Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/GAqqA7og_kZ3qsS-MUyKbClna9s.roa
File: GAqqA7og_kZ3qsS-MUyKbClna9s.roa (raw, json)
Hash identifier: r7zImXtrWcubhKIlQGj/3xJ72C4AaOexwYmhWZimrTg=
Subject key identifier: 18:0A:AA:03:BA:20:FE:46:77:AA:C4:BE:31:4C:8A:6C:29:67:6B:DB
Certificate issuer: /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Certificate serial: 018B1A9DDFA5691AF4D3A739FEAC2FF480F6
Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/GAqqA7og_kZ3qsS-MUyKbClna9s.roa
Signing time: Tue 10 Oct 2023 17:23:55 +0000
ROA not before: Tue 10 Oct 2023 17:23:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59460
IP address blocks: 193.91.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1a:9d:df:a5:69:1a:f4:d3:a7:39:fe:ac:2f:f4:80:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Validity
Not Before: Oct 10 17:23:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=180aaa03ba20fe4677aac4be314c8a6c29676bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:18:a4:2a:5c:3f:bc:f7:fc:5f:be:46:f9:
50:a1:36:2b:1d:85:d3:6a:78:8c:dd:cf:42:c6:44:
88:76:c5:0a:4d:f2:46:e5:b7:d0:56:8f:38:eb:1c:
c9:30:6e:60:5e:db:99:21:32:42:bb:ea:81:d7:d5:
d9:09:0a:b1:95:63:84:e5:5d:e8:e5:4c:e2:15:83:
42:61:fc:e1:6d:02:13:ba:a2:13:93:2c:d1:d8:b0:
1e:9a:72:08:23:e3:08:2c:8f:bf:28:dc:e8:49:2b:
df:01:67:b6:a5:e0:a3:75:c9:5d:7f:c6:38:8b:62:
cd:f9:83:61:4e:70:a2:a6:74:8c:81:05:a2:e6:19:
8c:21:e4:ee:3e:e2:df:50:7e:8e:b6:d2:d1:31:61:
1c:27:e6:fe:12:23:43:52:96:d2:62:b6:25:45:ec:
39:1e:b7:2e:65:97:86:ad:af:fd:6d:1e:e7:69:27:
ca:e5:6b:cd:ea:bb:91:42:58:54:a8:66:f2:91:a4:
ed:61:22:88:76:68:e4:ad:64:ac:a5:31:81:cf:25:
8d:75:9c:5b:e8:97:3c:f9:3a:f6:45:ea:c4:c9:9f:
1c:14:31:04:23:00:18:71:86:13:af:53:98:8b:e0:
da:bf:23:22:0e:8d:7d:23:54:7a:a6:52:13:07:89:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0A:AA:03:BA:20:FE:46:77:AA:C4:BE:31:4C:8A:6C:29:67:6B:DB
X509v3 Authority Key Identifier:
keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/GAqqA7og_kZ3qsS-MUyKbClna9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.91.5.0/24
Signature Algorithm: sha256WithRSAEncryption
13:28:d5:97:8f:ce:f7:6c:06:69:ec:49:7e:6e:48:5e:c4:01:
e2:b7:25:39:a6:8e:12:c3:3c:9d:82:1c:4b:c1:92:86:e0:c8:
1d:41:26:32:cd:5d:50:09:fb:f1:2e:3a:a8:c7:e5:f6:b7:4b:
63:36:9a:86:a4:7d:a2:09:ec:dd:db:92:0f:da:6b:85:0b:9a:
33:25:c1:a2:6b:45:17:9c:10:49:81:ea:d9:dc:8b:c3:5c:73:
99:38:37:c4:ad:3f:32:66:45:cf:c3:81:f0:c3:30:da:25:0f:
3d:77:23:76:0c:13:e2:9c:60:dc:ee:11:30:cc:f5:fe:c8:82:
c1:b4:3e:60:dc:49:9d:69:52:70:23:46:ba:f3:d3:e6:04:71:
e9:5c:3c:d4:f8:e7:f3:d4:8d:83:34:d6:da:bf:3d:5c:c1:5b:
6f:3d:9c:ac:18:8e:c9:c5:59:92:76:7c:88:ad:cf:1e:66:24:
5c:6c:fb:22:e9:b4:a8:32:09:75:95:2a:29:73:9e:b4:fe:0a:
d3:31:1d:f7:b7:d4:72:e6:be:c4:ff:7a:1a:fb:20:4e:93:3c:
ed:4b:a8:36:72:d8:b9:59:a2:78:11:26:b8:2e:40:0d:21:9a:
7a:3b:8e:dd:38:e6:13:10:61:b4:ec:4f:94:3b:b4:c0:a0:7b:
13:8f:dc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:27 2024 by rpki-client on console-fra.rpki-client.org