Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/GoM4Y8PoJu7Wr0MUOyhkXTcRim0.roa
File: GoM4Y8PoJu7Wr0MUOyhkXTcRim0.roa (raw, json)
Hash identifier: S2RIV3GR7m5Yr8b+NXmpN/jDe/150E3FULSavBfjQNI=
Subject key identifier: 1A:83:38:63:C3:E8:26:EE:D6:AF:43:14:3B:28:64:5D:37:11:8A:6D
Certificate issuer: /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial: 01856D5D204CFD6C6CCF3E2E1C4DBB85DCBE
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/GoM4Y8PoJu7Wr0MUOyhkXTcRim0.roa
Signing time: Sun 01 Jan 2023 12:44:57 +0000
ROA not before: Sun 01 Jan 2023 12:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25075
IP address blocks: 193.201.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:20:4c:fd:6c:6c:cf:3e:2e:1c:4d:bb:85:dc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Validity
Not Before: Jan 1 12:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a833863c3e826eed6af43143b28645d37118a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a7:d5:94:05:57:b2:95:c0:ce:1b:56:9b:53:
ad:e9:78:df:c4:6b:11:f6:da:11:bc:26:eb:ac:7a:
53:2d:d4:f2:6d:90:36:d6:b5:c4:76:53:bd:e8:cf:
c6:65:56:39:4c:3b:b3:e6:8f:4f:01:32:cb:2d:85:
70:94:a7:55:1a:56:d9:ad:92:92:d6:ab:16:81:fe:
92:c2:fd:85:28:76:41:49:56:09:21:9f:63:ee:44:
02:07:b2:50:cb:d8:cb:3c:62:7e:e0:5c:5a:26:93:
8d:3d:4c:76:68:b7:84:fd:b4:25:4f:17:9a:db:6c:
17:34:7c:32:8f:70:5e:7b:e4:e7:c5:d5:67:e3:11:
7d:87:4c:37:49:c1:1a:df:ab:a5:25:04:84:aa:08:
69:96:f4:b3:31:c2:ab:85:5f:14:25:12:f9:ad:98:
71:21:56:53:9e:2d:97:20:9f:6f:48:83:61:2e:62:
4b:e5:d3:b6:e9:69:84:29:42:1e:87:25:3b:51:b4:
8a:ee:e4:39:6d:02:84:2a:61:af:61:ad:d3:34:a5:
09:45:32:5c:72:ca:0a:18:ef:49:b9:fb:7e:19:3f:
cb:aa:81:3f:50:fc:75:58:db:f0:0a:05:f7:6c:0b:
07:40:85:1d:9b:21:ec:6f:fd:4b:bb:19:7a:dc:d3:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:83:38:63:C3:E8:26:EE:D6:AF:43:14:3B:28:64:5D:37:11:8A:6D
X509v3 Authority Key Identifier:
keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/GoM4Y8PoJu7Wr0MUOyhkXTcRim0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.164.0/24
Signature Algorithm: sha256WithRSAEncryption
78:4a:18:cd:36:73:d9:3e:70:ac:09:e0:e3:bf:0b:12:60:3a:
f2:5b:f5:c1:c9:b1:f5:d6:79:07:d1:06:63:a1:dd:73:be:10:
99:b1:65:9f:6d:4d:51:ee:4e:89:13:5e:13:2d:38:44:43:c7:
c4:98:19:1f:67:55:19:2c:3f:3f:79:3a:c4:17:b2:c0:f9:20:
8c:69:d6:69:c5:9a:6d:b4:1c:4f:c5:29:da:6a:db:cc:95:3a:
0b:ad:88:1c:18:44:ac:04:21:7d:3e:d8:d2:61:e4:94:77:cd:
65:cc:b7:f2:d7:cd:f1:3a:89:0f:a9:7f:7c:06:d0:58:45:aa:
29:90:b3:e1:45:eb:80:c3:eb:57:2c:91:26:41:ed:83:a5:22:
d1:94:ba:87:60:ef:cd:6a:e3:09:63:c8:30:df:3d:d8:43:d4:
ca:af:ed:cd:53:9a:25:06:0f:e0:a1:4a:56:69:6e:13:09:3d:
6f:ba:a2:b1:85:b0:35:2a:86:f7:5f:c7:fe:00:a1:25:f7:54:
15:56:cd:e3:1d:ca:bc:30:78:dd:8d:62:0f:bf:3c:6d:9b:d9:
f8:6b:ba:50:bd:68:70:45:c5:38:fc:14:f9:a3:25:7f:ed:fe:
73:32:23:19:a7:c5:77:60:e2:be:c2:bd:3a:7a:26:d7:af:92:
1d:a0:b3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:54 2024 by rpki-client on console-ams.rpki-client.org