Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/GDUOgMQ_6Y5M4Oo11FnrZvd2nkE.roa
File: GDUOgMQ_6Y5M4Oo11FnrZvd2nkE.roa (raw, json)
Hash identifier: AjTWjOmAmqcJ0SfRANZO1eiqsB00WUZpzshh5bNYnwg=
Subject key identifier: 18:35:0E:80:C4:3F:E9:8E:4C:E0:EA:35:D4:59:EB:66:F7:76:9E:41
Certificate issuer: /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial: 01857315C4381EBF25FD23B3D035D3E9AF41
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/GDUOgMQ_6Y5M4Oo11FnrZvd2nkE.roa
Signing time: Mon 02 Jan 2023 15:24:44 +0000
ROA not before: Mon 02 Jan 2023 15:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202205
IP address blocks: 78.41.80.0/22 maxlen: 24
195.78.108.0/23 maxlen: 24
195.78.118.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:c4:38:1e:bf:25:fd:23:b3:d0:35:d3:e9:af:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Validity
Not Before: Jan 2 15:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18350e80c43fe98e4ce0ea35d459eb66f7769e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d9:fb:c4:18:1b:75:31:d9:b0:34:db:e9:ff:
4f:a8:65:aa:4f:8b:32:5f:f7:07:05:1c:23:47:81:
c1:3f:9d:1c:7f:17:5f:c9:f0:c3:1f:78:8d:8e:6e:
4c:e8:ae:37:1d:d9:d9:f9:af:b4:81:9d:0d:66:50:
c7:b7:5d:e6:a6:54:13:11:e5:3e:5f:66:b6:f2:53:
ce:44:01:4d:ed:35:81:60:bd:7c:c4:95:23:a5:fe:
c1:4c:bc:14:e2:6d:4a:19:3e:47:3c:ca:76:8f:be:
50:0d:be:dd:c1:8c:63:4b:27:4b:88:2f:cf:ab:f9:
f3:12:e8:d1:f4:7f:5b:4f:9b:25:45:e6:47:25:58:
db:84:c5:82:36:00:44:bb:0e:85:59:12:13:13:87:
57:88:91:b9:d0:39:1f:6a:4f:c7:0f:0c:53:a7:87:
82:a1:e8:40:7e:99:5a:6e:30:75:d7:08:6b:4c:1c:
88:89:db:2c:1f:54:50:47:7f:75:58:02:ba:eb:d0:
59:e3:70:75:de:4f:a5:9b:42:e7:41:a1:b4:58:de:
d1:ae:11:4c:7d:d7:f4:2f:46:78:85:66:b3:48:26:
a6:5a:40:bc:72:f0:0a:20:48:eb:0d:5a:90:0f:6e:
b9:18:9a:f3:78:5d:4f:fa:10:d7:a4:2d:e3:57:ba:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:35:0E:80:C4:3F:E9:8E:4C:E0:EA:35:D4:59:EB:66:F7:76:9E:41
X509v3 Authority Key Identifier:
keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/GDUOgMQ_6Y5M4Oo11FnrZvd2nkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.80.0/22
195.78.108.0/23
195.78.118.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:0f:1d:03:57:b8:2b:8f:d2:33:dc:9e:6a:aa:05:b5:e0:49:
3c:10:85:da:98:d4:38:8f:c4:2b:cb:cf:00:c4:38:df:09:60:
ea:4c:f6:dd:a3:44:60:f2:2a:36:ca:94:1c:4e:7c:89:f2:46:
84:f1:f1:9e:87:32:07:ef:6c:de:c7:19:69:1a:e1:9f:d4:40:
00:f5:ba:65:3a:22:47:3f:7f:04:6b:16:1c:c3:5b:96:aa:f1:
64:cd:bb:7e:76:34:df:de:af:c2:92:94:27:4a:4e:bf:3b:47:
75:19:67:b4:23:13:67:44:ba:2a:1e:71:e0:fe:b5:48:37:ae:
d2:90:f5:4b:06:64:a2:8a:98:bb:f5:e2:4a:71:54:17:49:93:
1a:1e:c2:4c:3a:6d:ad:64:73:74:23:3a:14:de:86:83:e6:e2:
8d:22:42:05:82:4a:40:bf:8d:0f:32:68:61:01:c5:a8:7a:26:
91:72:53:6f:1e:2f:0a:28:69:fa:d5:0b:b5:6e:c2:53:95:6a:
2c:eb:5c:f9:99:cd:3b:ef:ce:41:0a:ed:9a:8e:48:3f:d4:60:
b9:7a:f6:c2:39:bb:f7:5f:97:f0:4c:38:86:61:73:0f:94:45:
1d:71:d0:92:ad:41:84:ea:de:74:7a:a3:3f:e0:f1:39:ab:e4:
9f:7f:69:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:53 2024 by rpki-client on console-fra.rpki-client.org