Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/gksTFlTBuil-K2lJZ_qsZ_kriIQ.roa
File: gksTFlTBuil-K2lJZ_qsZ_kriIQ.roa (raw, json)
Hash identifier: 4kIUw3E1C7DRg3HxyF0BzqE4waj2Sr+U9lcUNiTVMrc=
Subject key identifier: 82:4B:13:16:54:C1:BA:29:7E:2B:69:49:67:FA:AC:67:F9:2B:88:84
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 018D1DBDC2617D5C6CCA230CF3F4B0217BE0
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/gksTFlTBuil-K2lJZ_qsZ_kriIQ.roa
Signing time: Thu 18 Jan 2024 18:03:11 +0000
ROA not before: Thu 18 Jan 2024 18:03:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61049
IP address blocks: 147.161.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 18:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1d:bd:c2:61:7d:5c:6c:ca:23:0c:f3:f4:b0:21:7b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jan 18 18:03:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=824b131654c1ba297e2b694967faac67f92b8884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:dd:85:0d:b1:c3:f0:03:d5:7f:84:c5:b7:b4:
57:53:51:37:69:2c:34:c5:d4:73:0b:72:f6:6c:7a:
1f:db:dc:99:72:eb:1e:ca:8e:bf:d4:2a:0a:f6:e0:
7c:35:34:b9:43:e5:17:4e:f1:5a:91:28:26:3b:f4:
c2:c3:f1:d2:f3:2a:a9:85:53:fc:8f:41:af:b5:7c:
5f:9b:8b:e1:e1:b5:30:1a:01:cd:59:15:d7:dc:a8:
00:bb:26:47:cb:b7:a0:f0:c1:3f:a0:2a:6a:71:54:
64:0e:3f:a5:ad:a0:82:76:57:9e:77:1a:25:7e:67:
d2:e5:09:cb:af:a8:57:77:1f:db:4c:d5:1d:11:2a:
e7:06:21:d5:bb:1e:55:fb:8e:06:b1:c7:17:7c:a8:
7a:ab:55:0d:77:e8:a1:87:00:9c:c5:ac:d7:11:37:
9a:03:10:2d:dd:c9:aa:0e:ee:7e:3c:41:6b:65:83:
db:d6:c4:3e:55:f0:bd:24:30:64:87:42:fb:5a:ed:
4a:eb:01:77:17:81:cd:cd:75:19:3e:7b:c2:cc:c2:
ad:ce:21:28:02:81:79:ed:e4:d1:66:25:02:3e:99:
e0:0a:d9:c2:df:a8:cc:12:c2:b6:8f:77:78:67:24:
3c:5c:9e:ec:5e:28:9c:bb:0e:fc:3e:31:3d:84:1f:
96:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4B:13:16:54:C1:BA:29:7E:2B:69:49:67:FA:AC:67:F9:2B:88:84
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/gksTFlTBuil-K2lJZ_qsZ_kriIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.3.0/24
Signature Algorithm: sha256WithRSAEncryption
57:25:9f:d7:c7:45:14:9d:c8:14:1f:cf:31:2e:ab:39:60:1e:
a4:54:38:8c:bb:84:b4:60:9c:04:77:ce:b1:19:fe:a3:d2:37:
bf:24:6b:d3:88:17:1d:32:63:ab:9e:ad:34:07:50:b9:03:76:
ed:97:ea:cc:1d:ca:97:f6:85:49:43:f3:99:c2:58:2f:60:15:
85:fd:44:fd:c7:e7:31:fe:b7:79:cf:68:53:4e:72:d4:95:9b:
55:5b:03:90:82:de:af:35:b0:b9:78:28:13:62:08:fc:90:ef:
42:96:7d:38:48:22:74:05:f1:93:d5:2c:34:7c:08:02:63:44:
43:ae:04:d7:94:53:2d:9f:6a:05:28:55:37:21:94:df:a4:f6:
20:e7:e0:04:c2:76:da:14:b0:d4:86:2d:72:e2:ed:37:9e:82:
dc:90:b8:91:8e:71:45:a4:7a:99:b8:b3:84:90:75:8b:a7:68:
99:31:8b:bd:3a:3a:d8:b5:28:70:02:01:46:33:b7:03:7e:6f:
af:0e:56:13:c8:38:66:de:63:e8:32:7d:66:36:df:be:41:36:
e2:c6:ca:f7:9f:70:12:f4:ad:12:5b:a6:9f:d8:d2:a4:b0:58:
7f:3a:65:a8:9c:03:c5:f5:6b:f6:f1:89:f8:96:ab:4d:7f:ab:
a2:69:96:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:20 2024 by rpki-client on console-fra.rpki-client.org