Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/gaPsvtqAFizSQDwuWKFUEWRdxCQ.roa
File: gaPsvtqAFizSQDwuWKFUEWRdxCQ.roa (raw, json)
Hash identifier: cKfaDYZqJIHQlRvUT0yR08cRqBOvdesjKW4XdCSbLEs=
Subject key identifier: 81:A3:EC:BE:DA:80:16:2C:D2:40:3C:2E:58:A1:54:11:64:5D:C4:24
Certificate issuer: /CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Certificate serial: 018571151D8442EC8CED60E5CC518E7A7332
Authority key identifier: EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/gaPsvtqAFizSQDwuWKFUEWRdxCQ.roa
Signing time: Mon 02 Jan 2023 06:04:47 +0000
ROA not before: Mon 02 Jan 2023 06:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207785
IP address blocks: 185.153.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:1d:84:42:ec:8c:ed:60:e5:cc:51:8e:7a:73:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Validity
Not Before: Jan 2 06:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81a3ecbeda80162cd2403c2e58a15411645dc424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:aa:0c:0c:91:23:90:22:c8:87:b6:27:23:
46:cf:84:78:fd:f0:78:24:7d:92:ab:fc:a5:14:36:
13:31:9e:fe:47:a8:37:0e:51:b2:2a:0d:3b:c9:d2:
dc:cc:4b:c9:89:51:79:18:d9:fb:9b:44:44:83:a6:
e1:33:32:4b:dc:e1:62:9e:67:e1:8e:f5:b6:a3:cb:
68:a5:b4:2f:45:db:88:bd:0a:5a:0d:6f:44:2b:00:
1e:c1:be:34:56:83:d2:d1:bc:b0:3f:c3:49:5c:4a:
ba:51:25:58:83:62:32:31:3b:a7:89:48:bc:91:84:
70:d3:54:e7:5d:49:72:e6:f0:14:a7:a9:23:11:a7:
50:b2:5d:5d:14:9c:0c:0c:5b:27:9e:51:1d:a7:cf:
33:41:33:25:71:d6:1c:64:48:d9:04:a0:2f:62:95:
9d:96:34:42:ed:fc:2b:6d:74:9b:f8:53:5f:94:89:
46:42:1f:17:95:63:f8:7d:34:b4:a9:78:fa:cc:81:
fb:67:0d:fe:0b:49:a3:52:5e:fd:98:b5:e6:c8:4b:
12:4c:4f:e1:3b:e1:5d:83:e8:cf:8e:2b:b0:8c:ea:
fa:59:a8:c3:a1:5e:27:8f:49:bc:2f:ae:f1:b9:b8:
2a:d4:f1:eb:dd:41:72:ad:af:8a:2d:5b:6f:84:69:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A3:EC:BE:DA:80:16:2C:D2:40:3C:2E:58:A1:54:11:64:5D:C4:24
X509v3 Authority Key Identifier:
keyid:EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/gaPsvtqAFizSQDwuWKFUEWRdxCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.201.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e4:76:ec:f7:8e:95:2c:9f:42:17:27:59:3e:c8:7d:86:28:
53:09:be:73:e1:93:ac:89:5c:d2:74:cb:9a:05:b8:25:82:04:
b3:2d:16:c7:24:15:a0:96:81:ba:dd:5f:2d:ec:6d:ec:e9:7b:
dc:b8:9e:e7:6f:a4:68:a2:76:24:d2:37:21:41:53:85:9a:e9:
4f:b6:f4:d3:39:ef:b4:74:25:7e:b8:ed:87:e5:cc:1a:45:39:
bd:f9:84:3e:93:12:90:7a:97:fb:77:ef:47:d9:b6:b4:fe:08:
66:72:bd:8d:aa:54:b3:fb:cd:a3:b5:a7:23:b9:e3:e6:b1:5c:
34:9d:f4:53:2e:ff:d1:af:2d:53:50:a0:b7:4d:d7:87:8d:62:
57:0d:36:f5:f2:57:f7:99:ca:58:9d:22:c9:20:fd:06:2e:58:
47:44:66:08:c4:5e:1a:f9:a4:f8:b1:a9:f0:fb:a6:5f:fb:a8:
15:13:09:21:16:d7:02:46:0a:06:b5:90:ba:c8:d5:a8:b9:18:
98:fc:8b:c7:e4:da:b7:2a:0e:77:d4:fd:99:4e:d5:72:b3:e0:
a0:74:97:43:f8:54:91:0d:2c:fb:8a:74:a0:b3:0e:e1:77:a2:
e0:94:25:6f:8e:6b:84:57:72:5e:c5:41:ba:82:2e:bb:42:67:
f0:52:e0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:20 2024 by rpki-client on console-fra.rpki-client.org