Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/GmL7_mrv9MUexNB97okdvZEO9W4.roa
File: GmL7_mrv9MUexNB97okdvZEO9W4.roa (raw, json)
Hash identifier: 985vbi+DbLmWXYZgBzsM/taSLh/ci8xXnU5oTolHGWA=
Subject key identifier: 1A:62:FB:FE:6A:EF:F4:C5:1E:C4:D0:7D:EE:89:1D:BD:91:0E:F5:6E
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 01857142D9464721AF629307F36D24D2168A
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/GmL7_mrv9MUexNB97okdvZEO9W4.roa
Signing time: Mon 02 Jan 2023 06:54:44 +0000
ROA not before: Mon 02 Jan 2023 06:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47447
IP address blocks: 193.38.156.0/22 maxlen: 22
45.87.136.0/22 maxlen: 24
2a0e:fe80::/29 maxlen: 48
2a0d:6940::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:d9:46:47:21:af:62:93:07:f3:6d:24:d2:16:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jan 2 06:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a62fbfe6aeff4c51ec4d07dee891dbd910ef56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:65:9b:e3:6d:c9:d3:5b:3e:bb:05:f8:dc:
ee:a9:72:2b:fe:79:f3:ba:11:40:07:8a:54:7c:f6:
30:7e:f2:7c:56:6c:90:6a:71:cc:e1:59:44:f5:78:
ae:b4:e6:cd:78:0d:39:31:49:ed:44:05:1f:da:87:
fb:5f:df:57:8c:7d:6c:40:3a:db:5a:4e:8f:6f:f7:
58:68:2e:07:37:6e:c5:29:6c:38:83:20:ae:f0:aa:
f5:ca:08:69:f1:e0:23:69:84:3a:35:2e:3e:d9:d7:
05:f9:29:82:e1:29:63:ee:0f:7e:9c:a1:0d:c0:91:
4c:e7:ed:6b:92:a9:f3:ab:21:19:86:b1:6e:9d:69:
97:c9:43:0c:57:fd:93:8a:f9:1d:13:d2:19:44:d6:
1d:50:a7:4a:41:65:c9:0f:2e:0f:c2:12:94:31:d9:
57:ea:c3:43:ab:53:b2:0d:3c:28:f6:8d:20:b5:a4:
d6:61:fe:30:69:50:8f:c6:5e:db:c9:6e:6e:fc:4f:
d9:f9:34:63:12:87:e4:87:01:b1:98:3d:47:4b:56:
90:8a:67:5b:a9:e3:e4:90:39:65:d3:e2:dc:e2:1c:
73:5d:8f:b0:f4:d5:48:e8:79:ff:b6:ed:45:05:0f:
8d:a5:c9:b9:7f:35:cf:9f:7c:cd:02:51:89:74:eb:
ad:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:62:FB:FE:6A:EF:F4:C5:1E:C4:D0:7D:EE:89:1D:BD:91:0E:F5:6E
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/GmL7_mrv9MUexNB97okdvZEO9W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.136.0/22
193.38.156.0/22
IPv6:
2a0d:6940::/29
2a0e:fe80::/29
Signature Algorithm: sha256WithRSAEncryption
77:b9:8a:91:34:89:a9:78:f5:6c:70:32:cc:b6:46:0f:9f:31:
5a:70:d9:ac:59:9a:2d:6a:de:0c:80:33:f3:8c:ee:a2:09:4f:
1d:74:22:94:45:af:e4:74:05:c3:2d:22:b1:8b:4d:e6:52:a5:
3a:8f:d6:21:9e:d6:d9:f9:fc:e0:51:a5:17:58:91:83:17:42:
1d:a8:ec:3c:07:3e:11:80:30:fa:36:f2:d0:a2:0f:48:97:d6:
cd:2e:b0:03:84:06:5a:4a:d7:a3:09:23:e8:29:0d:f8:b3:28:
c9:18:3a:66:89:62:f8:8a:c0:8f:fa:86:09:e0:7e:13:af:d8:
e1:30:67:c7:5b:2e:dd:dd:87:34:b4:a3:1d:c9:14:10:08:c7:
b7:ba:04:86:38:31:d5:5f:ff:9a:9d:e1:0a:50:14:05:c0:39:
eb:31:7b:1d:38:7f:93:4c:0f:5d:81:48:d2:9f:27:fc:71:7b:
cf:f8:0e:cb:82:37:f4:63:a4:99:40:a4:6a:bb:9c:7b:d1:44:
c9:c6:2c:12:7b:e0:11:c0:b6:b7:9d:ba:98:9d:b8:9c:38:e5:
7f:68:12:63:47:bc:7c:9d:96:5b:65:64:e1:db:75:91:84:16:
c5:c7:51:01:8f:a1:34:c3:d9:a6:0a:72:eb:98:b0:57:8e:1c:
16:64:13:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:44 2024 by rpki-client on console-ams.rpki-client.org