Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/GFFPcmxaDc5sV1UQj0ybwYkN-VY.roa
File: GFFPcmxaDc5sV1UQj0ybwYkN-VY.roa (raw, json)
Hash identifier: v/0ZA2vmmVqCfB5J8smtooyxNtYezKN/vvKfkOltWi8=
Subject key identifier: 18:51:4F:72:6C:5A:0D:CE:6C:57:55:10:8F:4C:9B:C1:89:0D:F9:56
Certificate issuer: /CN=fb43195dcec60f59c2f89c8af902025d173bba6a
Certificate serial: 01856E0AD7381565DAE0534CA28AA38D7FD2
Authority key identifier: FB:43:19:5D:CE:C6:0F:59:C2:F8:9C:8A:F9:02:02:5D:17:3B:BA:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0MZXc7GD1nC-JyK-QICXRc7umo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/GFFPcmxaDc5sV1UQj0ybwYkN-VY.roa
Signing time: Sun 01 Jan 2023 15:54:42 +0000
ROA not before: Sun 01 Jan 2023 15:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 62.68.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:d7:38:15:65:da:e0:53:4c:a2:8a:a3:8d:7f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb43195dcec60f59c2f89c8af902025d173bba6a
Validity
Not Before: Jan 1 15:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18514f726c5a0dce6c5755108f4c9bc1890df956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:52:9e:b4:32:0d:2e:82:66:45:3c:0f:a9:f0:
8d:bc:f3:06:56:f8:61:96:20:04:f4:86:8d:2d:d5:
f3:0a:f2:a9:90:36:85:29:89:5b:d1:1e:28:07:3d:
46:8f:09:4b:9d:ac:2f:71:75:8d:1b:00:37:4c:18:
67:3b:72:02:91:5a:26:e5:61:44:b9:b6:6c:68:37:
82:d5:d9:72:36:19:25:da:db:87:e8:07:f5:f7:21:
66:7b:40:c4:e3:31:83:fe:91:97:d7:5a:91:25:d1:
07:e1:2a:84:bc:5a:4d:5a:90:c5:30:3b:f3:21:02:
34:4c:c5:84:3b:36:16:59:40:0a:5c:7f:89:61:0e:
09:d0:59:92:7b:29:b2:4c:2b:1f:37:87:5a:38:86:
69:f1:32:03:6a:8b:40:46:98:e4:2d:5d:30:3b:aa:
e9:ed:36:49:66:ca:d2:46:00:b5:2d:e8:3e:41:5c:
0b:4a:04:96:77:2f:e7:9a:42:7b:79:c6:69:63:32:
eb:8d:5b:4c:7b:c3:ba:9b:31:fe:5a:88:0b:57:e3:
96:b3:3e:89:80:bb:7d:ad:60:fe:7f:cb:5a:43:9a:
2c:43:17:fd:69:0c:92:38:c7:8e:49:94:46:66:6a:
80:5e:c0:dc:30:1c:ef:27:3d:4f:b9:3a:94:87:ef:
e1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:51:4F:72:6C:5A:0D:CE:6C:57:55:10:8F:4C:9B:C1:89:0D:F9:56
X509v3 Authority Key Identifier:
keyid:FB:43:19:5D:CE:C6:0F:59:C2:F8:9C:8A:F9:02:02:5D:17:3B:BA:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0MZXc7GD1nC-JyK-QICXRc7umo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/GFFPcmxaDc5sV1UQj0ybwYkN-VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/1-0MZXc7GD1nC-JyK-QICXRc7umo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.80.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:72:96:49:4c:cf:82:2a:a6:8c:e9:93:26:1f:22:d7:53:5d:
02:f2:b5:84:4e:48:d1:99:3c:c8:06:76:39:74:09:8a:ea:b8:
15:a0:4f:dc:14:d1:bc:c0:d1:67:47:04:16:c2:81:9f:29:ac:
da:7b:89:20:b6:d1:4b:83:0d:28:c2:66:39:43:e0:31:e2:7a:
3a:fe:ef:fb:56:19:c7:d9:aa:4b:24:b9:68:6d:ba:eb:cf:44:
78:a8:4d:5c:de:f8:93:fc:5f:83:3d:27:11:59:cb:44:54:11:
7e:28:36:d9:b6:ce:35:75:da:74:ea:06:af:9d:6c:48:5f:06:
6b:ce:0e:18:61:6b:c8:74:c2:5b:49:83:37:a9:3e:45:1b:77:
cd:86:8d:62:eb:fe:d0:3f:aa:14:88:0d:99:46:3c:c4:6b:2f:
a3:ed:d5:6b:12:62:a9:16:85:fe:c4:f7:97:d2:f3:54:0c:69:
ba:7e:d1:b6:d2:f3:6f:d1:a4:50:54:34:8d:da:39:a5:cb:a5:
2c:ef:be:0c:c6:e0:ed:be:e9:fa:e3:24:15:0f:92:8f:9d:4d:
73:82:45:48:ee:eb:1d:a4:dd:27:f2:48:f5:1f:96:d7:bb:e9:
8c:e2:e2:cb:5b:f1:dc:83:c9:2f:e4:07:18:c1:96:a1:f3:9a:
59:e8:98:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:57 2024 by rpki-client on console-fra.rpki-client.org