Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/Gvso1VO5lKETHybXvJzs3gwU6i8.roa
File: Gvso1VO5lKETHybXvJzs3gwU6i8.roa (raw, json)
Hash identifier: FRA0JWjPdvqgYnrhkyhbLwj8CI4R92CjHZq/6sI+DOw=
Subject key identifier: 1A:FB:28:D5:53:B9:94:A1:13:1F:26:D7:BC:9C:EC:DE:0C:14:EA:2F
Certificate issuer: /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Certificate serial: 01856CB81697B5603C9B874E989E092E2F9A
Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/Gvso1VO5lKETHybXvJzs3gwU6i8.roa
Signing time: Sun 01 Jan 2023 09:44:41 +0000
ROA not before: Sun 01 Jan 2023 09:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8412
IP address blocks: 195.182.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:16:97:b5:60:3c:9b:87:4e:98:9e:09:2e:2f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Validity
Not Before: Jan 1 09:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1afb28d553b994a1131f26d7bc9cecde0c14ea2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:0b:86:f5:28:88:ea:3d:31:3d:05:c2:1c:
bc:ef:a0:92:12:be:b4:0b:0e:b7:65:79:32:12:1b:
02:db:70:85:fd:e1:a3:45:99:9e:18:c2:b6:46:8d:
62:bc:92:07:6d:0b:41:21:52:bd:28:4e:0c:5f:3a:
70:c6:bd:32:e9:18:ab:4a:98:7d:6d:cf:24:83:56:
d1:27:52:8e:02:ab:9c:fa:8a:0e:f8:99:87:c8:33:
7a:1d:6a:88:45:7d:9a:19:79:34:25:56:91:d5:01:
b2:4f:32:5e:05:aa:eb:57:0f:44:cb:3e:7e:0e:12:
b7:d2:ec:3e:73:a9:2c:92:df:0a:13:4e:1d:f0:5c:
0e:f3:1d:a3:94:9e:1b:24:3c:46:a9:21:10:ab:86:
6b:b6:7e:30:99:84:06:b0:fd:35:ff:0b:c5:42:a1:
f9:7a:bd:2f:25:7f:24:f4:9a:15:02:eb:ba:ec:e2:
da:ba:97:32:6d:52:6c:5b:35:23:21:ff:fe:dc:38:
83:67:14:fa:42:47:3a:d2:4e:b0:95:e2:fd:05:7b:
4d:0b:01:99:7c:a8:a4:bd:13:6b:82:d4:f2:9c:62:
28:b8:e9:85:3c:49:db:fc:40:7f:ca:4d:87:d8:f9:
d2:61:e8:1f:a9:76:f6:1a:f9:28:f9:5a:87:71:d6:
37:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FB:28:D5:53:B9:94:A1:13:1F:26:D7:BC:9C:EC:DE:0C:14:EA:2F
X509v3 Authority Key Identifier:
keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/Gvso1VO5lKETHybXvJzs3gwU6i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.55.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:5b:0b:fb:40:70:c2:28:4a:ab:1d:e2:f3:62:e4:e2:93:fe:
a7:27:35:d5:df:e2:ab:6b:cb:e8:ba:e8:5f:d5:0d:fd:6d:c5:
3e:f5:a2:86:fc:00:02:e8:12:80:7e:b0:12:33:99:1e:d9:3f:
ae:3d:fe:fb:a1:2e:a9:5a:c4:6f:a2:a5:20:ff:c0:c6:0a:e0:
60:a5:0c:8e:f3:e1:d4:a4:36:68:52:bf:ba:f7:38:b0:33:10:
09:91:a7:3b:2a:e8:f7:1f:8d:18:15:d4:38:a9:d6:17:d1:f4:
a0:30:fe:23:68:b1:50:45:14:9f:c5:a9:83:e9:6d:a9:f7:d0:
9d:0f:d7:fd:57:a0:e7:08:6f:90:69:24:f5:fe:87:7d:85:1c:
38:c1:5f:28:73:f5:61:ba:f7:df:1a:a3:9c:74:59:26:7d:76:
e9:e6:47:e5:ec:c6:ba:b4:54:1f:d1:a2:d9:53:5e:85:45:c7:
1b:5c:fe:2a:2c:a1:47:c5:14:cc:6b:60:49:c4:ad:23:9d:e8:
75:d4:f5:ec:ae:8f:d5:3b:3f:4f:f9:32:e7:dd:f9:64:f8:51:
01:83:9d:e1:b8:78:c8:20:78:20:f3:aa:59:c4:2e:3c:f6:17:
e1:3e:a8:38:4a:1a:b3:53:17:28:d4:08:cd:88:6a:f7:2a:cd:
e0:57:77:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:22 2024 by rpki-client on console-ams.rpki-client.org