Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/gLdrDDoBkTZf3TTQ69m_JDgBk48.roa
File: gLdrDDoBkTZf3TTQ69m_JDgBk48.roa (raw, json)
Hash identifier: 2v/oaXNQhC873ClmnDHcdraL/sUV9G+qMutSaUz233I=
Subject key identifier: 80:B7:6B:0C:3A:01:91:36:5F:DD:34:D0:EB:D9:BF:24:38:01:93:8F
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 018935077D55F0EE1CC8344D00C73A68FF66
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/gLdrDDoBkTZf3TTQ69m_JDgBk48.roa
Signing time: Sat 08 Jul 2023 10:23:50 +0000
ROA not before: Sat 08 Jul 2023 10:23:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11161
IP address blocks: 116.206.94.0/23 maxlen: 24
116.206.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:35:07:7d:55:f0:ee:1c:c8:34:4d:00:c7:3a:68:ff:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jul 8 10:23:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80b76b0c3a0191365fdd34d0ebd9bf243801938f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c6:34:0b:dd:53:57:3e:ab:95:aa:b2:66:f2:
26:62:5f:5f:08:3f:55:7a:24:96:6c:15:6a:c1:53:
84:7f:1a:a3:7e:49:58:c8:02:c6:a9:06:a8:8e:39:
2d:9c:85:28:dc:07:c4:8e:77:2e:37:14:24:c9:51:
19:ad:32:f1:02:5f:74:37:0d:e0:30:70:b7:8e:75:
6c:82:da:b4:97:17:25:58:47:0c:cc:3c:fb:eb:a7:
a3:29:72:90:88:31:6e:b5:92:70:f5:32:e4:a1:85:
6e:1b:3c:61:01:d1:79:f7:a2:0b:06:7a:03:41:91:
97:e2:fe:ee:cc:78:92:ec:6f:09:a4:33:b3:a4:43:
46:10:63:c4:a0:46:19:d4:c4:fa:f9:47:ed:19:32:
e9:27:fd:25:ec:eb:49:5a:68:0b:1d:34:00:0c:5a:
90:35:74:c1:60:f0:b4:b2:7b:71:28:93:9d:5b:59:
02:26:ee:64:58:b3:55:8f:65:f1:8c:b4:72:36:18:
a1:8a:15:f5:3f:c1:1a:27:60:3b:ea:0a:ab:43:f7:
fc:0d:a8:7c:50:6b:73:dc:9e:3c:42:79:ae:5c:1a:
18:85:bc:73:e7:c5:18:81:16:7d:ce:88:c4:cf:c1:
1d:30:63:b9:b6:bc:d1:3d:dc:97:70:28:75:79:51:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B7:6B:0C:3A:01:91:36:5F:DD:34:D0:EB:D9:BF:24:38:01:93:8F
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/gLdrDDoBkTZf3TTQ69m_JDgBk48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.93.0-116.206.95.255
Signature Algorithm: sha256WithRSAEncryption
87:70:92:7d:89:76:7f:e2:25:5e:49:68:e6:b9:f2:6f:f9:02:
8e:9b:7b:ea:ed:49:ff:de:f9:ee:cb:6d:75:37:36:c5:6e:ec:
f4:a3:c9:5e:c4:d2:ac:43:53:df:ad:0a:3d:8d:3d:5b:6a:5c:
35:17:82:38:d9:a1:ab:6a:b0:44:4d:e2:a3:9e:94:94:d7:12:
dd:2f:f9:5b:9f:c6:36:c9:0f:02:4d:9e:33:37:ac:8b:f0:ab:
9f:26:90:34:46:17:4c:11:ca:01:97:c1:d1:fe:b9:6a:86:b4:
0c:3f:56:19:1e:81:b2:f8:3a:0c:2b:68:be:32:7f:c1:01:ee:
90:e5:0a:3e:4a:44:53:51:61:9c:ea:1b:0b:1c:84:d5:f4:02:
40:ce:7e:75:94:ac:f7:90:81:6a:29:c3:8d:7c:f2:95:95:21:
ea:90:d9:67:88:41:59:93:51:52:f6:37:e2:8f:85:64:a7:09:
93:a8:03:3c:d5:73:af:43:a2:b0:d0:6f:38:5a:5b:43:14:dd:
21:52:5f:8a:5a:31:91:56:f2:9f:76:e5:24:4c:16:2b:34:39:
05:09:98:8a:3d:97:51:70:cb:60:15:f4:ce:50:1a:b9:df:4a:
21:55:24:35:03:53:aa:2e:d4:41:a5:5e:cd:94:c9:f4:5f:d9:
fe:c0:5a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net