Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/GVP30EerakxG9yIK6p80PzeRhf4.roa
File: GVP30EerakxG9yIK6p80PzeRhf4.roa (raw, json)
Hash identifier: isTen7u1QFhSAtVCCyydaZrm/sQNfExcfSoNIBPyZZg=
Subject key identifier: 19:53:F7:D0:47:AB:6A:4C:46:F7:22:0A:EA:9F:34:3F:37:91:85:FE
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01877C6AB806311DACF225548602784B9A4A
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/GVP30EerakxG9yIK6p80PzeRhf4.roa
Signing time: Thu 13 Apr 2023 20:59:41 +0000
ROA not before: Thu 13 Apr 2023 20:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 31.193.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 May 2023 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7c:6a:b8:06:31:1d:ac:f2:25:54:86:02:78:4b:9a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Apr 13 20:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1953f7d047ab6a4c46f7220aea9f343f379185fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:7c:c2:59:f8:22:ff:5b:9c:9b:1d:8d:97:
aa:9e:02:70:0b:f6:50:f2:1e:2f:69:77:b7:12:7b:
75:8d:cf:45:98:b6:d7:c4:ca:61:21:6b:b2:3b:82:
f8:b8:86:fc:27:8b:d1:8d:a9:4a:d7:ea:99:c9:1b:
73:9d:1b:f9:cd:34:ba:80:1c:61:f3:63:a4:0f:44:
17:c8:1f:a7:7e:a4:99:00:bf:a7:b2:2a:d9:7f:50:
32:3f:d1:cf:10:7d:47:c2:5f:09:73:e0:c3:a1:a7:
96:e1:0b:dc:21:ac:ae:3f:09:7e:32:d1:79:ce:23:
f6:21:c6:9a:d8:9e:07:88:f4:2e:8e:63:de:b8:e3:
f5:c3:cf:7e:2a:f6:bc:a0:92:e9:ee:6b:64:4e:99:
b1:4d:b6:91:57:44:70:c5:4d:ba:7e:55:13:36:4f:
cd:25:bc:52:ed:b9:56:53:5d:71:76:08:59:ca:3f:
69:43:3a:e9:01:5b:13:c8:40:26:06:22:11:b0:da:
4a:56:01:7c:88:be:01:f1:7c:15:f0:d5:7c:09:e7:
87:4d:77:8c:f4:55:66:31:f3:8c:da:cb:17:22:0d:
0a:90:b3:d3:0a:d3:99:4c:bd:be:a8:3a:c9:2e:56:
76:eb:b0:39:18:c5:88:48:20:5c:e7:8e:b3:3a:15:
7d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:53:F7:D0:47:AB:6A:4C:46:F7:22:0A:EA:9F:34:3F:37:91:85:FE
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/GVP30EerakxG9yIK6p80PzeRhf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.240.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:6d:ff:fd:76:1c:fa:8f:75:5a:54:bb:70:24:c3:43:ec:ef:
52:b2:74:07:64:ba:6c:55:06:5b:05:e2:1b:96:f3:ef:5f:48:
dc:e1:76:70:5a:b6:08:1a:f4:bd:10:47:da:4a:2f:72:b8:96:
75:8d:a1:1b:ea:c6:0d:3e:82:49:27:29:43:19:bc:f4:b4:b1:
1b:ec:85:59:5a:47:dd:5a:d9:cf:f4:45:58:24:eb:6a:ad:fc:
7f:62:2a:a2:a0:c5:c1:51:26:8b:31:6f:a7:88:f2:aa:ac:bc:
f4:79:7a:14:b8:1f:48:bd:89:d8:53:71:f3:d0:e3:3f:4c:d5:
68:e2:e4:0e:60:13:3a:2d:45:c8:b9:34:0e:d4:73:e5:0c:22:
9d:80:78:52:c1:b9:67:d4:28:a5:a5:b8:31:10:f7:87:97:69:
42:2d:5c:5b:42:dc:63:14:e7:f5:b6:10:40:eb:09:56:16:7f:
36:40:60:47:c5:56:2c:7c:70:5c:53:66:14:96:07:b7:9f:bd:
84:cd:25:50:e2:1e:b3:ad:cb:b7:19:6f:dc:fe:1d:74:fb:36:
f3:ac:5f:02:d3:1b:97:d8:95:ad:7a:ed:55:8c:d9:28:a4:8a:
ad:1f:88:67:1e:90:61:5f:ae:8a:ec:56:1b:08:a2:58:6c:a1:
e1:b0:c9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:37 2024 by rpki-client on console-fra.rpki-client.org