Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/gkf_rKVrsiVODkzAuVxWORr9r8c.roa
File: gkf_rKVrsiVODkzAuVxWORr9r8c.roa (raw, json)
Hash identifier: AzSpCZvdRwH3t2fGcb4+gu4No3iJxMSRZlegp0LREPE=
Subject key identifier: 82:47:FF:AC:A5:6B:B2:25:4E:0E:4C:C0:B9:5C:56:39:1A:FD:AF:C7
Certificate issuer: /CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
Certificate serial: 0189F447B78AD625CD993B90664D4F3A42B3
Authority key identifier: 45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/gkf_rKVrsiVODkzAuVxWORr9r8c.roa
Signing time: Mon 14 Aug 2023 13:41:28 +0000
ROA not before: Mon 14 Aug 2023 13:41:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42698
IP address blocks: 195.248.252.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:47:b7:8a:d6:25:cd:99:3b:90:66:4d:4f:3a:42:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
Validity
Not Before: Aug 14 13:41:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8247ffaca56bb2254e0e4cc0b95c56391afdafc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:e3:14:81:7d:e3:4d:80:7d:30:25:af:c5:
81:3b:c3:99:5e:fc:dd:6c:37:8c:ab:36:c8:24:64:
78:d9:19:1c:95:fb:f3:cc:d0:ef:5e:99:1d:5e:75:
9f:71:f3:1f:f4:32:67:10:23:ee:fa:00:e5:80:98:
11:31:d7:9f:4d:91:c2:0e:3b:d0:7f:8f:55:94:d2:
2b:57:75:e3:fd:78:66:94:59:75:b2:2b:14:2a:bf:
17:23:ab:18:3c:8b:04:e0:39:29:41:6c:4a:73:66:
8c:cc:17:36:f0:aa:f3:a2:75:af:15:e4:c2:4e:ca:
ce:53:97:45:15:0b:27:00:d0:19:be:b7:c8:a4:b6:
a0:60:64:ab:1d:e2:6b:0e:1a:27:bd:4b:17:f9:02:
32:74:f3:15:da:92:fa:c4:43:dc:92:a1:a0:cd:c7:
a7:94:76:9d:11:f1:77:8f:bf:76:5c:10:0b:c6:71:
97:62:d4:ae:27:24:87:f1:e6:d6:eb:6c:c7:c9:13:
73:d7:ce:94:dd:d1:52:bc:8e:9a:b8:de:2d:63:f6:
34:4d:26:d9:76:01:57:b2:7e:e5:f1:bd:da:d4:35:
a5:1c:a5:4b:49:b7:e7:60:df:c3:4d:52:75:5d:1a:
3b:61:20:79:71:f3:49:6a:f9:ff:25:56:70:88:7a:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:47:FF:AC:A5:6B:B2:25:4E:0E:4C:C0:B9:5C:56:39:1A:FD:AF:C7
X509v3 Authority Key Identifier:
keyid:45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/gkf_rKVrsiVODkzAuVxWORr9r8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.252.0/23
Signature Algorithm: sha256WithRSAEncryption
65:a4:52:bf:11:a6:f3:ca:5c:de:fb:5d:3f:53:1a:70:54:b6:
f4:53:06:6c:86:a8:d9:76:52:e0:78:31:da:0b:0c:8b:ef:e9:
fb:06:4e:ab:7e:be:45:e5:c7:c6:ad:64:0c:a8:1b:08:3b:3c:
90:6f:79:80:55:f1:b0:13:c4:a4:a0:eb:91:ac:9e:e4:75:e3:
cb:a7:64:e6:50:58:78:7d:60:0b:3c:e0:7c:c7:9e:3d:cc:fc:
6b:e2:be:9a:d9:25:02:1d:17:db:4d:c0:31:49:4a:10:38:65:
a6:3a:1f:27:53:1d:8b:d8:7b:46:67:00:3f:1e:0c:91:0b:c7:
b9:13:d1:8d:b4:74:b5:b2:36:f0:3d:e9:f9:3b:ad:05:73:50:
a7:9a:fc:1e:0e:d8:87:03:f8:5d:40:87:11:16:fe:e6:a7:1c:
e2:ba:bd:20:cd:eb:c1:e7:af:79:ff:38:8c:e3:7a:d4:3d:ad:
39:5c:e6:2f:2b:26:a9:06:b2:e8:7c:f8:92:11:93:3d:7e:e0:
5b:b2:d2:10:c3:a2:17:fe:62:5b:9c:d3:fc:60:df:97:c4:aa:
15:2d:b4:ae:de:0f:9b:c6:50:32:3c:fa:a5:c4:8b:c4:dd:5f:
c1:ac:e2:47:bf:3e:41:43:71:fb:d5:3e:34:cd:38:d7:01:ba:
93:10:fe:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYn0R7eK1iXNmTuQZk1POkKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OGI2NzU5YzFhMGNmNWFkODJkYTVjMzkzYmNkMGZmZjdj
N2UyZjAwHhcNMjMwODE0MTM0MTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjQ3ZmZhY2E1NmJiMjI1NGUwZTRjYzBiOTVjNTYzOTFhZmRhZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15/jFIF9402AfTAlr8WBO8OZXvzd
bDeMqzbIJGR42RkclfvzzNDvXpkdXnWfcfMf9DJnECPu+gDlgJgRMdefTZHCDjvQ
f49VlNIrV3Xj/XhmlFl1sisUKr8XI6sYPIsE4DkpQWxKc2aMzBc28KrzonWvFeTC
TsrOU5dFFQsnANAZvrfIpLagYGSrHeJrDhonvUsX+QIydPMV2pL6xEPckqGgzcen
lHadEfF3j792XBALxnGXYtSuJySH8ebW62zHyRNz186U3dFSvI6auN4tY/Y0TSbZ
dgFXsn7l8b3a1DWlHKVLSbfnYN/DTVJ1XRo7YSB5cfNJavn/JVZwiHr2zQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIJH/6yla7IlTg5MwLlcVjka/a/HMB8GA1UdIwQY
MBaAFEWLZ1nBoM9a2C2lw5O80P/3x+LwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUll0bldjR2d6MXJZTGFYRGs3elFfX2ZINHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wMWEyODUtZmM4MS00YjA2LTgwYjIt
MDBjOTEzY2IwNTU3LzEvZ2tmX3JLVnJzaVZPRGt6QXVWeFdPUnI5cjhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wMWEyODUtZmM4MS00YjA2LTgwYjItMDBjOTEzY2IwNTU3
LzEvUll0bldjR2d6MXJZTGFYRGs3elFfX2ZINHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/j8MA0G
CSqGSIb3DQEBCwUAA4IBAQBlpFK/Eabzylze+10/UxpwVLb0UwZshqjZdlLgeDHa
CwyL7+n7Bk6rfr5F5cfGrWQMqBsIOzyQb3mAVfGwE8SkoOuRrJ7kdePLp2TmUFh4
fWALPOB8x549zPxr4r6a2SUCHRfbTcAxSUoQOGWmOh8nUx2L2HtGZwA/HgyRC8e5
E9GNtHS1sjbwPen5O60Fc1CnmvweDtiHA/hdQIcRFv7mpxziur0gzevB5695/ziM
43rUPa05XOYvKyapBrLofPiSEZM9fuBbstIQw6IX/mJbnNP8YN+XxKoVLbSu3g+b
xlAyPPqlxIvE3V/BrOJHvz5BQ3H71T40zTjXAbqTEP4y
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:35 2024 by rpki-client on console-fra.rpki-client.org