Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/gGj7MCNhypJsjqPrMvKL0gjSe3A.roa
File: gGj7MCNhypJsjqPrMvKL0gjSe3A.roa (raw, json)
Hash identifier: magA6nQc26sy1sTZibWZAViQ47eq2k/zV0o37K4u80I=
Subject key identifier: 80:68:FB:30:23:61:CA:92:6C:8E:A3:EB:32:F2:8B:D2:08:D2:7B:70
Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial: 018570797D405EFBAA0A8C1CE4A4FEEFAA2C
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/gGj7MCNhypJsjqPrMvKL0gjSe3A.roa
Signing time: Mon 02 Jan 2023 03:14:48 +0000
ROA not before: Mon 02 Jan 2023 03:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197978
IP address blocks: 91.198.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:7d:40:5e:fb:aa:0a:8c:1c:e4:a4:fe:ef:aa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Validity
Not Before: Jan 2 03:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8068fb302361ca926c8ea3eb32f28bd208d27b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:e1:ec:11:88:8c:1f:ae:7a:b2:95:f9:8e:
e7:de:a3:9c:a9:c9:d3:e0:9c:68:1a:94:4a:42:ab:
d8:af:0b:d5:02:e5:0f:19:ee:0f:69:df:42:f2:5c:
cd:4c:5c:63:98:5e:29:09:01:f6:ba:99:18:ba:04:
80:7f:ae:7a:88:ef:69:df:d5:99:09:36:6b:83:8b:
2c:dc:ee:57:41:82:b0:32:88:60:5f:b4:f6:c9:16:
35:e4:7c:4e:22:c2:9b:8a:37:ba:97:cd:a6:c0:42:
73:3f:21:19:4e:51:b7:36:dc:13:99:bd:11:36:c0:
c0:63:f4:b6:c8:16:02:84:0b:a3:d6:03:ea:9b:1a:
19:49:a9:81:13:45:25:53:67:db:70:8b:78:72:32:
6a:bc:19:ce:8f:15:24:2d:50:67:bb:88:c0:36:93:
24:e0:f4:18:45:21:4d:29:ec:85:e6:32:3f:3c:21:
a9:a9:ae:66:64:36:39:ca:7f:49:6a:c5:c8:59:06:
13:4e:1c:48:fd:a5:f3:61:31:9c:19:09:dc:6b:a5:
fd:12:cf:70:31:76:ec:ad:92:28:e9:38:b5:50:fa:
81:ba:fb:18:f7:1e:d6:cb:0d:76:5c:c2:0a:fd:51:
7c:b5:59:ae:64:e3:60:34:79:0e:70:a0:65:35:6a:
fe:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:68:FB:30:23:61:CA:92:6C:8E:A3:EB:32:F2:8B:D2:08:D2:7B:70
X509v3 Authority Key Identifier:
keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/gGj7MCNhypJsjqPrMvKL0gjSe3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.247.0/24
Signature Algorithm: sha256WithRSAEncryption
da:cf:0f:49:e5:40:ac:29:04:99:d7:61:3f:29:9d:06:99:5b:
38:56:af:89:13:3a:37:25:16:6d:c8:45:de:46:cc:62:2c:02:
12:12:53:f7:3f:3d:94:53:2e:94:03:69:66:13:40:74:66:f0:
ac:d8:b9:21:36:b2:3e:37:e7:5f:94:bd:fa:53:e7:59:1f:03:
31:76:1c:a1:98:1a:e9:4f:95:87:e9:e3:b7:fa:82:7d:6f:31:
48:f5:cd:fe:b9:23:7d:84:c9:ac:f5:b4:12:8a:60:84:fa:41:
a3:33:b5:96:72:9a:50:c8:2f:e2:f3:ac:90:c7:44:b5:31:31:
03:b7:c0:89:bf:d1:57:32:ee:c8:43:da:70:6a:e5:7b:f5:28:
3c:b4:aa:6d:6a:db:61:07:0a:f7:fa:ec:7b:fb:99:31:48:4d:
82:25:4a:e0:81:71:e1:a8:e7:5f:af:ed:3d:2e:19:cf:89:cc:
0e:c1:df:73:2a:b0:4b:50:d7:ac:50:96:31:3a:73:ca:89:2b:
0b:e4:ae:cd:13:70:1a:3c:36:0a:f5:05:0c:1e:c5:f1:2b:1c:
72:ae:05:07:d4:c5:88:d3:18:e1:cb:1b:12:ec:d2:3a:02:8d:
1c:88:29:eb:b7:d8:4e:f8:3f:b3:29:d1:07:ad:5c:41:21:ed:
4a:ae:ea:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:16 2024 by rpki-client on console-fra.rpki-client.org