Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/ggumxSMtNb_cu8gJQgteLcuxv4A.roa
File: ggumxSMtNb_cu8gJQgteLcuxv4A.roa (raw, json)
Hash identifier: XB3UQjnFJIrhVrjPnVnff7Oe36WqwAyPKSsGYZfIwqc=
Subject key identifier: 82:0B:A6:C5:23:2D:35:BF:DC:BB:C8:09:42:0B:5E:2D:CB:B1:BF:80
Certificate issuer: /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial: 01856D789DD5E662D20827FCD834AD1238A9
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/ggumxSMtNb_cu8gJQgteLcuxv4A.roa
Signing time: Sun 01 Jan 2023 13:14:59 +0000
ROA not before: Sun 01 Jan 2023 13:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.3.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:9d:d5:e6:62:d2:08:27:fc:d8:34:ad:12:38:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
Validity
Not Before: Jan 1 13:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=820ba6c5232d35bfdcbbc809420b5e2dcbb1bf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:66:f6:db:87:53:a3:84:20:22:3c:02:c2:
2f:c5:71:6b:36:c3:b1:82:6e:bf:a1:28:c3:64:be:
f2:02:57:45:b6:80:9f:80:dc:41:5e:84:cc:1c:e4:
e7:c8:7e:8d:54:80:f1:c6:0c:16:f3:8f:79:d8:db:
77:48:f6:45:ac:3d:42:db:73:1a:c9:50:4b:5a:8c:
85:0e:77:78:ad:5f:51:d8:19:95:43:cf:56:db:4a:
ed:d6:b2:47:8c:11:aa:43:c6:a1:df:5a:1b:88:8d:
bc:76:af:98:ca:07:4f:d4:5b:3d:9a:f5:fe:18:65:
1e:5e:05:f7:09:75:a5:ec:02:09:a2:5b:83:51:68:
67:ef:7d:4c:bf:b0:ef:9a:6c:13:36:7d:44:f6:0b:
a2:22:f2:7d:c9:02:82:86:21:bc:6c:62:7a:5f:49:
40:f5:20:3f:60:8e:63:97:1d:16:ee:26:60:72:3d:
c5:e3:f1:85:cb:76:db:9e:4d:4e:56:98:37:92:29:
5f:a4:78:22:6d:84:38:07:ee:d4:9d:9e:81:19:9c:
e7:82:d1:cd:2a:8c:62:a5:1e:77:c1:18:e9:6e:10:
1c:95:1f:ec:5f:16:3c:0d:ca:a7:c5:59:dd:e6:4a:
83:fe:9a:21:25:38:c6:ae:ee:72:60:2c:c8:40:0d:
7d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0B:A6:C5:23:2D:35:BF:DC:BB:C8:09:42:0B:5E:2D:CB:B1:BF:80
X509v3 Authority Key Identifier:
keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/ggumxSMtNb_cu8gJQgteLcuxv4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.160.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:77:67:ab:51:6a:a1:20:15:47:20:b4:9b:52:2e:3e:09:70:
f8:25:fd:1f:b1:98:2f:39:a4:8a:aa:7f:af:89:22:71:2f:b9:
86:4b:73:ba:6c:b4:5e:3e:98:ad:09:f8:6e:07:43:4c:1f:f7:
09:df:d0:93:e7:5d:9f:dd:eb:e8:bb:87:72:08:19:1c:60:81:
05:6b:7d:19:64:9d:eb:18:a4:da:d7:b4:ee:5e:6b:3e:d5:b0:
9c:6f:77:44:3d:aa:05:51:50:c7:82:31:ed:25:6e:ca:9d:a6:
10:3c:94:3a:aa:5f:45:5a:13:6a:58:5f:38:ad:6d:f2:94:79:
38:74:58:1c:93:a5:aa:aa:06:37:4d:0c:15:7d:1d:90:33:98:
d2:c3:d5:cf:b0:03:33:2c:91:18:23:c4:f4:86:9c:10:51:53:
35:0d:63:db:cd:40:12:cf:f0:40:3e:5c:33:33:ef:df:8e:88:
f0:b5:b1:ed:1a:7d:d2:04:20:52:4e:b6:3d:2f:b0:dd:58:02:
54:31:17:69:48:df:9d:30:55:fb:95:bf:87:c9:38:5d:79:54:
eb:7c:82:46:a7:28:9a:88:7e:e8:76:24:e9:f2:2b:5e:ea:41:
7b:30:ef:8b:71:3b:eb:33:c9:01:2b:37:7d:c6:ae:6e:0b:49:
bb:de:20:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:17 2024 by rpki-client on console.sobornost.net