Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/GfaZM4VZdLn7j-Z-QLVg_za6S0I.roa
File: GfaZM4VZdLn7j-Z-QLVg_za6S0I.roa (raw, json)
Hash identifier: BT7LczKz/7Bk/dPvbkOx6lykJOOOs6v8vQStc9LzzKI=
Subject key identifier: 19:F6:99:33:85:59:74:B9:FB:8F:E6:7E:40:B5:60:FF:36:BA:4B:42
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 01856C53CD6C806BA0059EF153F172731A0C
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/GfaZM4VZdLn7j-Z-QLVg_za6S0I.roa
Signing time: Sun 01 Jan 2023 07:55:09 +0000
ROA not before: Sun 01 Jan 2023 07:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.217.162.0/24 maxlen: 24
91.217.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:cd:6c:80:6b:a0:05:9e:f1:53:f1:72:73:1a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 07:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19f69933855974b9fb8fe67e40b560ff36ba4b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:a3:84:cd:e3:b2:ac:db:5c:71:64:2d:24:
89:de:69:ac:46:13:03:d0:aa:d2:4d:e0:00:5b:f3:
8c:34:67:13:c9:8a:89:4e:f7:21:95:a9:c0:e8:c9:
37:09:5e:cd:b3:9f:62:50:1c:05:23:ad:41:d6:d8:
10:fc:c7:ad:c5:2d:ff:f6:ec:3d:73:20:1a:44:aa:
b3:6e:e1:02:72:a6:15:0a:b5:f8:80:d6:18:ed:70:
0f:c3:96:f8:a6:bf:00:53:fb:71:da:80:c3:47:05:
e7:94:33:8d:79:44:14:58:19:d3:d6:14:32:c3:4e:
a0:c8:6c:c1:9c:f0:9d:0e:02:aa:ba:da:72:65:65:
67:f9:99:92:08:60:8f:a7:fe:9b:3d:40:d2:3e:38:
d3:1b:ec:38:ba:49:1d:35:a2:f6:b9:e5:03:d5:0d:
ea:b9:2e:6e:f5:e0:15:38:5c:39:0b:9f:81:fa:3f:
c1:1c:37:de:93:5f:76:6b:b6:53:53:3a:89:65:29:
db:a5:a7:dd:72:e6:89:85:c3:78:5c:2a:01:93:e5:
34:00:e6:8e:70:07:4b:75:37:4d:89:38:de:ad:af:
f3:b0:42:a9:24:0c:ac:96:a6:24:72:ba:35:45:2c:
47:b0:c6:2c:03:87:21:96:4e:e1:ce:45:06:f4:75:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F6:99:33:85:59:74:B9:FB:8F:E6:7E:40:B5:60:FF:36:BA:4B:42
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/GfaZM4VZdLn7j-Z-QLVg_za6S0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.162.0/24
91.217.167.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0f:59:1f:b1:e1:13:95:6e:74:38:ed:66:e2:26:73:ef:d0:
d0:c4:ea:8a:6f:4b:e1:c0:64:a3:98:7d:08:6e:16:42:6b:9c:
4f:6e:2b:3c:3e:9f:a7:d7:2d:b1:89:5d:f6:5d:f5:e0:2d:d4:
35:14:39:1f:2c:26:1c:f5:6c:5f:ee:66:17:79:75:b5:89:62:
2d:1d:97:b6:96:3b:aa:c9:0d:2b:3a:b7:f5:98:73:45:df:25:
e0:a1:a9:f4:b5:93:95:49:91:a5:2e:27:00:96:b8:28:36:5a:
43:53:e7:f1:15:91:04:6c:b5:aa:b6:72:61:50:52:7c:63:19:
cc:15:1e:0f:a4:ed:2a:af:68:fd:1f:03:43:0a:2b:c6:e9:af:
1b:fa:34:dd:c1:31:96:70:06:ba:bb:3f:0f:4c:18:d5:48:5a:
4f:4f:46:88:63:06:b4:8f:95:b4:51:bd:2e:85:8c:40:0b:24:
ab:33:04:55:f2:6a:77:4d:80:0b:f1:04:bf:25:ac:5c:80:b0:
41:31:b6:bd:18:cb:4a:89:36:d2:6e:fd:1e:35:dc:a9:c7:1b:
32:1e:2b:09:63:c6:9a:61:bb:61:ca:d6:f7:94:2f:e0:13:1f:
17:3f:d1:6f:00:a9:da:a0:c3:54:ba:be:92:55:c8:56:b6:4c:
8a:e9:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:31 2023 by rpki-client on console-fra.rpki-client.org