b:e8:44:84:3d:c3:6b:a8:53:78:
b6:fc:72:b5:10:7b:85:b1:53:2a:00:99:87:ef:eb:30:0e:3b:
c5:7d:01:6d:8d:ed:d6:31:ea:ec:02:25:a3:c4:40:2f:1f:a5:
30:d7:f5:9d:9f:99:74:d0:8d:b4:1f:03:23:31:ab:1c:9d:db:
f6:d4:59:5d:96:07:a9:a6:d8:98:aa:a8:a9:77:62:78:af:d7:
7b:13:9b:80:a0:07:80:2b:e0:33:b4:9a:8d:c7:69:bd:41:42:
bd:de:6b:29:e8:11:ad:67:e6:e8:81:4a:99:e9:ae:a8:08:5e:
b7:04:d3:56:93:94:5d:7f:31:30:98:50:4c:17:fc:08:28:4e:
19:2c:aa:8a:56:ff:1e:f8:1c:2f:a4:c7:4c:e4:88:5f:e6:ab:
46:e2:34:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 17:14:09 2024 by rpki-client on console-ams.rpki-client.org