Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/GFaUt32t5SBmPk__Ie6lMwSxUkc.roa
File: GFaUt32t5SBmPk__Ie6lMwSxUkc.roa (raw, json)
Hash identifier: XrpjNxc/b+rCNz8c/YHeoD27guQsr16wGatWCx3/2tk=
Subject key identifier: 18:56:94:B7:7D:AD:E5:20:66:3E:4F:FF:21:EE:A5:33:04:B1:52:47
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01856FF97697095807BFF560839F15AC6996
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/GFaUt32t5SBmPk__Ie6lMwSxUkc.roa
Signing time: Mon 02 Jan 2023 00:54:57 +0000
ROA not before: Mon 02 Jan 2023 00:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212913
IP address blocks: 80.76.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:76:97:09:58:07:bf:f5:60:83:9f:15:ac:69:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 2 00:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=185694b77dade520663e4fff21eea53304b15247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:0e:2b:1f:2e:cb:da:c7:b6:4c:d5:5e:34:
26:1a:34:f4:09:1c:95:db:3d:52:35:3c:a2:b9:b0:
91:38:bd:cd:64:15:64:af:ac:2b:3a:0a:27:f8:08:
ce:a5:de:aa:ac:cc:62:eb:79:5a:76:5d:04:00:ee:
92:e6:c5:57:54:90:61:f8:96:c0:cd:43:17:1d:0e:
53:f2:e9:4d:5a:c2:7d:b3:47:e8:5f:ef:9c:95:11:
63:79:9d:36:2b:b0:5f:fd:03:fb:db:3c:d1:e6:a5:
16:f9:7f:e6:ba:08:07:50:d8:26:98:38:95:44:57:
97:e0:7c:f9:28:77:53:2f:18:ad:ac:3e:77:43:31:
bb:f4:cd:d6:fd:f1:00:54:71:bb:43:d1:16:e5:c7:
ca:44:f4:23:49:32:20:c5:14:01:a5:bb:ee:3a:08:
22:62:f3:3d:51:a8:87:fb:1a:78:36:4d:74:85:e1:
c0:2c:c7:0c:ba:83:cc:3d:19:cc:38:80:34:7f:50:
90:ec:22:a3:3b:68:05:de:32:8f:d9:e1:0e:da:4b:
00:6e:d4:b0:5c:46:2e:32:7b:7b:83:be:93:c0:da:
3b:1a:e5:c0:56:d1:be:eb:8d:6a:3b:d6:d6:b7:29:
57:63:1b:4e:8a:c0:31:ca:42:ad:0c:ee:34:7d:ae:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:56:94:B7:7D:AD:E5:20:66:3E:4F:FF:21:EE:A5:33:04:B1:52:47
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/GFaUt32t5SBmPk__Ie6lMwSxUkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.42.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:36:91:36:a8:5e:f7:da:2f:06:b0:c2:a2:a2:f7:00:62:9a:
a3:c1:fa:bf:01:ea:c7:ba:38:c0:ef:c3:52:fb:a2:6e:b2:a1:
23:b5:ca:74:e5:0d:f0:f9:26:da:d8:00:a8:e0:99:ee:a1:35:
d4:e5:a2:67:d1:1e:ea:b2:ff:f7:37:cd:6e:92:f1:60:76:0f:
18:da:1f:6f:e9:38:2e:65:6a:4b:89:3a:5b:d5:9a:c9:b3:c3:
c5:2e:da:bd:99:5b:c5:06:99:b9:cc:61:a7:70:fe:9a:91:50:
1a:52:46:57:87:ee:71:6b:5e:27:28:ad:6e:a2:90:47:95:a5:
d2:c6:97:f7:5d:a0:e0:ed:74:b6:01:7e:aa:9d:13:d2:22:e5:
6c:82:aa:9e:b2:f6:10:b1:46:30:03:ae:39:24:59:1b:6a:4f:
97:92:9c:c4:e6:77:99:19:68:ae:bd:5e:85:87:5d:fc:eb:a6:
fb:59:c7:a9:59:31:75:32:48:e6:ba:07:fc:24:de:65:a5:c5:
04:1d:33:09:4b:1a:9a:90:e7:e1:86:20:43:6b:94:ae:02:52:
17:67:12:ab:e4:d7:18:62:4f:ea:f6:49:48:30:c8:06:24:41:
72:ed:ba:a5:84:e0:83:bd:53:3e:1e:51:5a:25:a2:5b:46:79:
44:dc:f5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:32 2024 by rpki-client on console-fra.rpki-client.org