Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/G1B-FL4zCPUFicH-c1YU8dxCyWw.roa
File: G1B-FL4zCPUFicH-c1YU8dxCyWw.roa (raw, json)
Hash identifier: 6UgYO0ZAJZwX+D/xvBqv3bNR/+55UcHR53OTp2b8fsg=
Subject key identifier: 1B:50:7E:14:BE:33:08:F5:05:89:C1:FE:73:56:14:F1:DC:42:C9:6C
Certificate issuer: /CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Certificate serial: 0185727A27627F78FB3C69E50820F481DB0F
Authority key identifier: 31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/G1B-FL4zCPUFicH-c1YU8dxCyWw.roa
Signing time: Mon 02 Jan 2023 12:34:46 +0000
ROA not before: Mon 02 Jan 2023 12:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198138
IP address blocks: 95.130.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:27:62:7f:78:fb:3c:69:e5:08:20:f4:81:db:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Validity
Not Before: Jan 2 12:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b507e14be3308f50589c1fe735614f1dc42c96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:8a:e9:3f:53:7a:19:48:5c:cd:13:f0:8e:
52:3c:e0:6a:7a:73:e8:b5:63:40:6e:83:48:e8:43:
da:93:a1:3e:5e:32:f2:97:12:21:3c:7e:d7:26:27:
9d:8a:ff:fd:da:1a:55:ba:6b:66:fc:2e:03:50:e5:
6a:2d:48:01:68:ea:82:df:dd:23:e3:23:8d:ea:36:
d0:d9:86:16:66:13:8d:51:98:bc:47:fa:a0:d7:36:
04:36:fd:18:59:45:72:74:c0:88:06:31:5d:99:67:
27:17:b4:e1:f7:af:ff:97:9c:a1:8e:08:9c:5f:d8:
fb:fb:b1:30:3e:c4:de:31:58:bc:10:d8:ed:93:08:
e5:25:d3:52:f0:2d:ad:46:79:93:41:70:f1:d1:af:
4c:f9:b9:53:e8:27:45:cd:35:fc:3e:22:d8:ac:30:
23:c6:b9:cc:a9:8b:95:f9:f1:8d:90:2c:9f:e2:0d:
5d:8c:0e:41:2d:0d:c2:29:13:a8:92:20:c5:1e:8e:
9a:c1:6e:95:5f:40:cb:84:b1:ad:6c:8f:68:af:b7:
ce:9d:64:33:24:24:53:d8:12:d8:31:9f:24:3a:13:
dd:cd:a0:a3:e7:e3:c2:4a:d7:27:a1:2b:39:c2:fd:
53:77:d1:6d:5f:6f:c5:63:cc:80:77:07:0d:c1:e7:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:50:7E:14:BE:33:08:F5:05:89:C1:FE:73:56:14:F1:DC:42:C9:6C
X509v3 Authority Key Identifier:
keyid:31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/G1B-FL4zCPUFicH-c1YU8dxCyWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.39.0/24
Signature Algorithm: sha256WithRSAEncryption
16:aa:64:e3:77:b0:e3:0f:e5:c3:8e:17:bc:bf:9e:62:d6:f0:
5f:ac:ac:47:36:63:8f:34:88:d4:62:7f:9e:f8:f5:8d:81:07:
a5:9a:f1:8f:b3:fa:c7:7c:00:62:f3:22:94:e5:6c:4d:42:cf:
55:7b:2a:e5:9a:94:10:bd:2e:57:8e:ff:1f:b4:53:77:da:7e:
b3:ed:80:8c:a5:56:fd:a7:ad:6b:00:ce:37:27:c3:47:26:87:
f2:65:cf:35:bb:1f:3c:b3:27:0f:51:5f:ed:99:17:ce:e1:01:
4d:c6:b8:5d:77:3c:a7:09:53:a5:d8:58:0f:0c:e0:b2:22:49:
1e:a0:fc:a4:d4:99:ea:42:7e:28:ee:be:5f:73:ce:8e:50:4e:
d5:54:d9:c1:df:2d:15:35:76:de:d3:24:75:07:d2:0c:90:a5:
59:46:97:5c:db:75:03:1e:1a:b7:5b:94:1f:69:dd:e9:b4:d3:
80:88:c5:bc:d4:11:78:27:d1:d3:da:64:fd:06:6d:2e:b4:c1:
0d:aa:2c:97:41:02:8e:48:50:a8:08:c7:94:f1:e3:36:8d:8f:
76:aa:9d:80:ce:98:cc:ff:d8:b0:6b:f2:13:a5:ee:c8:1b:a9:
7b:8f:f3:7a:70:84:00:c1:c9:84:08:98:8b:24:b6:1f:27:35:
93:c6:4c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:22 2024 by rpki-client on console-ams.rpki-client.org