Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/GgZtZvWOGo_-9JA02v0CYD3LRGc.roa
File: GgZtZvWOGo_-9JA02v0CYD3LRGc.roa (raw, json)
Hash identifier: 65WmOM4LAWSQ7p7I9Mszm6QCWZxy+tN5daVrfdHxOiI=
Subject key identifier: 1A:06:6D:66:F5:8E:1A:8F:FE:F4:90:34:DA:FD:02:60:3D:CB:44:67
Certificate issuer: /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Certificate serial: 01857246EC70C829C3CF1476727E8F7A2745
Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/GgZtZvWOGo_-9JA02v0CYD3LRGc.roa
Signing time: Mon 02 Jan 2023 11:38:48 +0000
ROA not before: Mon 02 Jan 2023 11:38:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25117
IP address blocks: 193.57.120.0/23 maxlen: 24
193.57.124.0/23 maxlen: 24
193.56.244.0/23 maxlen: 24
193.56.242.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ec:70:c8:29:c3:cf:14:76:72:7e:8f:7a:27:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Validity
Not Before: Jan 2 11:38:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a066d66f58e1a8ffef49034dafd02603dcb4467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:b9:d1:97:48:55:af:f0:77:aa:87:f2:2c:
16:be:02:a6:13:59:e8:1a:e8:1c:08:37:c9:e4:e4:
62:a9:34:43:78:1e:7c:58:57:4c:91:30:ab:4b:1a:
d2:f8:85:01:04:5a:80:49:83:87:1e:71:c9:12:9a:
95:fc:28:1b:7e:c3:c8:37:41:69:6c:c1:2e:b2:95:
ec:14:55:9c:b6:38:f4:6c:d7:56:4d:83:bd:b3:fd:
5b:00:80:85:d5:c8:7b:dd:72:89:f9:37:f9:91:a1:
a8:1d:f9:98:cc:db:46:f8:ba:85:8d:9b:da:96:33:
48:9f:38:1f:64:65:db:71:9f:19:6d:76:3c:67:ad:
5d:c3:57:69:27:dc:7f:f5:3b:e9:b1:3e:c3:e4:78:
46:6a:dd:33:04:ae:c1:aa:3c:92:ec:3a:04:c9:df:
50:dd:05:c4:10:8b:ae:ab:cd:62:39:c2:9a:ba:1e:
82:7c:81:50:c6:b8:0b:cd:d2:cc:e2:ed:0e:b3:18:
01:82:48:4a:5d:41:9d:9a:a2:14:5b:17:ad:0d:3a:
65:0a:f6:60:05:ff:29:e3:23:7e:34:1f:13:3d:d4:
8a:65:63:8c:5c:8e:f5:e8:ef:a6:15:b9:f6:41:f4:
2c:8d:7b:ec:47:4e:07:10:a1:e6:81:e9:29:a9:aa:
f7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:06:6D:66:F5:8E:1A:8F:FE:F4:90:34:DA:FD:02:60:3D:CB:44:67
X509v3 Authority Key Identifier:
keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/GgZtZvWOGo_-9JA02v0CYD3LRGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.242.0-193.56.245.255
193.57.120.0/23
193.57.124.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:5f:73:0c:6b:47:25:f3:aa:68:9c:bf:16:cd:d5:e0:26:f7:
e2:a0:3a:41:0f:d0:1a:84:72:69:fa:43:25:69:7d:49:aa:de:
5f:58:bd:f1:46:3d:6f:71:0f:48:6a:03:22:50:20:19:9c:f2:
d9:54:e1:ec:f6:90:04:a9:bb:bf:42:26:03:bc:0c:a5:6a:a3:
92:7d:21:58:f6:19:e2:d9:79:78:4d:4e:f6:88:92:1f:2a:1c:
09:e2:81:14:96:a2:92:cc:fd:41:a1:9b:af:5f:b1:85:1b:ff:
1b:79:2e:a7:c6:b8:f3:ef:e4:bb:cd:45:22:34:62:ed:ba:0b:
c9:2c:d9:cf:16:62:d2:4d:87:86:44:75:fa:29:5c:bf:1a:62:
7e:e1:0a:5f:ce:92:bb:7a:d7:56:d7:5d:a3:b4:d6:ca:52:15:
95:06:96:29:35:0d:ab:0b:dd:f4:49:48:cf:17:2e:fe:04:c4:
91:2c:95:cc:d5:0c:c2:e3:ec:17:3d:14:18:16:51:f5:be:74:
c0:a0:6a:c4:18:b9:4a:b6:26:c5:fa:00:5f:16:7a:45:5a:72:
3f:91:73:69:fe:f1:3e:6c:a9:d0:20:a7:b4:b3:22:41:29:69:
42:3e:26:b1:c9:8e:ea:18:6c:3d:dc:4a:e3:f5:7c:4e:0b:24:
56:a5:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:15 2024 by rpki-client on console-fra.rpki-client.org