Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/GlEWOdkiGRbcvhoBGMsXG_aGyHA.roa
File: GlEWOdkiGRbcvhoBGMsXG_aGyHA.roa (raw, json)
Hash identifier: FZZaOfnhmbg8sFRBF2oabKIwcH5Hev7CHcFQ7v8XoSY=
Subject key identifier: 1A:51:16:39:D9:22:19:16:DC:BE:1A:01:18:CB:17:1B:F6:86:C8:70
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 01856C6EF591F9A062B1B482E6BF6739024C
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/GlEWOdkiGRbcvhoBGMsXG_aGyHA.roa
Signing time: Sun 01 Jan 2023 08:24:49 +0000
ROA not before: Sun 01 Jan 2023 08:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12301
IP address blocks: 193.194.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:f5:91:f9:a0:62:b1:b4:82:e6:bf:67:39:02:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Jan 1 08:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a511639d9221916dcbe1a0118cb171bf686c870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:24:74:88:f5:f4:a9:02:c5:26:d0:a2:6a:6d:
f9:8c:f6:81:e5:f4:d9:16:8a:cc:fc:17:18:ea:b8:
ea:62:8c:e7:dc:0d:8c:02:10:54:b5:b0:23:c5:be:
43:3c:08:e3:2c:27:e5:84:bd:73:88:8c:1d:f9:01:
0e:a9:19:02:37:1d:24:ba:99:b9:46:94:7b:54:73:
3e:20:40:43:c1:ff:a8:0b:a7:cf:43:5b:c9:e7:03:
54:dc:ce:54:00:9b:36:3d:5e:5d:27:a2:17:61:e9:
70:53:7a:0e:82:d8:ef:9c:de:f8:12:31:01:6a:14:
ba:32:88:c3:1c:e1:dd:55:cb:fc:38:98:f9:cc:16:
b0:e3:9d:1d:0e:28:c7:f2:fc:9f:28:62:2c:68:f7:
e0:3d:23:97:6c:88:81:9b:41:f6:4b:63:30:bc:24:
34:d9:8d:90:36:cd:1d:ba:4d:07:87:53:9e:1f:38:
b0:e7:23:60:56:6b:b1:7c:66:5c:3c:98:32:b1:33:
11:0e:41:74:1d:7e:e2:49:40:2b:cd:bd:5d:ac:34:
7e:aa:40:37:a1:22:f5:bb:b0:2e:30:69:f5:05:d9:
2e:09:35:8b:57:7c:2f:3e:5c:ad:32:16:d4:9d:90:
f5:11:ef:4f:0a:7e:75:98:9e:9e:7d:be:32:65:f8:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:51:16:39:D9:22:19:16:DC:BE:1A:01:18:CB:17:1B:F6:86:C8:70
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/GlEWOdkiGRbcvhoBGMsXG_aGyHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.159.0/24
Signature Algorithm: sha256WithRSAEncryption
77:85:c3:ec:b0:9c:ad:4c:c5:4f:52:21:b3:b9:43:ea:9d:54:
6d:40:53:4e:3e:c1:cd:9f:26:76:fa:35:8b:4d:a0:0a:ea:c2:
a6:a2:fd:e5:fe:48:4d:bf:56:e6:48:35:7a:d7:ff:af:8a:04:
c4:d3:61:ac:61:1a:b2:bf:48:7a:5c:5b:88:15:ce:99:06:80:
28:a3:5d:8a:20:08:33:9b:94:9e:48:75:ad:ba:7a:52:e9:4f:
0c:bc:bf:45:1e:37:7f:35:28:c3:35:04:45:de:b8:1e:6f:85:
6c:05:53:e8:5c:5d:ae:13:5d:6c:be:84:e5:7f:b9:ba:e5:74:
fb:56:2f:11:eb:f4:49:0f:2b:c8:83:15:8f:4a:51:1c:dc:d8:
5c:74:d6:21:ec:74:5b:41:6b:80:cd:07:c6:6e:c5:ff:3d:ef:
e5:f9:9e:e4:0a:a1:d9:74:71:67:a7:5b:92:78:2a:98:c6:83:
88:2d:e6:d3:2b:62:57:b9:b2:b1:cd:1d:1a:33:20:20:1e:ef:
7f:91:c9:ae:00:28:ab:02:2b:64:49:20:b7:6a:16:18:ea:5a:
48:4d:fd:ac:d7:df:f5:e9:f8:b8:f6:16:0a:a2:72:88:82:62:
0a:2a:c0:cd:05:8a:96:01:fe:78:b7:9f:86:3d:a9:ce:9f:20:
b7:e9:28:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:36 2024 by rpki-client on console-ams.rpki-client.org