Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/gp_Urt9Vsipes0ybGHsk_WKJiuk.roa
File: gp_Urt9Vsipes0ybGHsk_WKJiuk.roa (raw, json)
Hash identifier: HCAhta17FUYuj3rMuQ7mgO06BO7UZk+6GptZ2hvpvIU=
Subject key identifier: 82:9F:D4:AE:DF:55:B2:2A:5E:B3:4C:9B:18:7B:24:FD:62:89:8A:E9
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 01856DB89107B02B8EB18B76F0E0B36FD23D
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/gp_Urt9Vsipes0ybGHsk_WKJiuk.roa
Signing time: Sun 01 Jan 2023 14:24:50 +0000
ROA not before: Sun 01 Jan 2023 14:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41620
IP address blocks: 31.184.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:91:07:b0:2b:8e:b1:8b:76:f0:e0:b3:6f:d2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jan 1 14:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=829fd4aedf55b22a5eb34c9b187b24fd62898ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:bb:3d:22:eb:21:f2:17:4e:47:98:a7:9c:
d4:14:45:de:4a:f5:79:80:f5:7c:52:12:9f:35:16:
01:26:2e:c0:a2:1c:02:f3:96:b8:02:f4:94:cc:08:
23:82:1e:a6:f2:e3:b8:c3:7d:88:f0:cc:bd:db:07:
a4:49:ea:f7:03:44:e3:a3:9f:d3:42:3f:43:fb:cf:
72:79:b9:93:46:41:91:db:c3:ed:08:e4:05:77:25:
47:44:3c:0b:75:87:39:cd:db:31:e9:68:55:1d:71:
6e:56:33:c3:44:2c:dd:92:fc:9a:a5:32:22:6c:40:
b8:86:3c:a9:54:13:36:26:90:30:8c:6b:c3:d4:08:
b6:8a:f9:ea:2e:01:32:a5:e9:f8:fd:6d:25:6e:c7:
a4:94:7a:fa:18:b2:5c:fe:51:3a:d3:5c:5a:df:37:
0f:0e:85:a8:2f:31:b1:aa:7f:51:d6:56:7a:70:d5:
27:c4:9b:fa:4e:84:22:6d:84:00:c0:8c:6e:9e:25:
2e:1f:aa:b8:59:7a:63:4a:32:f4:78:ea:af:ab:fe:
c4:be:09:af:ec:13:6d:eb:a4:b7:54:98:55:99:0a:
8d:46:6b:4a:e4:48:3c:ce:b1:e6:2b:ef:58:63:1c:
ef:ad:dc:89:03:44:4a:85:b6:98:13:85:ce:66:9b:
9e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9F:D4:AE:DF:55:B2:2A:5E:B3:4C:9B:18:7B:24:FD:62:89:8A:E9
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/gp_Urt9Vsipes0ybGHsk_WKJiuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:65:41:ec:ac:fe:6b:f9:a6:1f:99:17:4c:96:a7:02:e4:5d:
a1:f4:fe:a9:a5:45:2d:19:5c:e1:6d:fd:b0:7d:69:5d:a9:bc:
67:f8:bb:47:ea:a1:d6:94:81:a8:52:15:54:d8:82:69:6a:f5:
18:a4:46:3c:3a:5e:74:0c:8a:db:1b:10:b1:4b:86:1a:6f:1c:
31:e2:47:29:e2:2a:f6:1f:2e:b7:cf:3e:53:cb:81:ed:cc:2f:
cd:f4:09:60:c1:20:97:8a:ee:da:e6:91:08:f4:84:61:cd:0e:
f8:68:db:c2:d8:2f:8e:d9:63:0e:f5:66:3b:0c:cc:4c:e4:5c:
9e:8e:b3:d3:71:49:c9:36:dc:ab:df:ce:e9:33:b5:26:49:78:
fb:dc:3f:5e:4b:b5:a5:0b:dd:b8:44:1b:59:ad:37:be:2e:61:
f7:c4:de:e0:c2:a9:9b:00:c9:d0:3d:5b:42:16:01:b0:3e:9d:
57:63:43:2f:54:b4:a4:c1:75:22:f1:7b:1d:9f:c9:c7:6f:90:
01:d7:b8:57:c9:eb:37:39:36:c6:bf:b8:4f:fd:cf:f6:cb:04:
f9:5d:2c:29:4a:3d:32:d5:fc:10:a8:92:49:9f:9a:c7:94:2d:
59:5e:3a:c6:26:31:bd:0a:61:92:8b:93:3a:59:29:62:c9:88:
ac:a9:0a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 08:50:10 2023 by rpki-client on console-fra.rpki-client.org