Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/GKrmSTyOhiiPlbwxqbsYFjUkwJM.roa
File: GKrmSTyOhiiPlbwxqbsYFjUkwJM.roa (raw, json)
Hash identifier: Qy1VtpVWB3D41QPCt5n3a7X26YMGhnAQkWKwS1l4lYg=
Subject key identifier: 18:AA:E6:49:3C:8E:86:28:8F:95:BC:31:A9:BB:18:16:35:24:C0:93
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 0185AA5880169A1D0E7509570CB9FE010D37
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/GKrmSTyOhiiPlbwxqbsYFjUkwJM.roa
Signing time: Fri 13 Jan 2023 08:56:44 +0000
ROA not before: Fri 13 Jan 2023 08:56:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 86.62.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:aa:58:80:16:9a:1d:0e:75:09:57:0c:b9:fe:01:0d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jan 13 08:56:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18aae6493c8e86288f95bc31a9bb18163524c093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:11:e3:2f:6a:6c:59:d6:c2:1b:5d:da:51:dc:
5f:32:7a:ab:25:1e:e5:05:06:ae:c5:ba:be:25:36:
20:03:b9:1f:7a:f3:07:55:32:3a:b9:f2:19:54:52:
e8:43:fe:75:6d:ad:88:27:8d:dc:e6:37:03:26:c4:
6d:94:be:bf:55:a5:76:13:92:9c:22:96:95:d8:06:
9a:32:27:0a:b5:fb:3e:fa:6d:a3:ca:67:47:cc:23:
f2:fe:48:01:33:42:33:18:ca:b5:ad:59:f9:54:ce:
9b:b6:e5:b4:39:ab:78:b8:e2:0f:d6:35:9c:7b:d9:
6a:b7:84:c5:86:4b:05:fe:dc:ba:ca:66:d9:eb:9b:
19:72:1c:eb:b8:f3:6c:9d:6a:eb:07:36:57:3a:29:
e9:90:cd:7e:65:42:aa:da:ca:92:93:b4:53:cb:92:
7d:bc:d4:77:1e:80:bb:90:68:ae:94:e3:0b:b1:be:
a1:27:63:44:2f:9f:5f:bb:5f:3c:77:fb:b9:66:13:
b4:99:24:59:fe:de:53:5e:9d:80:ff:45:8d:5c:70:
a3:7f:84:06:19:87:66:f5:91:15:c0:ff:15:20:64:
ae:e4:3d:63:c0:19:7b:ca:98:7e:88:3b:32:27:51:
37:a6:b3:77:ed:30:72:01:f4:b3:c4:01:6c:ad:23:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AA:E6:49:3C:8E:86:28:8F:95:BC:31:A9:BB:18:16:35:24:C0:93
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/GKrmSTyOhiiPlbwxqbsYFjUkwJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.30.0/24
Signature Algorithm: sha256WithRSAEncryption
51:43:df:14:b8:54:6c:0a:f0:be:63:c7:9b:45:03:ba:1d:02:
e4:5c:36:fc:b9:9b:3c:7d:93:f4:04:c1:e2:91:35:52:fc:38:
b1:83:3e:d1:82:07:fc:24:98:f7:66:c2:38:b5:ab:3b:7b:8b:
60:52:10:1e:f1:88:c9:29:eb:3f:ca:c8:83:93:ca:c8:f5:6b:
5b:f5:7c:12:6a:cb:b3:2e:65:8a:19:c6:5d:56:41:85:fd:66:
b6:dc:4e:4d:57:de:ea:d9:db:23:81:5f:ab:4d:90:6e:33:0e:
c2:c0:fc:35:46:93:41:44:4e:6e:3b:50:39:c6:7a:1c:50:f5:
1c:2f:a1:1e:68:c2:40:47:49:d1:6a:a4:86:73:2c:07:2a:5a:
6d:f0:b9:59:47:87:e2:68:2c:05:9e:c7:2b:2b:11:cf:fe:02:
bc:d4:c0:d9:98:9c:fa:6c:83:54:1e:86:34:13:ad:1d:de:db:
7d:d0:10:c1:5a:da:c0:ac:d5:5d:39:ec:0d:5b:0a:b8:f4:a5:
6a:88:5d:dd:b5:a0:d2:98:b5:51:eb:44:0c:7a:1e:71:ba:79:
42:9e:5b:0f:2b:b5:35:84:20:0c:35:27:6b:32:90:ae:31:9d:
2e:15:65:ee:38:a5:c2:b6:05:59:74:68:48:32:13:ea:e4:64:
85:14:1f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-fra.rpki-client.org