Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GLxuiCE3lfa9dasE_k4hXgiiPPs.roa
File: GLxuiCE3lfa9dasE_k4hXgiiPPs.roa (raw, json)
Hash identifier: TSkSy/7YBwG/9SOLoyN2ulAbDVhc69APFoT2NV7PxNI=
Subject key identifier: 18:BC:6E:88:21:37:95:F6:BD:75:AB:04:FE:4E:21:5E:08:A2:3C:FB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81D3BDDCB4F12AB71A2289C7B69366
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GLxuiCE3lfa9dasE_k4hXgiiPPs.roa
Signing time: Sun 01 Jan 2023 13:25:02 +0000
ROA not before: Sun 01 Jan 2023 13:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8717
IP address blocks: 87.121.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:d3:bd:dc:b4:f1:2a:b7:1a:22:89:c7:b6:93:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18bc6e88213795f6bd75ab04fe4e215e08a23cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:e7:22:44:b4:03:1c:df:dc:f6:da:50:6d:
38:14:63:a3:cf:29:d1:8e:a7:02:18:92:b1:7a:cb:
63:87:ee:b7:40:e8:92:5f:c0:55:c7:e3:33:83:98:
27:78:ac:4c:c7:c8:47:f2:53:2d:bc:08:b2:1e:36:
97:56:d8:61:e7:b9:df:8b:93:d9:ae:89:e3:34:c6:
00:d0:c9:1d:7c:c6:b1:87:0a:62:f4:84:aa:57:50:
70:eb:db:6f:90:08:2a:ab:92:f5:46:a3:83:4a:df:
05:2b:3a:34:83:53:fd:49:aa:36:1f:d5:09:87:f1:
0a:b6:b6:ff:77:61:d6:06:43:a8:ba:bf:88:01:f2:
dd:8a:1e:5e:0d:4b:8e:d6:5a:56:de:de:8e:29:8d:
ec:6e:0d:a5:c9:f1:f6:36:4e:86:60:eb:59:e9:02:
e8:60:6b:01:c1:f1:a6:e6:84:f5:e9:19:40:69:bc:
9a:97:d5:55:22:2f:22:0b:77:a6:64:5c:6a:62:e1:
6d:55:1d:a3:a4:59:fe:7d:13:c5:72:dc:c5:92:16:
36:61:83:af:02:4b:c3:db:e3:f9:a1:08:dc:07:03:
dd:9f:c5:9c:c8:37:2b:8b:6a:2e:4d:08:64:67:dd:
6b:e4:bb:3d:e5:1c:1d:ac:e9:3e:c5:25:25:62:32:
7c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BC:6E:88:21:37:95:F6:BD:75:AB:04:FE:4E:21:5E:08:A2:3C:FB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GLxuiCE3lfa9dasE_k4hXgiiPPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.223.0/24
Signature Algorithm: sha256WithRSAEncryption
04:a3:1a:7a:ed:03:e5:7b:5e:51:05:00:45:e3:43:7d:19:f5:
cf:59:48:a7:6d:92:13:20:ee:7e:32:cb:cd:c1:28:25:72:30:
f0:be:7d:0f:6e:51:b4:20:e5:da:44:da:7b:5c:83:26:fe:20:
01:7a:ad:f4:b6:eb:43:6f:50:27:2e:be:48:9f:2d:52:d6:6d:
0d:ea:de:ed:2a:a7:07:04:f3:33:e6:ae:d3:51:01:bd:1c:50:
0e:9f:98:01:31:d3:f9:f5:53:c4:b0:4d:66:d8:cf:96:01:35:
2a:1e:d1:e1:99:b5:c3:ae:39:e2:bb:7b:64:a0:7f:bb:62:e7:
48:b3:f4:01:6d:ec:b4:c3:de:f7:de:e1:52:2e:41:2e:af:de:
c5:4d:5f:d0:0b:f4:29:c9:d6:21:13:ae:d8:e0:ff:7d:c0:80:
b2:bb:ea:f2:53:9f:bd:7e:d5:a0:f5:c2:f6:34:8a:bc:80:fb:
5c:95:f1:af:6c:9a:3b:39:02:59:b0:6f:37:61:27:39:9f:36:
6f:4f:6f:e9:87:52:e3:af:85:88:0f:00:74:60:e4:c6:6c:a3:
08:ed:f7:cf:ed:7c:67:ad:d7:e6:6b:aa:db:d6:04:59:4c:7d:
39:70:ba:1d:a7:ab:c4:65:90:58:64:07:03:d6:bf:2f:f5:fb:
bf:da:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:47 2024 by rpki-client on console-fra.rpki-client.org