Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GvDuvF6uFw3howtSDVSqfhGnO_8.roa
File: GvDuvF6uFw3howtSDVSqfhGnO_8.roa (raw, json)
Hash identifier: 25sah57it3o7IRkryc/BWGd9Ew/i0Rfcl3Xky25SDc4=
Subject key identifier: 1A:F0:EE:BC:5E:AE:17:0D:E1:A3:0B:52:0D:54:AA:7E:11:A7:3B:FF
Certificate issuer: /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial: 018573B185E894FB6D5525C6005AFC526D36
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GvDuvF6uFw3howtSDVSqfhGnO_8.roa
Signing time: Mon 02 Jan 2023 18:14:52 +0000
ROA not before: Mon 02 Jan 2023 18:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200020
IP address blocks: 185.102.26.0/24 maxlen: 24
185.102.24.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:b1:85:e8:94:fb:6d:55:25:c6:00:5a:fc:52:6d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
Validity
Not Before: Jan 2 18:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1af0eebc5eae170de1a30b520d54aa7e11a73bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:f0:d0:9d:db:32:16:1e:9e:8b:9f:29:1f:
47:27:db:ca:51:85:64:e6:91:e8:2d:52:0b:35:8d:
f7:77:85:da:0b:a5:62:08:76:68:64:df:f1:78:eb:
8d:a4:bd:66:68:70:4d:e3:14:79:97:51:e3:16:2f:
2c:d5:62:9a:2a:d5:39:62:b7:22:03:6f:0d:7f:26:
49:9d:f2:87:2e:f9:50:0f:ab:88:02:d4:b4:91:9a:
e1:34:c0:01:47:a1:e3:c2:28:83:d3:3f:f1:76:18:
a3:f8:4a:81:79:6a:fb:0b:73:fe:c5:89:80:91:11:
be:6d:3c:bf:83:fc:fd:cf:6c:5b:eb:02:3d:10:4a:
8e:7a:7d:ae:9b:17:4e:2d:f7:2e:0e:f9:68:31:af:
9d:22:82:c8:f0:54:59:c4:11:2f:d2:87:ef:12:44:
66:08:d6:ba:0d:63:80:28:02:e5:27:d2:f9:1e:e8:
27:03:7d:54:fa:fe:31:0b:0e:34:7c:ea:f5:cf:aa:
ec:73:96:df:ad:33:1d:31:78:c0:3b:67:ed:81:5e:
2a:b7:d2:02:9d:18:e4:c6:15:cb:70:fc:80:d9:1e:
1b:d3:5c:a1:c3:5f:7a:7e:02:d4:c4:5a:a2:25:c2:
1d:1d:a4:8c:5b:8d:d1:19:71:6a:fe:55:ec:f5:41:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F0:EE:BC:5E:AE:17:0D:E1:A3:0B:52:0D:54:AA:7E:11:A7:3B:FF
X509v3 Authority Key Identifier:
keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GvDuvF6uFw3howtSDVSqfhGnO_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.24.0-185.102.26.255
Signature Algorithm: sha256WithRSAEncryption
07:84:ef:a9:b7:8b:20:fb:9c:90:7d:c3:21:a1:c9:56:be:b8:
8e:c4:09:1e:f0:10:4a:26:a3:d5:3f:b8:e8:2a:22:c3:49:7f:
be:64:b9:1d:c1:ad:6d:44:27:e6:2d:bc:ae:5a:29:b6:81:15:
ce:c4:b6:5d:62:fa:cc:d5:49:ad:ab:c3:d4:5c:60:24:e0:74:
58:2c:fb:db:95:d0:40:0e:f6:f1:14:13:79:8b:31:00:4b:f8:
b8:43:d3:ee:ec:ab:b2:35:f7:81:12:57:67:91:00:6b:db:05:
2a:22:63:2d:8d:7c:9a:0b:00:55:69:01:c4:e6:fd:0a:1f:38:
38:f5:7a:34:0a:1f:89:fb:e9:a8:5e:d4:85:0b:9f:d9:fc:20:
a6:a8:49:fa:59:14:0f:88:4d:a1:f5:c5:a0:f4:c7:b0:f7:3f:
d9:54:c3:c2:9d:e2:22:61:fe:dd:91:20:4e:ee:81:bd:3f:3c:
61:93:07:a2:35:50:79:23:a1:67:86:19:5b:80:6b:c0:9f:89:
e5:6c:eb:f7:9a:8a:cf:26:f9:71:5d:ba:b9:a8:0a:f4:32:ec:
fa:2b:e0:cd:76:c8:ad:a2:3f:50:a8:ad:7e:62:b4:73:6f:79:
c7:d7:f4:61:25:40:d1:e3:ad:e0:5c:2d:1d:a7:a6:f3:e0:a0:
13:d5:1b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:54 2024 by rpki-client on console-ams.rpki-client.org