Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/Gqybv2yklt-fA0jjnl0t-SHnzRQ.roa
File: Gqybv2yklt-fA0jjnl0t-SHnzRQ.roa (raw, json)
Hash identifier: kHTsRkA6WkbnOMLsnc0Sz+izMzd6feh7+61NpeJdpko=
Subject key identifier: 1A:AC:9B:BF:6C:A4:96:DF:9F:03:48:E3:9E:5D:2D:F9:21:E7:CD:14
Certificate issuer: /CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
Certificate serial: 018570950AA5F9B1A58768ADF1364942C015
Authority key identifier: A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/Gqybv2yklt-fA0jjnl0t-SHnzRQ.roa
Signing time: Mon 02 Jan 2023 03:44:53 +0000
ROA not before: Mon 02 Jan 2023 03:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31164
IP address blocks: 193.25.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:0a:a5:f9:b1:a5:87:68:ad:f1:36:49:42:c0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
Validity
Not Before: Jan 2 03:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aac9bbf6ca496df9f0348e39e5d2df921e7cd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:60:ae:f5:be:2e:ab:a2:de:30:4f:79:b4:
0c:dc:97:f6:79:a8:b7:68:f6:c4:44:0b:86:19:1e:
dd:4f:c1:60:5b:3c:cb:56:bc:6d:81:8e:b8:98:1f:
35:05:38:db:aa:a4:07:f3:c6:82:1d:04:04:97:6a:
2f:42:c5:2b:dd:5e:c7:e6:e2:21:ce:bb:85:c1:43:
ff:e2:3d:56:17:9a:26:70:2e:47:c4:3f:2b:3b:cf:
2b:44:1d:00:e3:a7:96:49:31:33:3d:3c:1d:f6:06:
eb:19:68:e5:6f:8f:58:bb:43:bd:23:3f:d0:67:d2:
d6:5e:41:58:49:e9:ba:a8:8f:ed:42:b7:98:7d:f1:
71:c0:8a:da:09:96:1d:0a:14:90:d9:5a:2c:89:a6:
2c:c6:de:6e:4a:25:4f:0e:f7:db:ad:ba:d4:13:89:
49:b6:a5:09:fe:c9:72:c0:1a:19:5f:ca:b3:9b:58:
b2:4b:fd:cc:ab:91:d5:fe:c8:4a:0f:f8:00:45:10:
41:2a:2a:12:c7:79:56:06:95:ee:e0:51:4e:d9:e9:
90:f0:6d:f0:de:33:2d:dd:d7:08:a1:c9:40:56:aa:
13:2a:c0:b6:ac:cb:18:6c:19:05:08:56:06:a2:1b:
b6:01:d0:9c:41:83:e5:e3:e0:9d:12:d3:9e:0e:35:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AC:9B:BF:6C:A4:96:DF:9F:03:48:E3:9E:5D:2D:F9:21:E7:CD:14
X509v3 Authority Key Identifier:
keyid:A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/Gqybv2yklt-fA0jjnl0t-SHnzRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.192.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:40:45:1a:58:1f:53:39:32:b8:3f:10:4f:76:fa:cc:3c:78:
93:0b:88:71:36:5f:ba:6e:b6:28:e6:08:ce:f3:4f:e9:99:ba:
6e:1c:09:6a:a4:f1:f9:d8:86:6c:59:2c:10:fd:ae:d5:bf:e2:
67:f4:50:26:15:9f:88:ee:8b:56:0e:b6:96:6d:82:c8:0d:4d:
ea:75:f7:b4:a6:66:69:ae:6a:69:4a:b5:e2:d4:02:0c:0e:4f:
27:35:29:cf:99:36:3b:25:b0:e6:c9:2b:79:ca:a6:19:bf:82:
02:31:ae:5a:43:6e:ca:6f:92:27:23:e1:a4:63:c4:6d:f3:c2:
03:ae:1c:f4:55:5e:06:3f:c1:04:8c:9f:74:4d:c5:f7:7d:72:
60:69:e0:c2:2b:c1:7b:10:7b:53:c3:79:19:3c:fb:54:a9:09:
82:d2:fd:b8:a8:e8:32:12:70:28:e2:2c:d8:43:dc:90:52:11:
1f:0f:38:8e:6b:57:5c:3d:ae:09:91:48:c3:2e:98:d2:5c:ed:
35:58:35:38:c3:c7:3c:cf:2e:25:4b:62:d0:52:b6:78:a3:cd:
6c:57:b0:97:d3:e6:1b:d6:48:90:53:2f:15:02:96:f9:c6:a0:
10:c8:30:dc:9e:57:f0:36:95:c9:b6:57:21:0b:8f:83:c6:a7:
8f:c2:77:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:13 2024 by rpki-client on console-fra.rpki-client.org