Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/GKwOX8iN7_-DF75fllqbSY63cRg.roa
File: GKwOX8iN7_-DF75fllqbSY63cRg.roa (raw, json)
Hash identifier: 4JbDvORLR0UcxD1eaqn2Wj5xNreNZEFJRotWBcfaeMk=
Subject key identifier: 18:AC:0E:5F:C8:8D:EF:FF:83:17:BE:5F:96:5A:9B:49:8E:B7:71:18
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F022F1D238CFD42C8A13A77F3C96982
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/GKwOX8iN7_-DF75fllqbSY63cRg.roa
Signing time: Sun 01 Jan 2023 20:24:52 +0000
ROA not before: Sun 01 Jan 2023 20:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 159.148.224.0/23 maxlen: 23
85.254.64.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:2f:1d:23:8c:fd:42:c8:a1:3a:77:f3:c9:69:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18ac0e5fc88defff8317be5f965a9b498eb77118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:14:d0:d8:a8:cb:6e:ad:34:39:a5:5e:5d:d6:
ba:06:e2:d4:75:08:91:0b:72:09:20:fd:34:38:5a:
8c:4f:c5:c1:ab:52:23:13:db:7c:71:e6:8b:e0:f6:
5b:bd:39:28:f3:b7:c7:0a:03:44:9b:72:eb:70:48:
5a:ca:e8:25:bd:58:5f:05:b6:67:5d:d9:af:8b:83:
0a:ce:c4:4d:84:c0:2a:b0:a2:90:53:02:f3:85:a1:
0d:9b:e1:a9:ca:5e:13:7c:82:e9:12:72:b0:e7:8c:
52:f3:21:1f:45:69:4b:6a:4e:81:e6:e7:a4:b0:48:
c8:6d:9a:6f:61:2a:7e:06:ed:31:7a:c5:b0:db:a8:
73:a5:4e:35:88:32:60:ff:d4:15:d8:b2:69:cd:a7:
5c:a3:a0:c0:e1:52:cf:12:dd:70:b1:19:a5:56:f7:
eb:49:fd:27:36:21:c1:f3:ae:16:2b:63:ca:f4:d6:
2b:55:68:41:8d:73:11:cd:a1:e7:36:7e:d8:55:6b:
2d:83:94:dc:51:c6:90:bc:42:a8:d2:b6:2a:96:0a:
0f:02:a4:06:19:0b:6f:0a:38:26:44:92:81:ea:2e:
83:44:b3:3f:8c:62:51:ff:c6:fd:6b:01:15:e8:cc:
fa:64:04:db:67:53:1c:2e:fd:b1:b5:e7:43:de:2e:
66:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AC:0E:5F:C8:8D:EF:FF:83:17:BE:5F:96:5A:9B:49:8E:B7:71:18
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/GKwOX8iN7_-DF75fllqbSY63cRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.64.0/23
159.148.224.0/23
Signature Algorithm: sha256WithRSAEncryption
35:78:da:37:6d:26:49:50:b6:ee:2e:ba:99:27:9f:03:72:13:
ea:56:a6:c1:e2:bc:bd:ba:be:32:65:07:c7:02:4f:df:ee:5c:
eb:35:40:4f:15:e9:65:89:78:ec:de:26:7d:34:e6:76:4e:2a:
5c:42:8c:c7:ac:4e:9a:79:93:7f:66:02:98:50:10:a7:2c:ab:
e8:47:ad:20:48:d9:ed:2f:b8:0e:85:0d:48:27:e5:80:c7:d7:
0a:c4:e3:78:12:2a:a1:2e:f2:d9:ee:f7:d9:09:f2:ec:7f:58:
be:56:93:b4:47:c8:5d:77:b4:62:b0:6c:76:73:19:07:79:79:
44:6e:95:7b:2c:94:23:1e:e1:61:28:89:5b:75:ae:34:5e:85:
c7:46:ef:0d:4f:56:33:c2:f9:3f:d9:36:63:2a:73:a5:92:d3:
f8:dd:e0:4d:10:7c:11:9f:7e:5b:c8:cf:fa:fe:11:f8:29:04:
21:af:31:43:23:94:dc:54:9d:66:a1:8d:24:ea:f9:50:7e:1f:
08:9c:03:e7:cc:d0:6f:c7:d6:0b:f8:49:3b:de:98:a4:3e:31:
81:42:70:9b:47:05:4c:27:45:51:2d:c0:87:da:d0:fc:0e:ff:
9e:01:0f:26:44:da:ee:dc:d1:96:30:e4:12:bd:7c:bd:6d:5f:
59:ba:e8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 11:33:07 2023 by rpki-client on console-fra.rpki-client.org