Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/Grreqkz21BIlnerxUy3KW-ULBe8.roa
File: Grreqkz21BIlnerxUy3KW-ULBe8.roa (raw, json)
Hash identifier: za40IALs39bAipFVL7e4VqcyxCBjBUNK5nIA6ghvMK8=
Subject key identifier: 1A:BA:DE:AA:4C:F6:D4:12:25:9D:EA:F1:53:2D:CA:5B:E5:0B:05:EF
Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d
Certificate serial: 01856D5CEB192D0E7FA8EB99F7D7E900ED08
Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/Grreqkz21BIlnerxUy3KW-ULBe8.roa
Signing time: Sun 01 Jan 2023 12:44:43 +0000
ROA not before: Sun 01 Jan 2023 12:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48286
IP address blocks: 185.241.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:eb:19:2d:0e:7f:a8:eb:99:f7:d7:e9:00:ed:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d
Validity
Not Before: Jan 1 12:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1abadeaa4cf6d412259deaf1532dca5be50b05ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:5e:80:c3:be:ee:a9:01:03:54:19:77:61:
42:5d:25:9f:68:1b:7d:d6:bc:c7:2c:61:f8:1f:58:
f0:c3:67:7b:52:d2:0a:58:d1:35:55:4e:c3:5d:c9:
e4:6c:98:52:8b:1e:0d:de:47:81:1a:bd:86:a4:83:
a3:61:85:0a:65:3f:a5:e5:4c:a9:07:3f:bc:40:54:
82:5c:c4:ca:54:3c:2c:eb:52:28:f4:a3:b4:1f:56:
c8:8c:4a:8c:6b:89:a7:b2:a6:37:b9:81:72:fb:c9:
42:d4:3d:08:ee:4a:57:9e:db:71:6e:50:bb:76:d6:
99:d2:17:01:d1:d0:79:ab:33:0d:bb:13:55:ae:37:
f7:c6:d5:8a:c5:d5:ab:72:6e:8d:57:b3:2e:3a:a6:
a8:14:d1:fc:30:9e:c6:4f:a4:79:90:d9:b5:ef:3c:
41:ea:01:cc:35:27:76:4b:96:2a:e7:1f:ae:9f:82:
fc:a1:58:71:ca:8f:33:ab:d4:d2:51:1b:ad:aa:b9:
fe:53:6f:2d:b7:0d:fe:13:c2:63:1d:c9:f6:2e:56:
d8:02:94:eb:00:01:1e:b8:3c:ec:4d:c5:63:f8:40:
b9:fe:51:f6:dd:fb:d8:3f:42:1b:78:7b:19:9b:df:
b3:43:9d:ff:28:7c:6d:a4:bd:65:90:0e:85:e8:71:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BA:DE:AA:4C:F6:D4:12:25:9D:EA:F1:53:2D:CA:5B:E5:0B:05:EF
X509v3 Authority Key Identifier:
keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/Grreqkz21BIlnerxUy3KW-ULBe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.56.0/24
Signature Algorithm: sha256WithRSAEncryption
83:69:14:bb:8d:0f:a3:2c:aa:2b:66:66:cb:8a:1e:53:50:f7:
97:7c:02:8c:d7:0e:ac:6b:b6:b5:08:d3:44:f7:c0:01:de:b9:
cc:49:9d:64:e1:67:48:68:ba:45:0b:ed:75:a8:07:63:4b:e5:
c8:0b:1e:a7:98:04:7b:e1:25:9b:94:fb:41:7c:1c:6e:92:2a:
0b:51:18:02:88:92:5b:cf:e8:1b:ae:69:13:ab:2a:30:ef:eb:
15:60:35:30:d9:b7:c2:60:1d:37:1a:b2:7f:e4:80:74:4d:2f:
4b:de:42:07:47:f2:5d:49:20:eb:f2:e1:25:dd:0a:c3:25:90:
c0:7e:05:a8:29:31:d8:64:98:e7:7e:30:fc:43:b9:c2:6e:7b:
a1:7b:ec:79:f7:53:20:a5:0b:2c:55:98:65:07:50:73:c5:3b:
53:56:98:34:9e:f7:e0:64:9d:2f:95:c3:4b:6c:29:f6:31:25:
49:5b:a1:63:1c:5e:80:8f:62:b2:a2:43:f5:d9:4a:45:b4:8b:
bd:ee:67:c0:e9:2a:3d:9f:8f:f7:96:ef:73:94:40:b3:c5:54:
9c:97:f5:71:44:c5:67:5b:fd:f9:06:cf:5d:ca:9f:1e:ef:c0:
79:58:9a:40:b7:04:1d:82:34:c1:bb:88:90:5b:b5:eb:ab:ad:
fd:f2:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:25 2024 by rpki-client on console-fra.rpki-client.org