Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/gvd26Epk4Tm5YA82KVqsV9kHQBA.roa
File: gvd26Epk4Tm5YA82KVqsV9kHQBA.roa (raw, json)
Hash identifier: FESeLIb8nt33z29/enPQ3InqW44qgQYaYXoOEg3BXt4=
Subject key identifier: 82:F7:76:E8:4A:64:E1:39:B9:60:0F:36:29:5A:AC:57:D9:07:40:10
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01865310C2C2AF82D3CDB7D60740F53EABB7
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/gvd26Epk4Tm5YA82KVqsV9kHQBA.roa
Signing time: Wed 15 Feb 2023 03:14:12 +0000
ROA not before: Wed 15 Feb 2023 03:14:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.169.48.0/24 maxlen: 24
194.165.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:53:10:c2:c2:af:82:d3:cd:b7:d6:07:40:f5:3e:ab:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Feb 15 03:14:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82f776e84a64e139b9600f36295aac57d9074010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:77:de:1d:ff:77:0b:83:07:e0:c8:72:81:
83:0a:ba:2c:a9:b1:21:f0:04:4b:1f:8d:ad:89:7a:
1a:65:44:06:80:dd:21:8f:4e:79:c7:f1:f4:a4:a6:
c2:92:92:4f:70:36:87:b8:b5:d4:2c:c6:5d:95:2a:
e8:ad:2f:81:65:2d:88:27:c1:8e:83:c4:60:b7:7b:
d5:15:5e:17:49:9e:35:ea:e4:2b:f0:81:d9:c3:2a:
07:63:ba:4e:a9:33:28:71:6f:23:92:f8:fe:03:a2:
2f:a1:dd:a1:17:41:90:75:43:5f:01:6f:27:73:4c:
9e:78:4f:c5:6d:75:32:c2:04:8d:46:d2:b6:a8:a7:
ee:97:61:19:2f:7f:cc:34:3b:46:44:ca:e5:aa:64:
fc:2b:f5:58:a4:d3:60:29:09:b5:25:73:98:9e:d2:
18:fd:60:e1:d5:50:35:83:f2:70:ee:0d:9c:18:37:
05:19:6d:93:bf:e6:a4:ff:91:3d:78:76:28:03:ad:
84:3e:1a:60:54:44:2a:12:fc:7c:a8:44:54:7d:ce:
48:73:8f:3c:ff:32:ae:e5:8f:1c:0f:83:75:03:7e:
b5:a6:83:d5:f7:19:b3:c3:07:aa:78:be:2e:23:82:
3f:9f:0a:d6:f4:b9:05:28:49:ac:04:3e:04:66:69:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F7:76:E8:4A:64:E1:39:B9:60:0F:36:29:5A:AC:57:D9:07:40:10
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/gvd26Epk4Tm5YA82KVqsV9kHQBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.27.0/24
194.169.48.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b7:8c:a3:48:7a:05:e8:55:d0:63:56:70:29:81:ef:bc:ce:
64:02:ea:86:d0:b4:69:59:c2:2f:18:39:84:20:b1:b7:17:a4:
99:d2:e6:6d:0a:93:5b:97:6a:3f:0b:53:3b:42:54:13:3c:6e:
eb:c5:df:2d:62:2a:b9:80:da:50:d2:38:aa:ab:44:6e:d3:01:
5f:f0:9a:66:fb:60:ee:99:65:ea:f3:dc:91:bf:63:2f:43:2f:
d4:d8:1a:46:b7:7e:6c:58:e7:a0:d5:e5:c5:cf:03:11:cb:b6:
d1:c2:04:59:9f:d9:12:fb:de:10:e3:1f:06:e3:b8:14:31:1c:
5b:9a:f1:c4:fb:46:f2:ae:55:da:22:b6:33:02:20:36:e1:94:
75:73:ba:da:f5:e3:f4:02:dd:2f:3b:e8:d1:12:7d:b7:90:6e:
77:4c:37:37:c9:44:c0:c1:59:80:ec:93:95:d5:2e:23:bf:d7:
61:33:fd:3c:d4:73:a2:c0:54:06:4a:d0:e8:f8:10:3d:31:70:
c5:62:a1:33:47:1d:ab:f3:60:ab:2a:a5:ba:a2:f9:18:1d:6a:
8d:f4:8a:99:a3:71:c6:38:28:bf:ed:4a:2d:bd:b2:b8:36:2c:
37:17:a8:3b:6f:ef:55:b4:b5:b6:c6:d4:1a:f7:4e:55:af:6a:
c1:8b:10:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:00 2023 by rpki-client on console-ams.rpki-client.org