Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/grQIEfP3scYU0e9F6kztoBvFjBg.roa
File: grQIEfP3scYU0e9F6kztoBvFjBg.roa (raw, json)
Hash identifier: JeD1CdYaGsIjfLCpBPIURRc19bUQTy9elZAYO6GxaJQ=
Subject key identifier: 82:B4:08:11:F3:F7:B1:C6:14:D1:EF:45:EA:4C:ED:A0:1B:C5:8C:18
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01882086B7BC8C841516DD1A542FC781661D
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/grQIEfP3scYU0e9F6kztoBvFjBg.roa
Signing time: Mon 15 May 2023 17:47:59 +0000
ROA not before: Mon 15 May 2023 17:47:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 193.37.249.0/24 maxlen: 24
176.110.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b7:bc:8c:84:15:16:dd:1a:54:2f:c7:81:66:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: May 15 17:47:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82b40811f3f7b1c614d1ef45ea4ceda01bc58c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:a7:e9:9b:15:74:39:50:1f:07:c9:fa:40:
58:aa:3a:7a:c9:e4:09:75:f6:1b:66:8e:99:3d:3d:
7e:ec:6b:d6:d4:d3:a8:a3:80:80:20:a7:f1:38:60:
e2:d9:b0:8e:48:29:cb:2e:b7:b8:a5:5a:d1:a6:f4:
b2:b5:f6:81:e0:20:9d:73:e8:d9:7f:47:47:3b:84:
51:3c:19:5a:df:18:f9:00:42:36:46:42:42:29:16:
47:90:4d:26:8e:59:6d:98:99:8c:76:92:7a:db:69:
93:fa:89:8d:6c:bc:7d:92:ad:d1:43:30:6f:56:8d:
7f:1e:37:9b:4c:39:78:40:27:63:64:d5:5f:59:55:
4f:a2:2a:db:15:4d:2a:81:ec:ef:d7:e9:95:aa:b4:
fb:8d:45:4c:7b:9a:f5:41:c8:e6:df:a8:39:39:11:
23:98:e0:88:6e:0f:ff:49:4b:4e:9b:85:7d:02:98:
b6:01:1c:27:18:8c:6c:70:37:68:b8:7d:ac:2c:de:
8d:f7:8f:c0:39:75:27:50:24:f1:fa:3a:d3:60:4d:
5c:fb:d7:27:da:a2:bf:65:b7:09:ca:83:eb:fb:85:
48:27:3d:90:4d:a4:89:0c:00:b5:df:33:44:a3:c2:
ae:d4:b5:a3:45:5c:8a:b9:2b:5f:f2:77:cc:d7:31:
87:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B4:08:11:F3:F7:B1:C6:14:D1:EF:45:EA:4C:ED:A0:1B:C5:8C:18
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/grQIEfP3scYU0e9F6kztoBvFjBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.110.0/24
193.37.249.0/24
Signature Algorithm: sha256WithRSAEncryption
01:7d:0d:4c:c1:9e:14:b8:91:5e:4a:c2:9d:11:61:2b:83:56:
da:45:80:d5:25:9e:48:59:4d:9c:62:cc:41:d7:f0:c6:22:13:
a3:0f:bb:c7:ab:cb:bf:9c:15:1f:aa:14:57:a1:b2:18:c8:0c:
fc:1b:89:9b:c4:b8:72:ac:d8:a1:a2:31:99:78:95:7f:5a:8a:
df:db:11:18:76:e3:a4:e4:d3:4e:2a:b5:15:92:0e:23:89:e6:
fc:d4:ab:99:a6:ed:d4:a1:38:a2:92:e5:31:31:51:8f:8c:63:
1f:d3:e7:33:6b:43:ce:cd:f4:16:ee:e9:b4:89:7f:ab:05:8f:
e1:b1:f1:6b:90:ee:ea:87:da:8a:54:5b:0b:9e:ad:b0:f2:51:
bc:ed:6a:f5:27:31:7b:a4:43:92:70:a4:14:b2:71:9c:29:a7:
43:9d:8d:9b:36:64:25:26:6f:77:d1:19:64:b7:90:dc:e8:53:
16:77:51:a9:e1:b5:4f:7f:62:50:9b:d3:3f:92:92:6e:07:6e:
f6:ae:90:ab:bd:c0:bc:fc:1a:d6:10:11:5c:76:89:57:36:ec:
a8:ee:a8:e6:9b:16:01:9c:be:91:35:d4:a6:29:0f:4a:2a:db:
0d:97:5b:b7:70:b6:ae:3a:b4:13:9c:86:91:45:05:05:dd:07:
c1:ed:b4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org