Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/gGpoGDUUS4kufTasz98xG6qpPiw.roa
File: gGpoGDUUS4kufTasz98xG6qpPiw.roa (raw, json)
Hash identifier: sRpLViNg9cIQy1wdpI8NK1ArBMsX5OzNHamoM8auLJg=
Subject key identifier: 80:6A:68:18:35:14:4B:89:2E:7D:36:AC:CF:DF:31:1B:AA:A9:3E:2C
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD51A2973594BF723F6BA258111F07A
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/gGpoGDUUS4kufTasz98xG6qpPiw.roa
Signing time: Mon 02 Jan 2023 00:15:14 +0000
ROA not before: Mon 02 Jan 2023 00:15:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39105
IP address blocks: 31.14.161.0/24 maxlen: 24
86.107.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:1a:29:73:59:4b:f7:23:f6:ba:25:81:11:f0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=806a681835144b892e7d36accfdf311baaa93e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:72:3c:f0:64:dd:87:a3:c3:0c:e8:cc:db:
4d:0d:6a:69:42:ee:8b:41:24:54:1d:9d:c0:15:c8:
db:90:cc:2f:4d:73:f5:26:65:5a:09:2b:2b:1c:d3:
d2:e0:f3:37:26:31:25:46:18:cc:8f:a9:ce:96:42:
d0:b0:83:65:52:25:fd:b3:92:4f:6a:7a:01:0a:c5:
55:33:62:3a:50:f2:5f:3a:98:a2:7c:47:1d:68:cd:
89:c9:57:0d:0f:66:ba:27:cf:ab:ed:65:aa:b6:59:
e9:e4:b6:e8:7f:2f:f4:98:1d:a1:80:15:50:25:f0:
68:81:a6:30:0c:6c:55:49:30:86:92:ba:b6:2e:b2:
e7:c2:0f:d0:5c:15:b7:b1:7e:a1:36:69:17:e1:70:
07:e3:cf:a3:52:15:7e:72:8e:31:17:ce:a0:7f:dd:
cf:88:0f:c1:cf:86:2f:7b:4e:52:cf:b5:7f:73:ae:
bb:8a:3c:09:de:ef:c5:e7:bd:30:35:7a:b5:07:26:
8f:9b:4e:5d:c1:98:1b:8c:65:8f:3a:b7:c7:6d:08:
be:b7:fb:17:00:45:46:c3:c8:91:01:e0:13:49:06:
fa:6e:00:5c:83:eb:68:59:c5:17:f5:57:ca:92:77:
2a:fd:18:60:01:39:7f:e0:dd:91:72:4c:4a:f0:ac:
6e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6A:68:18:35:14:4B:89:2E:7D:36:AC:CF:DF:31:1B:AA:A9:3E:2C
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/gGpoGDUUS4kufTasz98xG6qpPiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.161.0/24
86.107.176.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:d8:9e:cc:c6:09:10:e5:f3:69:d4:a4:c5:e3:fa:a9:6b:aa:
41:39:7d:cc:a2:96:6d:fd:86:0a:56:6a:f0:04:0a:59:ea:8d:
58:b1:9f:9d:41:c4:9d:50:a3:11:e2:6d:04:09:66:99:9e:24:
ed:43:29:dd:86:33:ba:7a:92:fc:7b:3b:ae:6d:b3:98:4b:92:
de:2e:66:a2:de:12:53:83:da:d4:74:4a:cf:27:d8:9c:c4:a1:
f6:a6:68:08:1d:83:1c:62:9f:c1:6f:c2:43:8a:d1:cd:7c:23:
99:c9:26:61:e8:c4:f8:51:29:14:74:1a:80:a0:0d:16:7c:46:
ce:99:a2:1b:f1:26:65:ad:4a:d0:26:b2:c1:21:a3:44:03:cf:
06:83:5d:42:d1:99:35:02:6d:ef:7c:39:5a:06:6c:c8:f7:34:
bd:fc:86:47:47:e5:42:12:1e:1c:8e:c0:91:a7:ff:c5:ee:42:
e6:13:43:05:97:f5:8c:9f:1f:70:5d:48:59:c0:52:ac:96:d9:
ca:2a:40:ff:75:4b:8d:27:c0:c4:8f:02:c9:30:1d:c6:02:d8:
a2:25:be:90:6b:4c:02:80:dd:b1:82:6d:72:c3:14:70:6c:b2:
bd:6c:10:57:0a:e4:c9:f4:06:86:72:93:eb:c8:67:ea:b7:1a:
f1:c5:a1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:52 2024 by rpki-client on console-fra.rpki-client.org