Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GrL1rhSs30etTDSw49q7f7cs7Iw.roa
File: GrL1rhSs30etTDSw49q7f7cs7Iw.roa (raw, json)
Hash identifier: +IJe2GTjBb2b/BiNSPM7J/++4ytt8fswYtAoKE/6Uso=
Subject key identifier: 1A:B2:F5:AE:14:AC:DF:47:AD:4C:34:B0:E3:DA:BB:7F:B7:2C:EC:8C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018907478F59DEF9C8F33F2922C742A7C09A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GrL1rhSs30etTDSw49q7f7cs7Iw.roa
Signing time: Thu 29 Jun 2023 13:11:17 +0000
ROA not before: Thu 29 Jun 2023 13:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208911
IP address blocks: 178.215.239.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:07:47:8f:59:de:f9:c8:f3:3f:29:22:c7:42:a7:c0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 29 13:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ab2f5ae14acdf47ad4c34b0e3dabb7fb72cec8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ba:9d:6b:64:be:c8:bb:05:66:71:73:8b:9c:
5f:84:48:8c:02:15:50:e2:9d:42:90:26:30:93:22:
bb:bc:5f:db:53:70:cb:aa:51:eb:c3:cb:22:01:9c:
55:52:01:f4:f8:81:73:da:ef:fb:69:8e:72:53:53:
2b:be:59:6d:88:b4:8c:19:62:22:48:22:38:4a:02:
82:a0:f7:f2:d4:bc:2f:9a:5c:5a:c6:dd:d0:63:2e:
49:3d:6e:15:fa:b4:a8:f6:2f:55:e8:3c:57:53:49:
a9:96:32:76:ca:ae:9d:33:48:d7:c2:99:4c:e6:b1:
6c:cc:1e:2a:31:3d:40:ef:de:e5:ea:7b:bc:64:59:
a5:a4:d1:c4:ca:ad:86:f1:d9:44:6f:6d:e3:03:7c:
81:b0:f0:c9:47:c3:74:a3:0f:f5:30:ed:c5:64:ad:
02:bb:a3:4a:60:6b:94:4a:dc:d1:cc:a2:c8:39:e8:
b9:83:38:01:fe:31:72:54:2e:ba:f0:71:56:b8:28:
2e:dc:5c:74:81:90:12:5c:e6:8f:06:29:5f:0a:78:
63:da:67:39:ef:98:a2:18:99:61:72:c9:e6:1a:9d:
b6:cb:06:fb:f1:79:62:f5:4f:d5:53:df:a7:87:dc:
62:95:d0:25:83:cf:11:c0:91:74:14:49:e0:3a:c5:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B2:F5:AE:14:AC:DF:47:AD:4C:34:B0:E3:DA:BB:7F:B7:2C:EC:8C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GrL1rhSs30etTDSw49q7f7cs7Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.78.0/24
178.215.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:66:ff:c3:2f:29:58:5b:e9:3b:93:83:bc:3f:49:76:b7:25:
72:b0:ac:bc:f3:fc:10:1b:9d:56:b0:7d:b4:3b:3b:11:02:fd:
8d:85:3a:45:22:00:ad:fe:57:b8:4b:ab:ef:b8:65:fa:f5:54:
0e:41:90:c6:b8:db:c4:10:a2:01:35:29:26:b7:0d:e2:87:6d:
1c:5d:ab:cf:57:23:7d:c7:7d:27:37:c4:01:07:8c:9e:67:9f:
6b:6c:3f:ef:cb:31:ae:fe:9b:5d:0e:ab:dd:08:13:1e:b3:f3:
53:77:af:42:d2:5a:b7:00:d5:5e:d6:fa:0c:d4:51:01:24:c8:
bc:62:1f:b6:35:c7:db:c8:20:0e:21:03:69:ec:e0:3a:d2:f9:
6d:bd:f1:1c:74:ca:8a:01:ae:2c:1b:2e:c1:91:97:eb:f2:1d:
0e:d6:e8:17:5d:82:14:93:81:bc:52:1b:1f:d7:c5:d9:dc:b3:
8e:a3:3c:b8:13:c4:eb:c0:cc:7a:a2:5c:c7:80:f8:f2:02:d6:
f8:7c:fd:53:4b:2a:e3:84:74:18:91:6b:1f:15:4d:c4:0e:de:
3d:80:76:fb:6e:f4:e1:53:46:ce:66:4d:9c:ef:18:3b:37:7c:
a4:67:4b:c4:cd:4d:65:4f:94:50:fe:6c:f3:50:a4:e8:d3:e0:
55:26:75:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org