Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/Gnt_JCtXJODVBz4AqCLgxQnvLjY.roa
File: Gnt_JCtXJODVBz4AqCLgxQnvLjY.roa (raw, json)
Hash identifier: uE0NczWRomTnojZUvx2kZemd7rfUQJks7o3y0gtSv7Q=
Subject key identifier: 1A:7B:7F:24:2B:57:24:E0:D5:07:3E:00:A8:22:E0:C5:09:EF:2E:36
Certificate issuer: /CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Certificate serial: 01856B9C527A9D1706EC71FC703C07CCAA47
Authority key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/Gnt_JCtXJODVBz4AqCLgxQnvLjY.roa
Signing time: Sun 01 Jan 2023 04:34:44 +0000
ROA not before: Sun 01 Jan 2023 04:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8412
IP address blocks: 194.50.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:9c:52:7a:9d:17:06:ec:71:fc:70:3c:07:cc:aa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Validity
Not Before: Jan 1 04:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a7b7f242b5724e0d5073e00a822e0c509ef2e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8c:ff:82:40:48:a2:01:19:b1:48:92:6b:78:
70:1a:3e:97:9e:db:cb:7e:4a:19:d8:c4:4d:38:36:
d5:66:6a:f1:a4:8c:31:46:04:d2:d2:4b:29:36:e1:
4b:9c:98:a2:0c:49:54:53:74:6a:33:b2:06:98:d1:
d3:0d:31:77:82:5f:02:8d:25:e1:0b:bc:72:8c:d3:
65:06:c7:c4:f6:4f:2e:e7:06:58:04:95:30:9e:97:
73:3d:ec:37:51:77:92:f5:d3:52:cb:40:40:e2:c6:
c7:79:54:aa:2e:74:0e:b9:09:18:c9:9b:2f:61:99:
0f:3b:e5:12:7a:d3:de:84:94:d7:56:15:bb:4a:88:
ef:30:c5:60:2c:19:60:eb:23:cd:01:72:c2:f4:23:
3f:ba:18:ab:25:82:9a:ee:37:07:96:4d:5a:46:46:
c3:08:fd:3d:3e:ca:d9:ec:1a:97:4c:0a:b7:11:4e:
15:00:c7:28:a8:79:49:b1:61:36:09:5c:be:6a:51:
83:f2:e8:1f:a1:29:9f:6b:eb:0a:c6:a5:2b:0c:6c:
1b:ae:6d:9c:68:60:36:a7:6d:70:2c:46:7f:de:57:
17:a7:ac:eb:91:40:51:7f:8c:60:d8:8e:ef:e9:e1:
a3:d9:3c:75:6a:6a:85:55:33:2f:48:99:eb:ce:0b:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7B:7F:24:2B:57:24:E0:D5:07:3E:00:A8:22:E0:C5:09:EF:2E:36
X509v3 Authority Key Identifier:
keyid:F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/Gnt_JCtXJODVBz4AqCLgxQnvLjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.173.0/24
Signature Algorithm: sha256WithRSAEncryption
36:67:ac:64:3c:b5:31:93:41:16:de:13:e1:d1:29:25:16:e3:
d7:ed:6f:2b:e2:51:0b:c5:70:2c:ba:c8:bf:30:be:a3:b6:88:
db:3c:a7:da:83:e6:bb:02:5e:30:f4:7d:a9:f6:d4:eb:87:9b:
cb:02:df:ee:b7:bc:9f:15:d8:f6:ca:ee:74:50:3c:0a:e1:07:
fc:d4:ac:fc:15:aa:c2:cb:2e:70:be:2d:7c:52:63:b6:dd:41:
58:cd:33:86:38:91:5f:2a:e8:96:91:3b:03:69:f4:be:71:f8:
3a:7a:f3:f2:f1:68:9f:e6:b4:38:93:9a:d5:f4:a4:56:24:1a:
15:91:a5:ac:62:10:03:9d:38:b9:4f:39:88:8c:57:13:f4:71:
b9:5a:b3:79:52:6c:01:5d:68:9d:ed:28:61:53:a6:03:63:5e:
22:05:8b:05:62:f7:44:a9:e6:8e:86:a5:89:0c:aa:28:c3:6e:
ca:19:1b:42:23:f2:cc:cd:99:0d:80:c1:46:e3:d7:b4:30:f1:
ff:f1:bd:c5:3a:a2:9a:fd:93:14:8f:bb:19:b4:75:d7:12:30:
00:96:66:cc:c1:bd:11:90:25:e4:77:d3:e6:f7:92:7a:a5:5c:
ef:8e:d6:53:77:e7:f8:7b:b7:34:93:ad:9c:e0:98:04:7a:fc:
65:c1:72:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:19 2024 by rpki-client on console-fra.rpki-client.org