Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/Gb9CrTzeFrgUYH5NTUBCuTlxLao.roa
File: Gb9CrTzeFrgUYH5NTUBCuTlxLao.roa (raw, json)
Hash identifier: OLQi5h4w4U4LAH2OvVybCICm85eldsqpo+pOGryY+Kc=
Subject key identifier: 19:BF:42:AD:3C:DE:16:B8:14:60:7E:4D:4D:40:42:B9:39:71:2D:AA
Certificate issuer: /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial: 0185723A463717A309C35DC78824FE1F92D1
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/Gb9CrTzeFrgUYH5NTUBCuTlxLao.roa
Signing time: Mon 02 Jan 2023 11:24:59 +0000
ROA not before: Mon 02 Jan 2023 11:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202441
IP address blocks: 194.15.224.0/22 maxlen: 22
178.223.224.0/19 maxlen: 19
2a0c:b240::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:46:37:17:a3:09:c3:5d:c7:88:24:fe:1f:92:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Validity
Not Before: Jan 2 11:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19bf42ad3cde16b814607e4d4d4042b939712daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:57:78:7f:01:01:ce:02:a2:63:d6:3a:3b:
75:6d:6d:e8:87:0b:bb:ce:1b:f2:e6:19:87:9b:18:
07:cb:e8:68:66:31:7a:2e:d6:0c:24:20:9c:9f:8e:
c7:6e:b0:74:48:65:94:62:29:aa:76:33:79:d7:63:
19:61:c0:4c:78:9b:02:8a:9a:53:b9:29:2f:ed:a4:
22:c2:14:a5:92:33:df:f7:a3:24:60:58:b1:68:6f:
16:59:a5:f2:61:71:1a:be:53:b6:4f:2e:23:0d:e4:
e1:e9:09:23:d5:77:ac:5c:fd:c8:48:29:81:7c:65:
7b:83:0b:29:3b:f4:93:28:a8:90:68:08:c8:12:ab:
f0:4e:de:51:6d:68:d2:33:7b:f8:fe:0d:33:bb:08:
93:db:34:73:13:98:17:11:31:2c:df:8f:4c:ab:6e:
1a:9e:d9:3d:e4:93:04:9a:bc:66:a4:78:27:fb:fd:
00:79:47:7d:46:e2:68:e2:af:ed:6b:8b:90:32:8d:
3a:41:2e:5e:52:49:45:1c:17:e1:49:80:f7:c6:56:
35:cf:ce:16:3a:ef:29:9e:78:29:02:00:9d:13:c7:
76:7c:48:e9:cc:b8:42:03:e3:86:82:42:5c:58:f9:
5f:73:07:c6:55:a8:9e:df:10:f0:ef:6b:21:60:b7:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BF:42:AD:3C:DE:16:B8:14:60:7E:4D:4D:40:42:B9:39:71:2D:AA
X509v3 Authority Key Identifier:
keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/Gb9CrTzeFrgUYH5NTUBCuTlxLao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.223.224.0/19
194.15.224.0/22
IPv6:
2a0c:b240::/32
Signature Algorithm: sha256WithRSAEncryption
b8:b3:98:1c:56:60:34:80:cd:82:35:fa:e5:80:20:b0:8f:b3:
d5:0a:aa:f4:eb:93:aa:19:c1:cd:79:a3:10:22:55:87:08:3f:
9f:b7:37:66:65:2f:fc:4d:ca:9a:0c:41:c9:99:7e:a1:64:1a:
7a:18:d5:23:9b:bd:7b:a3:87:17:3f:58:56:0d:aa:88:e5:14:
50:11:c7:f6:30:8c:37:ce:2c:b7:66:b1:20:62:ac:05:dd:89:
0a:80:52:36:7e:a0:e1:e0:f6:6b:04:17:98:72:28:5d:2a:b0:
64:d8:ca:d2:28:f0:c1:84:48:7b:ab:c8:16:e3:9a:b3:9d:ba:
f0:c9:d8:f7:3e:2d:2d:ce:65:d7:34:c0:45:f1:91:9a:a7:13:
63:fb:b5:70:fd:d3:93:25:f3:6f:4e:81:ac:51:97:ef:e1:6f:
b9:46:9b:d2:05:0a:21:ad:c6:74:4a:0b:df:fa:92:b5:38:97:
b5:a5:c0:50:8f:ff:f9:d5:25:90:3d:14:92:db:ce:63:44:a5:
4a:1c:43:cf:d4:50:97:92:a6:61:4a:43:66:bf:61:bf:2c:d8:
2f:b7:63:8a:7b:c7:de:17:3d:83:07:a5:6f:99:74:71:fe:42:
19:ae:7f:69:c4:47:12:e3:18:8f:5d:7d:c5:ba:a6:b8:27:b3:
87:33:df:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:56 2024 by rpki-client on console-ams.rpki-client.org