Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/Gvp5cvbMxOBG26LutrcOxaYZUpc.roa
File: Gvp5cvbMxOBG26LutrcOxaYZUpc.roa (raw, json)
Hash identifier: g0gW4fZEJOzYTIVsVrUNnc0a0R+c019ywviaXgnsHaU=
Subject key identifier: 1A:FA:79:72:F6:CC:C4:E0:46:DB:A2:EE:B6:B7:0E:C5:A6:19:52:97
Certificate issuer: /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial: 01856F8B7A0C9AB2895FA474A9EB3CE3AED2
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/Gvp5cvbMxOBG26LutrcOxaYZUpc.roa
Signing time: Sun 01 Jan 2023 22:54:49 +0000
ROA not before: Sun 01 Jan 2023 22:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41807
IP address blocks: 195.8.206.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:7a:0c:9a:b2:89:5f:a4:74:a9:eb:3c:e3:ae:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Validity
Not Before: Jan 1 22:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1afa7972f6ccc4e046dba2eeb6b70ec5a6195297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:08:c4:a5:51:f3:6f:dd:9d:af:45:2b:5c:
77:0f:7f:52:84:a3:fe:ad:52:cb:b8:07:51:39:85:
f9:09:0a:43:13:2d:79:8e:ab:2c:d1:81:b0:9b:d8:
ac:f1:c5:f6:ec:5d:37:39:7c:ef:29:0e:8c:7a:da:
53:f4:37:44:7b:a0:14:f7:ec:8f:91:bc:9d:ca:77:
4f:6f:4e:3e:52:ba:ec:19:a6:11:8c:e6:dd:1c:20:
85:f5:05:7b:84:53:89:cd:84:9f:f4:5d:5c:d4:7a:
12:66:a1:d3:cd:cd:0d:e1:0f:c8:4e:87:1d:a8:56:
db:01:ac:f5:ae:c1:7e:c7:7d:a5:24:cf:34:73:13:
c0:56:d5:e9:c5:0d:9d:7b:a0:91:16:2e:26:80:51:
2c:40:92:ae:ab:89:0c:73:fa:9b:18:48:c4:f7:c6:
93:a4:7c:b2:d2:d9:aa:c2:6c:6c:43:05:6f:46:ab:
0e:57:9d:6b:14:4e:e3:8b:ff:22:2a:55:e3:ff:16:
92:69:90:c8:d7:99:9e:14:51:12:3f:ff:70:12:36:
96:53:7a:d8:e1:96:6d:45:9c:c8:dd:08:13:9b:23:
6e:f9:51:a2:ef:da:f0:92:81:22:47:5f:0f:58:1e:
34:51:27:21:a9:c4:ca:69:aa:22:07:57:f1:96:34:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FA:79:72:F6:CC:C4:E0:46:DB:A2:EE:B6:B7:0E:C5:A6:19:52:97
X509v3 Authority Key Identifier:
keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/Gvp5cvbMxOBG26LutrcOxaYZUpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.206.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:d2:8f:dd:09:e7:0d:d1:73:91:f3:11:2a:5e:1e:11:02:2d:
92:c2:ac:2d:47:04:d5:f7:c4:99:a3:9d:a1:51:d9:57:64:6b:
16:a2:58:27:86:56:c2:ee:84:d7:8c:8d:35:f6:b8:5e:10:07:
17:61:2c:9d:4c:95:ba:6f:c3:c8:0e:45:e6:4c:67:a4:9a:05:
40:57:b0:e3:41:28:d7:2f:3f:cd:e1:0f:ce:80:65:d2:59:ee:
e8:45:09:35:87:9e:1f:17:f2:4f:a9:dc:01:0b:6a:2e:1d:f1:
3c:77:a9:f0:01:f5:4a:bd:8b:79:67:60:53:67:bc:85:9b:5d:
79:46:49:c2:a1:89:43:90:ba:7f:8f:cd:6e:22:dc:52:b1:71:
83:6a:2d:ea:3f:e2:5a:e9:f3:ae:fd:a7:04:84:2a:28:ee:25:
5c:b8:f2:af:67:d6:80:c3:83:ef:86:9b:a2:38:88:1a:07:b0:
ce:9f:36:97:33:31:ff:db:f4:96:c4:9b:cd:6c:3b:54:9f:77:
b8:22:02:5b:eb:22:6f:cc:15:0a:38:71:72:b4:10:13:6b:26:
38:95:6e:fe:1e:6d:5e:da:09:ac:4e:20:f2:06:3b:1a:d1:a9:
9d:ad:60:e3:f0:07:a9:5c:07:6c:1a:5d:ae:6a:32:1b:86:55:
fb:fb:b3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:19 2024 by rpki-client on console-fra.rpki-client.org