Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/GVAXk1UEd5gS3hXGpTj95a5d2cs.roa
File: GVAXk1UEd5gS3hXGpTj95a5d2cs.roa (raw, json)
Hash identifier: A5elF6SXK/8sM77wQR+NoLlDnSNWXaLpaBf7dlbVwtE=
Subject key identifier: 19:50:17:93:55:04:77:98:12:DE:15:C6:A5:38:FD:E5:AE:5D:D9:CB
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0192512AE65372B220E725F88AD3A3F8B6F4
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/GVAXk1UEd5gS3hXGpTj95a5d2cs.roa
Signing time: Thu 03 Oct 2024 06:56:58 +0000
ROA not before: Thu 03 Oct 2024 06:56:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207388
IP address blocks: 91.92.43.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 07:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:2a:e6:53:72:b2:20:e7:25:f8:8a:d3:a3:f8:b6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Oct 3 06:56:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=195017935504779812de15c6a538fde5ae5dd9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:17:46:99:46:54:e5:48:ba:e1:13:71:0f:ad:
c3:c8:3c:94:65:e4:1f:42:66:ce:e3:65:36:61:a3:
fe:fd:3c:21:b7:32:c6:7b:eb:34:71:95:26:9f:0a:
95:3d:d6:81:6d:03:6a:db:25:e1:b5:2e:84:a1:2b:
5c:e3:7d:c7:a4:1f:fe:f8:8e:6e:89:a9:48:f9:6b:
bd:6c:25:ad:e3:c0:20:65:cb:9d:e0:f9:75:c6:a7:
2d:12:e3:df:ff:cc:aa:e0:78:ac:4e:8e:6c:41:79:
98:11:2d:55:07:31:40:2d:e7:98:f3:b3:0e:e8:d9:
47:da:89:87:25:85:ec:ff:fb:1e:2a:8d:43:dd:9e:
32:81:d2:e9:db:25:92:0e:14:66:4e:bb:b2:3b:b1:
c0:a9:18:57:c7:92:a8:04:e2:a8:b1:a5:76:5d:1d:
d4:a6:90:19:f2:cc:e6:5d:06:cd:5b:f3:a3:84:7e:
8e:f3:97:2d:6f:2a:40:b5:f8:0d:f5:c7:cb:44:e2:
0b:74:b7:b6:22:1d:37:fe:2b:2b:15:3b:e7:ce:e0:
77:58:89:f7:65:be:71:db:40:a4:81:6d:a5:52:7c:
23:cd:d7:ea:ac:93:b0:d8:91:cd:6a:b1:cc:ef:9d:
98:e5:8c:79:d4:9a:38:57:68:a8:ff:dd:cb:d1:88:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:50:17:93:55:04:77:98:12:DE:15:C6:A5:38:FD:E5:AE:5D:D9:CB
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/GVAXk1UEd5gS3hXGpTj95a5d2cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.43.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
28:32:a1:6b:71:4c:df:1f:45:87:d3:83:7c:c4:07:2b:46:73:
71:81:04:9c:f3:c4:41:40:1a:b1:6b:c9:fd:a6:76:d0:17:7f:
d0:c8:51:08:4b:a2:71:5e:a2:d3:b0:d5:ce:21:5e:d8:6c:ac:
53:1d:24:18:1e:ff:83:26:d8:22:b6:70:ef:21:5b:b3:96:50:
7d:4f:61:0e:f9:65:ef:5b:9a:94:83:de:2e:18:2f:98:d8:0f:
89:f5:c1:58:ef:fe:74:7c:04:21:14:2d:c7:84:dd:66:fa:68:
d5:ce:1e:d8:26:1d:1f:90:6f:35:1a:90:71:c3:f6:40:38:ad:
62:37:d9:d7:c5:d4:47:89:e5:fb:7f:a3:7f:71:d7:02:f8:54:
5b:f1:70:f8:c1:52:3d:a6:99:01:11:1a:b3:4a:b3:ec:1d:78:
bb:d3:16:7e:8a:4a:50:31:b8:86:0b:83:79:dc:1b:67:a7:15:
d4:36:25:c5:f5:a8:a5:99:d2:ac:76:75:10:5e:48:18:cd:1e:
87:9c:d0:cf:c2:88:a4:4d:5e:8d:4a:2e:26:ff:64:94:83:d5:
ea:4c:34:4c:7c:2d:cc:59:3a:b6:4e:3d:52:93:1f:12:0a:e9:
c9:b5:1c:e4:51:e5:45:d8:6a:82:22:2f:e0:85:08:f1:cb:d0:
96:62:c9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 10:44:17 2024 by rpki-client on console-fra.rpki-client.org