Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/GlkzlrbKyo2F7tJQvMUuO0SxMQk.roa
File: GlkzlrbKyo2F7tJQvMUuO0SxMQk.roa (raw, json)
Hash identifier: w3t3LabyxJueicuDCznjbn8iHI/bMCVkgDb3/YEc4cQ=
Subject key identifier: 1A:59:33:96:B6:CA:CA:8D:85:EE:D2:50:BC:C5:2E:3B:44:B1:31:09
Certificate issuer: /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Certificate serial: 01856E78E955241869EBF52970901728EC58
Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/GlkzlrbKyo2F7tJQvMUuO0SxMQk.roa
Signing time: Sun 01 Jan 2023 17:54:55 +0000
ROA not before: Sun 01 Jan 2023 17:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12586
IP address blocks: 195.162.4.0/23 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:e9:55:24:18:69:eb:f5:29:70:90:17:28:ec:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Validity
Not Before: Jan 1 17:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a593396b6caca8d85eed250bcc52e3b44b13109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:04:92:f6:67:34:a3:15:18:92:30:13:39:1f:
ee:73:7b:24:ff:a4:e0:61:a5:b2:cd:8b:45:e5:34:
e7:4e:90:32:fd:1f:fb:e2:ee:3c:42:9c:89:90:37:
4d:1d:23:42:1c:f9:d2:f3:f5:25:98:de:34:e8:5d:
af:87:62:a7:70:6c:35:b4:a8:9f:52:d6:0b:3c:63:
36:3d:27:8b:78:b2:95:12:02:24:97:c0:74:34:9a:
8b:54:e6:83:f5:af:72:6f:da:e2:77:63:b8:f3:42:
3f:95:6b:46:7b:67:57:43:ba:3f:55:3b:37:19:55:
62:34:4e:45:7e:49:6a:19:8f:b9:68:8e:08:d0:bd:
ab:7c:6c:8a:f6:c2:fd:82:15:e0:6a:5b:36:39:85:
cc:97:fd:62:37:09:1a:2b:ee:1f:97:93:85:48:0d:
1a:df:f9:50:50:49:b5:91:23:00:25:99:8a:e3:2d:
d7:e7:59:66:12:16:fb:a8:86:5d:38:10:96:05:a2:
50:7e:9c:44:64:ba:b5:fc:18:c4:42:38:ef:b1:00:
f8:81:d6:65:02:48:61:58:c9:e0:59:3a:7b:d8:f0:
4e:43:d3:e7:0b:45:94:23:39:fe:f0:95:35:29:71:
8a:c9:91:53:3c:a5:d1:14:c3:4f:76:5c:0e:3b:1f:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:59:33:96:B6:CA:CA:8D:85:EE:D2:50:BC:C5:2E:3B:44:B1:31:09
X509v3 Authority Key Identifier:
keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/GlkzlrbKyo2F7tJQvMUuO0SxMQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.4.0/23
Signature Algorithm: sha256WithRSAEncryption
94:92:b1:a6:7e:c3:82:53:0e:db:53:25:63:93:d3:2c:7e:62:
88:77:78:be:59:a4:66:39:2f:88:2a:bd:95:7e:f2:04:08:1c:
39:a6:89:a5:8b:8a:c4:28:ce:e5:f4:1e:b6:07:d9:ef:16:2b:
45:e8:b7:32:1d:c9:07:fb:0a:38:d6:46:43:5c:ed:4f:8b:f3:
cd:53:73:c0:53:0c:1c:b6:10:78:8b:9a:ca:77:5a:00:ce:06:
a3:03:db:ee:7c:1e:37:b1:77:8f:5b:06:b8:81:2d:5e:3f:94:
98:a7:ed:de:dd:53:bb:1e:a5:46:22:c9:36:39:af:11:7e:51:
47:3c:09:20:62:9a:e5:9b:6c:5f:00:33:8a:94:b8:c7:18:d2:
9d:f7:4c:94:43:3f:22:99:38:48:11:b7:04:9d:1b:92:5d:16:
4a:0c:66:6e:1d:54:ca:97:07:cd:89:3e:12:c5:4f:d3:c9:bf:
36:4e:43:cd:3a:1b:6e:fb:93:bc:8c:d2:c7:ce:ce:83:5c:bb:
3d:a9:cb:9b:14:0a:88:b2:ee:fd:c8:52:92:a9:b8:3f:e3:9c:
8a:ac:44:4d:43:15:da:f1:ef:0b:4d:78:ca:c8:5e:e6:24:db:
07:83:3f:ce:df:48:77:a6:25:6a:fd:74:11:7e:08:84:53:e7:
96:cd:fd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:22 2024 by rpki-client on console-ams.rpki-client.org