Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/4J4FAysrWSZFyn2iKsQgrQL3-EI.roa
File: 4J4FAysrWSZFyn2iKsQgrQL3-EI.roa (raw, json)
Hash identifier: WEm7sCubY4PaoJXh0F8hvfXq1DA9um5jfmT3gtRTL3k=
Subject key identifier: E0:9E:05:03:2B:2B:59:26:45:CA:7D:A2:2A:C4:20:AD:02:F7:F8:42
Certificate issuer: /CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
Certificate serial: 018570C2C5CD9E6E398E4AD00F74ABB42459
Authority key identifier: 1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/4J4FAysrWSZFyn2iKsQgrQL3-EI.roa
Signing time: Mon 02 Jan 2023 04:34:50 +0000
ROA not before: Mon 02 Jan 2023 04:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196948
IP address blocks: 193.105.155.0/24 maxlen: 24
2001:67c:2980::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:c5:cd:9e:6e:39:8e:4a:d0:0f:74:ab:b4:24:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
Validity
Not Before: Jan 2 04:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e09e05032b2b592645ca7da22ac420ad02f7f842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7d:19:3c:ae:de:fd:36:82:42:35:63:d4:95:
6a:33:34:cc:8b:42:99:72:8f:19:a4:ba:84:e6:3e:
93:b5:c1:d1:18:43:ab:72:f2:5e:cd:80:cb:80:5e:
88:8a:af:4f:69:67:38:fd:6d:d8:79:9c:ef:f7:56:
5a:bb:24:81:bf:c5:78:d0:7b:4f:e5:08:65:f8:8a:
b2:0a:f4:9f:84:33:cf:48:49:42:dd:46:a3:cc:57:
b2:20:54:98:2a:ca:da:92:d4:0b:6c:a8:56:7e:9e:
c9:c9:75:98:6a:d6:57:a1:09:a6:78:7d:5b:66:9e:
fe:e8:9d:0b:e8:2d:46:af:24:fc:bc:ee:8a:42:5e:
7a:4b:0d:30:94:99:a8:92:dd:9e:a4:0a:af:6c:e9:
be:f0:78:65:31:ee:d6:83:39:76:6c:27:f3:14:af:
15:bd:c3:a5:bb:cd:5f:bc:d9:dc:f1:97:8c:d4:1c:
7f:e4:5e:d3:34:84:d7:60:a4:b4:e6:b3:24:42:c6:
3c:9b:06:df:3a:d6:bd:54:fe:b5:fe:6b:ac:aa:e6:
44:fb:5f:ab:12:18:90:b5:f6:bb:fa:20:eb:85:3b:
cb:54:19:e8:38:60:2e:63:30:da:ee:b8:25:aa:97:
47:7a:72:6d:0c:1c:0b:4c:91:09:0f:b1:73:de:de:
71:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9E:05:03:2B:2B:59:26:45:CA:7D:A2:2A:C4:20:AD:02:F7:F8:42
X509v3 Authority Key Identifier:
keyid:1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/4J4FAysrWSZFyn2iKsQgrQL3-EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.155.0/24
IPv6:
2001:67c:2980::/48
Signature Algorithm: sha256WithRSAEncryption
80:cd:92:3d:1f:e1:14:1d:0c:24:c4:d3:55:19:be:06:7d:1a:
96:06:22:a7:d9:ca:b1:dd:15:e2:16:af:dd:57:a1:7f:88:9c:
fa:e4:c9:39:16:e1:54:dc:1d:d1:76:2a:dd:4b:64:79:6e:ab:
d7:2f:e1:08:fb:da:ba:d1:e8:60:81:75:6c:55:c9:59:90:da:
2f:de:21:ef:7b:52:3a:98:3f:dc:14:ea:af:47:1a:e6:b9:dd:
ad:eb:d7:e9:9a:11:6f:a9:07:08:06:3a:c1:81:84:f8:44:15:
7d:19:96:46:92:d4:8c:68:82:61:0a:d8:db:12:3c:23:41:83:
98:d8:d4:2e:06:76:4f:79:6f:d4:dc:16:8e:f4:a1:d2:49:f0:
38:7b:63:31:88:28:a8:44:41:10:07:b2:1a:0f:d2:98:a4:60:
e3:23:08:74:4e:ef:f0:10:51:d7:2a:c0:c0:2b:94:c8:99:43:
09:c0:67:cd:89:54:c6:1c:ea:75:21:b8:d7:01:a5:87:d2:87:
6d:42:cb:2b:ef:65:5f:5b:1d:00:68:5c:f8:c5:d1:7b:21:95:
2b:12:10:89:94:25:d8:66:ad:66:87:eb:11:26:df:68:b9:d5:
1d:1d:ab:81:b1:d9:5a:8c:45:31:c9:f5:a4:0f:95:fc:24:c2:
60:31:90:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:12 2024 by rpki-client on console.sobornost.net