Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/gKVejzOr0-ekFrEUh9vKwW_BCb4.roa
File: gKVejzOr0-ekFrEUh9vKwW_BCb4.roa (raw, json)
Hash identifier: n3kWoY/4rkzgyxbQTh66c9rXFBltxit+gkkV5jijzH0=
Subject key identifier: 80:A5:5E:8F:33:AB:D3:E7:A4:16:B1:14:87:DB:CA:C1:6F:C1:09:BE
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 018571FA234889892B9C7308DCB927916C84
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/gKVejzOr0-ekFrEUh9vKwW_BCb4.roa
Signing time: Mon 02 Jan 2023 10:14:56 +0000
ROA not before: Mon 02 Jan 2023 10:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31369
IP address blocks: 193.25.162.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:23:48:89:89:2b:9c:73:08:dc:b9:27:91:6c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Jan 2 10:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80a55e8f33abd3e7a416b11487dbcac16fc109be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:f2:d9:d4:0a:b3:32:6b:06:09:2e:8f:20:
1e:72:08:74:44:5e:03:2c:5c:8e:9e:f6:02:a0:95:
92:24:e9:93:8b:b4:5c:da:4b:4e:2b:41:a1:44:1e:
9b:46:b4:06:e9:3e:d0:bb:9a:b0:76:71:20:1e:bb:
68:b8:21:30:84:35:6c:4a:bd:67:06:4e:6f:63:66:
60:47:05:ea:2e:d5:48:5e:2e:4d:6b:76:d7:e3:bc:
b8:a6:1b:6d:21:be:a6:be:b4:7a:b9:ed:54:dc:d9:
f2:36:42:75:09:42:6f:3e:c2:b5:78:b0:ff:73:48:
23:fa:e1:e9:fc:5a:07:19:26:7c:a6:37:7d:d7:d5:
78:f8:a0:e4:b9:27:3a:03:f5:ca:d8:19:fa:01:5c:
53:06:3e:ad:10:c9:d4:bd:7d:f3:b4:7f:99:3a:20:
1b:5f:e1:f6:90:89:64:ae:1f:17:23:16:5b:bc:2b:
1c:b1:47:dc:df:24:10:23:1d:47:3b:2f:85:15:fb:
6f:b3:0a:dd:88:5d:e3:a5:28:74:d6:df:51:b3:e9:
07:a3:94:2c:66:63:fa:13:4d:1b:2e:bd:fb:57:dc:
72:b2:ec:c8:28:bc:02:74:d9:06:60:9c:95:0a:24:
8c:d7:23:c9:4c:c8:f2:93:29:fb:a5:b1:4e:06:df:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A5:5E:8F:33:AB:D3:E7:A4:16:B1:14:87:DB:CA:C1:6F:C1:09:BE
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/gKVejzOr0-ekFrEUh9vKwW_BCb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.162.0/23
Signature Algorithm: sha256WithRSAEncryption
17:d3:5f:72:2a:9f:17:09:37:46:a6:18:5c:97:5e:f8:c9:2e:
4c:40:c6:af:6a:40:c5:19:e3:13:d3:32:76:3c:66:46:03:59:
5d:b2:bc:da:bf:ab:c0:70:95:3b:c8:10:40:1f:81:88:f6:5c:
3b:8f:94:0f:cd:cf:7c:1d:69:43:5f:95:59:a6:4a:d4:8c:a4:
1d:0c:9e:8a:8a:f2:88:ac:84:00:ce:6a:19:6d:9a:10:af:ff:
8d:f6:af:04:2c:df:f6:86:36:52:42:aa:c6:54:e2:3b:d6:0d:
04:29:0a:7f:68:4a:12:88:42:48:64:48:7a:b1:48:9c:2d:fb:
ff:18:f0:a9:84:e5:99:4f:1e:30:a8:f5:7a:65:5b:66:29:19:
53:68:0e:42:ef:84:89:9e:4d:ea:80:60:31:ce:b7:b5:0c:d9:
c3:6f:b0:3e:fb:bc:20:28:f4:6b:89:76:30:2f:17:d1:24:c4:
1e:f2:21:1b:b9:4e:34:23:d7:71:43:07:6f:a6:07:71:38:4f:
6a:70:e7:fd:ff:63:2e:e1:d8:fb:25:bb:a9:df:51:44:64:55:
86:87:86:aa:75:bd:e7:3f:19:0a:11:f2:f2:df:38:a2:51:86:
d4:32:31:73:12:36:28:4f:0e:76:6e:2c:75:be:9b:23:e3:87:
43:b9:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:14 2024 by rpki-client on console-fra.rpki-client.org