Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/gniYlEJJPHeU3v0CPZ8o3a849ms.roa
File: gniYlEJJPHeU3v0CPZ8o3a849ms.roa (raw, json)
Hash identifier: u12K1ncbTYwwZgbrFEUzijrnYT408+6hJQPIyI6pC84=
Subject key identifier: 82:78:98:94:42:49:3C:77:94:DE:FD:02:3D:9F:28:DD:AF:38:F6:6B
Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial: 01882DDA237C1BD6B8E5B52D226DF8082602
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/gniYlEJJPHeU3v0CPZ8o3a849ms.roa
Signing time: Thu 18 May 2023 07:54:10 +0000
ROA not before: Thu 18 May 2023 07:54:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207131
IP address blocks: 93.95.28.0/24 maxlen: 24
2a12:af40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2d:da:23:7c:1b:d6:b8:e5:b5:2d:22:6d:f8:08:26:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
Validity
Not Before: May 18 07:54:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8278989442493c7794defd023d9f28ddaf38f66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:64:e2:2c:fe:59:68:f0:e2:ab:41:b9:30:
d3:2f:f6:8a:d4:af:08:e6:5c:34:79:b9:d8:e2:d9:
b3:57:f7:4d:bf:3a:57:79:cb:94:ba:c0:a2:06:fa:
82:c9:c0:98:84:de:48:c0:fd:33:f3:ba:a3:75:b2:
88:2b:bd:71:1e:28:2c:4a:1d:af:9e:70:b4:1b:6a:
ac:9c:56:63:1e:78:89:cf:4c:2d:94:bf:5d:a9:0e:
99:1f:f9:0c:c3:7a:5e:c5:13:0d:e3:35:69:88:20:
cc:f2:eb:3f:36:ab:d5:7e:dd:3f:23:d4:c7:e2:89:
92:f8:88:2a:3f:d6:b7:b1:30:dd:5a:86:0e:dd:2a:
5b:c1:42:0b:c8:81:7c:68:f5:e9:86:e2:4e:81:69:
21:f5:c1:94:40:06:3e:e8:54:c6:10:2f:59:78:9f:
16:52:c3:ff:fd:9f:4f:da:8c:9d:f5:c0:cf:6a:b3:
62:7e:1b:3b:80:08:c5:9b:2a:a9:76:f7:e5:2a:6d:
92:ee:98:51:08:47:ec:f0:29:6f:61:2f:8b:57:88:
20:96:32:97:8e:d8:56:78:7a:bb:8f:4f:1b:c1:76:
2b:ae:1c:af:72:d7:68:39:3f:92:17:38:45:2e:6d:
e2:44:01:ff:97:38:73:76:f3:24:22:74:0f:06:52:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:78:98:94:42:49:3C:77:94:DE:FD:02:3D:9F:28:DD:AF:38:F6:6B
X509v3 Authority Key Identifier:
keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/gniYlEJJPHeU3v0CPZ8o3a849ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.28.0/24
IPv6:
2a12:af40::/29
Signature Algorithm: sha256WithRSAEncryption
1c:0a:06:1f:dd:76:ab:1f:89:e1:c0:cc:cd:aa:7e:0d:5e:39:
84:82:77:ed:55:ed:5b:9d:ee:fe:17:b8:e4:85:23:50:54:f7:
c0:52:5b:7f:d0:61:78:f1:f4:82:47:df:67:12:07:92:af:10:
49:61:69:c9:7f:c4:68:66:66:44:fa:d8:91:da:18:00:1c:d6:
02:7c:8f:ca:dd:16:74:f1:44:7d:fa:0b:04:5e:93:bb:8a:38:
bb:ba:07:81:e3:a1:22:7a:aa:ee:10:12:2a:4b:cc:bf:0b:4c:
f5:89:32:ab:1f:dd:9e:85:54:bc:4b:5a:39:a5:b5:1a:d6:5d:
c4:e3:87:89:74:d1:41:09:cf:6e:03:42:25:e4:0f:25:41:10:
a7:75:5f:39:9b:f0:cd:1b:08:c7:c3:bf:ab:76:9b:cd:86:9a:
9a:f1:91:54:73:a8:72:4f:2a:d1:da:ec:8d:a5:06:a9:cb:e6:
6c:cc:a0:eb:28:86:e0:00:ca:30:a7:eb:59:c2:cf:82:25:e4:
cf:27:12:83:b3:f5:ba:a1:34:40:e4:b0:c4:77:9b:94:b0:93:
18:62:18:5d:f0:ff:97:68:8d:04:f0:21:cc:82:19:9d:bd:95:
6f:51:c2:07:c1:1e:d8:0a:b1:12:4d:b2:89:9b:62:82:c6:4f:
21:99:0a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:30 2024 by rpki-client on console-fra.rpki-client.org