Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/GrC4n6iIQiES5NTE1YNTNwVVOH8.roa
File: GrC4n6iIQiES5NTE1YNTNwVVOH8.roa (raw, json)
Hash identifier: 835nEdSxNhL0n71bhhDe+oU45rdPVuafVY+Fb4M/qys=
Subject key identifier: 1A:B0:B8:9F:A8:88:42:21:12:E4:D4:C4:D5:83:53:37:05:55:38:7F
Certificate issuer: /CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Certificate serial: 01856F4B491C3CEA1F240019CF66FEC21443
Authority key identifier: 57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/GrC4n6iIQiES5NTE1YNTNwVVOH8.roa
Signing time: Sun 01 Jan 2023 21:44:42 +0000
ROA not before: Sun 01 Jan 2023 21:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207996
IP address blocks: 185.155.29.0/24 maxlen: 24
185.155.30.0/24 maxlen: 24
185.155.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:49:1c:3c:ea:1f:24:00:19:cf:66:fe:c2:14:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Validity
Not Before: Jan 1 21:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ab0b89fa888422112e4d4c4d58353370555387f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:3f:8f:f4:dc:fc:44:fa:45:18:78:b2:d1:
a0:c9:10:fd:fc:6b:74:94:a9:cf:1f:66:05:16:e6:
38:7d:2f:2c:a0:87:06:97:6f:78:4f:45:60:96:54:
bc:b5:8e:56:7f:15:37:a8:e3:bb:e5:f0:54:b9:fe:
b2:48:23:08:ce:2f:fc:3f:96:ba:da:7e:fe:a6:a0:
17:a1:aa:33:44:12:ec:e0:a9:30:2c:26:32:ed:03:
9e:72:d1:1c:90:be:e0:82:bd:8e:d5:af:6d:70:2f:
2a:69:db:ba:9a:64:25:8d:88:79:ab:76:68:63:8b:
7e:13:f3:73:b1:0d:ac:37:55:69:2f:9e:60:0d:fd:
59:2c:70:1b:7f:24:57:be:2d:0b:74:11:cc:9e:3e:
b1:6f:fa:1b:52:9a:29:03:31:c7:90:0e:d9:02:38:
48:27:dd:fb:94:d7:d7:07:96:c7:c3:8b:43:ae:e6:
b1:a5:97:fd:2a:bf:1e:a6:3b:cc:b9:f9:ff:e2:32:
f4:67:56:dc:ea:30:5d:3d:0f:f7:fa:37:a2:81:3f:
11:cf:ef:44:3f:00:38:8e:ea:13:7a:42:f7:72:3d:
44:8e:b7:72:20:76:10:4a:08:5a:2e:9a:6b:da:25:
80:40:4e:34:92:bc:a9:82:c4:a7:02:ac:0b:db:20:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B0:B8:9F:A8:88:42:21:12:E4:D4:C4:D5:83:53:37:05:55:38:7F
X509v3 Authority Key Identifier:
keyid:57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/GrC4n6iIQiES5NTE1YNTNwVVOH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.29.0-185.155.31.255
Signature Algorithm: sha256WithRSAEncryption
3b:f1:94:d2:e9:20:29:1f:3a:a4:3e:b6:17:16:44:9e:84:41:
6e:6c:e0:79:96:8f:dd:69:55:f4:c4:f3:24:52:05:13:16:68:
8f:8e:52:23:51:7d:f4:88:b6:e7:17:e7:9c:3a:71:29:6d:89:
c2:d0:c2:03:f7:1c:36:32:3c:6d:60:35:19:f5:e2:ee:f0:eb:
cd:36:07:7a:a8:f7:25:da:43:81:19:46:1f:d3:ec:7d:de:f6:
f1:9e:da:4c:a1:e7:1b:0b:3f:c6:6c:49:71:cc:25:37:55:03:
81:28:d3:36:2c:d4:e9:aa:8d:96:75:2d:a8:9c:1c:d5:79:c6:
e7:ba:e2:74:7c:62:2e:09:c8:fa:6f:94:49:dc:15:88:0a:26:
e7:2e:fe:57:bc:00:a3:cf:ba:c7:c5:6c:81:69:1c:af:92:ec:
da:fa:a4:d1:a2:26:bd:47:c6:62:33:aa:d6:51:a9:fd:20:ca:
76:ed:c6:92:b9:00:58:8a:a3:8d:06:6a:8f:f2:a9:85:28:ca:
5e:98:55:ff:63:01:83:5b:57:47:db:04:86:14:0d:88:de:e7:
06:1c:d5:a4:09:9d:56:c2:4f:93:1b:02:10:c2:0f:06:69:c6:
6c:05:30:0d:cf:69:18:b0:08:ed:6f:d0:a8:bf:d4:88:ef:b8:
be:ec:06:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:18 2023 by rpki-client on console-ams.rpki-client.org