Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/gKWpJVU_NIAB1T8NbX2cEwLat94.roa
File: gKWpJVU_NIAB1T8NbX2cEwLat94.roa (raw, json)
Hash identifier: N8js1VrnZH2O2X8kV6Gw70XX3V2ZL9ryKUDWcW3lF0U=
Subject key identifier: 80:A5:A9:25:55:3F:34:80:01:D5:3F:0D:6D:7D:9C:13:02:DA:B7:DE
Certificate issuer: /CN=f3672df0e46988bbeed9be5410da12a3f170d691
Certificate serial: 0185720C539ED07AE262F5B086F9299D81D1
Authority key identifier: F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/gKWpJVU_NIAB1T8NbX2cEwLat94.roa
Signing time: Mon 02 Jan 2023 10:34:48 +0000
ROA not before: Mon 02 Jan 2023 10:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21275
IP address blocks: 195.24.228.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:53:9e:d0:7a:e2:62:f5:b0:86:f9:29:9d:81:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3672df0e46988bbeed9be5410da12a3f170d691
Validity
Not Before: Jan 2 10:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80a5a925553f348001d53f0d6d7d9c1302dab7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:96:4b:21:06:fd:d2:5b:a3:07:b2:b6:e4:
9b:30:6a:ed:dd:6e:a7:de:b0:d2:2d:22:d1:4a:11:
48:a7:dc:18:fb:9d:7d:00:ad:96:10:5a:f3:a5:8d:
f9:1f:0f:b4:89:68:3a:de:dd:89:48:d0:34:25:1b:
63:57:f1:df:91:b4:1c:fa:6e:61:5b:d6:64:80:17:
79:64:a6:23:ac:0c:f8:ee:a1:60:93:cf:5d:3c:c5:
95:a3:75:55:49:a9:33:22:96:11:e2:51:ce:3c:48:
d0:f8:89:0e:93:d7:68:90:7d:5a:3a:a0:ae:90:8c:
38:95:3b:a0:8f:5e:e7:30:0e:8f:d5:3d:d0:89:78:
56:92:d0:50:65:28:f8:dd:fc:10:6f:ce:20:43:f4:
83:76:f1:c9:e5:0f:b9:4b:ba:f5:a7:45:40:54:3d:
d1:39:35:68:15:ec:b9:b2:56:43:de:08:6a:50:65:
7b:b4:fb:20:6e:58:75:68:87:34:5a:65:60:a1:94:
30:8b:87:19:e5:85:8e:e9:88:08:fa:ab:46:3e:9f:
84:48:45:82:1e:ca:01:6b:11:51:a1:f5:9a:99:aa:
82:0f:f7:f8:17:77:a7:e6:cc:a0:a4:10:f9:2b:53:
5f:8e:02:17:27:9c:af:79:60:cd:30:a5:45:4a:78:
f5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A5:A9:25:55:3F:34:80:01:D5:3F:0D:6D:7D:9C:13:02:DA:B7:DE
X509v3 Authority Key Identifier:
keyid:F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/gKWpJVU_NIAB1T8NbX2cEwLat94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.228.0/23
Signature Algorithm: sha256WithRSAEncryption
45:0f:ea:00:26:cb:0f:17:6f:e3:f2:10:e4:e7:33:17:da:71:
7c:aa:b8:f2:46:3f:a1:00:a9:87:bf:6d:51:eb:ed:8c:0a:cf:
63:02:00:cd:92:b8:a2:04:e9:e0:62:fe:59:bb:fd:fd:e3:89:
1a:26:f7:57:2c:08:f4:44:95:db:27:69:a9:7f:09:19:c5:04:
b1:49:85:94:2c:88:06:5d:fe:48:86:ed:f5:ac:17:1c:39:90:
28:c6:81:f2:74:c1:90:73:ac:6f:e0:e8:e7:30:9b:03:a6:da:
05:4f:94:ce:bf:6c:f8:73:46:13:36:d0:ad:46:21:89:fd:97:
38:a2:68:ac:82:73:d1:84:9d:7e:cc:65:1d:6d:b9:b1:41:e4:
09:42:d8:b6:fd:6b:af:af:35:a5:67:1e:f0:25:5a:22:bb:d9:
59:80:34:03:f3:28:3b:b3:da:66:c9:41:63:f1:d2:fa:5e:5b:
56:96:d8:fe:c4:34:a7:51:4b:09:56:98:8b:ad:e5:db:32:33:
82:c7:d9:44:f6:6a:11:1f:93:f9:b4:df:9c:9e:9c:c4:5c:3b:
a9:1c:05:3c:d7:31:18:c2:b8:c6:97:98:ac:9a:11:c8:04:3f:
83:d1:7f:4a:c1:37:11:59:72:b3:18:21:30:8c:2a:95:ae:ea:
18:d3:d7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:58 2024 by rpki-client on console-fra.rpki-client.org