Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GujtKFj06HLd9EArqcKn3APii-I.roa
File: GujtKFj06HLd9EArqcKn3APii-I.roa (raw, json)
Hash identifier: Ee7wFvF4b2VN8UxI3hkBNNHVa8iNIJQ0PswJiX7vpmw=
Subject key identifier: 1A:E8:ED:28:58:F4:E8:72:DD:F4:40:2B:A9:C2:A7:DC:03:E2:8B:E2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81F90AD58CD666726A8D7B38583D32
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GujtKFj06HLd9EArqcKn3APii-I.roa
Signing time: Sun 01 Jan 2023 13:25:12 +0000
ROA not before: Sun 01 Jan 2023 13:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 94.156.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:f9:0a:d5:8c:d6:66:72:6a:8d:7b:38:58:3d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ae8ed2858f4e872ddf4402ba9c2a7dc03e28be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3d:37:70:1f:a6:b2:da:91:8b:0b:1c:a4:99:
5d:06:86:9e:03:3b:f5:ec:68:f7:40:88:0f:45:1b:
df:0b:23:8a:69:fa:cb:75:d9:5b:d7:20:45:f9:bf:
85:a7:8f:ca:47:fc:93:d3:85:fa:97:a3:08:08:b1:
d1:6e:4b:bb:d0:95:13:66:7c:db:13:37:8a:2c:9d:
53:64:44:b7:95:be:75:38:34:0f:bc:96:dd:e3:d5:
78:b9:01:1a:b8:88:cb:79:00:f2:1d:9e:58:9f:46:
98:df:2e:9b:b9:e7:2a:65:75:3e:26:06:17:5e:6d:
23:c6:4c:15:e9:c8:3a:86:94:1d:9d:27:90:70:e0:
74:be:0b:41:c6:6c:5a:29:58:d2:ea:22:77:1d:af:
50:95:38:86:2c:d6:50:94:76:a6:d9:7f:a0:50:e2:
ba:53:2c:cb:cc:26:5c:e3:91:b2:cc:08:e5:22:f2:
3e:21:eb:5c:e3:05:ba:9b:a7:20:9a:0d:08:d2:36:
4d:8e:e8:00:af:b9:59:ab:61:84:4d:22:fa:b8:35:
4a:bb:de:0e:3d:32:f5:97:9d:a9:ea:6f:b4:26:a3:
e6:5d:da:d4:1c:7e:57:09:98:2f:52:f9:9a:bb:c6:
5d:7b:76:fe:63:8f:fc:dd:5b:03:80:f2:29:9e:6c:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E8:ED:28:58:F4:E8:72:DD:F4:40:2B:A9:C2:A7:DC:03:E2:8B:E2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GujtKFj06HLd9EArqcKn3APii-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:7e:8d:ab:45:72:27:bf:8e:81:7e:a1:b1:df:d7:6b:fd:74:
7a:84:96:8b:73:d8:28:8f:75:c3:2b:12:5e:9e:d3:f5:3e:f7:
ce:97:1c:e9:3f:ca:31:6f:fa:22:bc:63:d5:02:95:c0:cb:66:
3e:1e:e4:a4:47:72:fc:a8:15:1c:45:6b:01:4f:c9:8b:3c:e4:
19:43:71:b0:92:3e:1e:83:c4:db:b7:b3:e0:64:6c:21:92:f9:
7b:fb:47:95:41:f5:2d:d3:cf:61:82:bf:98:84:ae:6d:28:c7:
10:f6:f1:9d:47:80:58:8a:ed:97:42:3e:75:d5:5b:c4:18:22:
ef:49:2e:66:63:8e:01:22:46:6a:d0:f6:5c:87:0c:82:54:28:
71:4a:ed:1f:dc:d7:fe:37:47:f6:7f:1c:63:ad:d8:30:62:27:
31:23:ab:6f:a1:fb:cc:95:49:a9:c1:b2:3e:51:87:c7:83:96:
fb:78:b9:89:2a:7e:2b:ec:0b:11:45:a5:fc:84:0f:49:70:7b:
49:22:f2:50:2a:38:b7:fb:82:19:ce:dd:2e:7f:36:45:45:2e:
09:59:9e:f4:06:5c:3a:bf:ed:ee:86:f5:95:65:65:69:34:84:
94:bb:4c:be:a1:ea:4e:c0:d0:b4:b8:eb:84:a4:dc:58:5f:dd:
7d:64:d2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org