Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/gp8848okXkK6_6cAK9cnLoX5v7w.roa
File: gp8848okXkK6_6cAK9cnLoX5v7w.roa (raw, json)
Hash identifier: LtL/T9461bWiBLhncuCzylL6wr4VdrD1dEdYiICK+6c=
Subject key identifier: 82:9F:3C:E3:CA:24:5E:42:BA:FF:A7:00:2B:D7:27:2E:85:F9:BF:BC
Certificate issuer: /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Certificate serial: 018B66B984C555DD942592579FE1BCEA73DE
Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/gp8848okXkK6_6cAK9cnLoX5v7w.roa
Signing time: Wed 25 Oct 2023 12:05:15 +0000
ROA not before: Wed 25 Oct 2023 12:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206894
IP address blocks: 193.25.96.0/24 maxlen: 24
193.24.38.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 29 Oct 2023 08:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:b9:84:c5:55:dd:94:25:92:57:9f:e1:bc:ea:73:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Validity
Not Before: Oct 25 12:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=829f3ce3ca245e42baffa7002bd7272e85f9bfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:15:da:0e:c0:45:e8:70:ba:a5:6d:5b:4f:
ce:59:46:f1:0b:30:4f:45:ac:e2:62:50:b6:45:ec:
37:3a:c9:1e:c0:bd:45:e7:40:1d:76:2c:d2:cf:29:
56:16:36:57:e0:78:b0:2c:f1:13:a1:86:56:fd:70:
c0:f7:c9:01:33:f2:28:3a:77:84:52:70:be:6c:18:
20:f0:9c:38:2d:10:fb:16:79:91:a7:25:dc:64:bf:
31:88:8b:f4:5f:9e:09:5f:eb:b3:0f:50:20:a6:11:
9f:95:ca:dc:7d:6d:be:64:f6:ff:7a:27:83:db:9d:
9f:72:4a:60:b9:f5:86:1f:32:59:a4:20:c0:2b:93:
71:d6:ba:16:16:c5:73:4d:cc:32:55:4b:9f:71:1a:
30:ea:42:65:c9:3e:bb:d8:45:6f:c3:e2:06:1b:ec:
63:8a:5b:1c:d3:af:a1:06:79:72:bd:a2:86:e0:96:
e4:32:c5:99:c9:eb:21:6e:b2:1c:32:73:e7:8c:e8:
a8:1c:3b:fc:9d:57:d4:23:91:bf:f6:83:5c:5c:58:
ba:6a:35:ed:a6:52:f8:b2:94:fc:57:1a:61:60:6a:
cd:3e:7f:bd:49:d5:4b:ca:94:62:b2:b6:92:33:66:
d3:e6:ff:15:fb:08:aa:96:8d:ea:e2:09:66:f6:21:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9F:3C:E3:CA:24:5E:42:BA:FF:A7:00:2B:D7:27:2E:85:F9:BF:BC
X509v3 Authority Key Identifier:
keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/gp8848okXkK6_6cAK9cnLoX5v7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.38.0/23
193.25.96.0/24
Signature Algorithm: sha256WithRSAEncryption
38:0c:f6:df:39:e1:52:1a:9f:07:89:d4:eb:6f:50:54:f1:aa:
b6:49:5d:c7:eb:58:77:e0:e0:af:63:be:4a:a1:57:31:ad:82:
ab:47:74:ed:8f:5e:3d:5a:14:e5:cc:91:e7:27:a2:b9:c2:d1:
f9:54:8a:9c:e2:73:15:54:df:0d:00:98:73:55:c6:d1:5e:e8:
74:e3:81:c1:7f:f1:73:92:20:49:5d:4b:e2:db:1a:9f:0f:1e:
df:00:02:b7:b7:09:64:22:8f:d3:35:af:a5:5f:cd:4e:17:33:
e0:89:a7:d8:64:18:54:d4:30:66:8c:52:ef:32:05:11:91:75:
99:6e:4b:06:ad:7c:30:89:1d:e5:3b:52:be:54:b0:60:1b:73:
a4:f0:ad:86:05:6e:c4:d1:7e:02:db:b7:61:58:4e:9b:89:dc:
8c:c1:e6:17:7e:49:a4:e9:82:d8:7d:1a:e4:9e:02:e8:ef:d0:
1a:40:72:76:f3:1f:77:08:54:32:6c:db:22:99:f2:44:20:49:
b4:84:99:46:da:bd:1c:f0:70:18:71:1e:05:c5:d1:22:b7:c8:
83:dd:1d:43:c9:b2:df:d0:35:bf:1f:82:ab:7f:ee:19:f1:4a:
79:58:47:13:1f:89:bd:55:8f:8e:1d:3b:da:98:6c:41:4d:14:
e8:97:65:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-fra.rpki-client.org