Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/gfmGD7QQBfeiCjJB80EEGP6c9hQ.roa
File: gfmGD7QQBfeiCjJB80EEGP6c9hQ.roa (raw, json)
Hash identifier: 6t+0QIt2QjP1WVm3cPtqrr63T2/AwxzMPpRzBRuq2PM=
Subject key identifier: 81:F9:86:0F:B4:10:05:F7:A2:0A:32:41:F3:41:04:18:FE:9C:F6:14
Certificate issuer: /CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Certificate serial: 0189B5B9C5C90965582F581443632275BEFD
Authority key identifier: E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/gfmGD7QQBfeiCjJB80EEGP6c9hQ.roa
Signing time: Wed 02 Aug 2023 10:09:58 +0000
ROA not before: Wed 02 Aug 2023 10:09:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210949
IP address blocks: 193.42.101.0/24 maxlen: 24
193.42.103.0/24 maxlen: 24
193.42.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:b9:c5:c9:09:65:58:2f:58:14:43:63:22:75:be:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Validity
Not Before: Aug 2 10:09:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81f9860fb41005f7a20a3241f3410418fe9cf614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2e:e5:5d:57:79:0e:e0:4e:0c:17:27:3f:24:
21:cf:4c:05:f2:e9:03:fc:31:80:c0:14:94:50:46:
ad:96:69:3a:38:6f:52:ed:79:60:c9:2b:7e:ec:ed:
74:07:13:ab:3c:15:ad:69:5b:d8:3f:f6:2e:e8:b8:
ca:88:12:1d:8d:e7:9f:4c:8e:ee:ee:c2:26:36:f7:
77:1a:83:27:49:6c:1b:bd:4b:32:49:d5:03:21:a3:
b5:e0:8e:3b:1c:28:bb:f9:03:39:b9:38:cc:e2:03:
9f:85:09:f0:d8:27:1e:7c:83:38:3f:0b:c7:55:d8:
2e:1f:be:22:a8:1b:bb:07:f7:eb:ce:a6:7c:1a:15:
3b:d6:9a:53:0d:e3:e2:67:6c:05:86:41:b7:3d:e1:
28:9b:0e:37:59:58:15:75:16:c4:7c:fa:d8:e7:73:
98:58:b3:46:ec:d2:b3:d4:28:4e:d9:7c:69:9d:bd:
e0:8c:f6:8b:28:43:66:8e:06:06:55:4b:4e:6d:26:
8f:96:b2:ba:3d:09:e0:55:b8:f3:6f:eb:93:48:1a:
6e:95:b3:f9:8f:f1:88:3e:60:d3:71:e7:af:e8:11:
09:17:ef:31:43:69:80:5d:a9:05:89:81:51:1b:bc:
20:b7:de:63:8c:c3:d3:05:8f:8e:26:95:c8:72:a2:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F9:86:0F:B4:10:05:F7:A2:0A:32:41:F3:41:04:18:FE:9C:F6:14
X509v3 Authority Key Identifier:
keyid:E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/gfmGD7QQBfeiCjJB80EEGP6c9hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.101.0-193.42.103.255
Signature Algorithm: sha256WithRSAEncryption
55:cf:a4:a2:ac:f9:7a:33:67:8c:e4:41:e1:83:9f:ff:a1:3f:
54:8d:d6:0a:08:8d:2c:0e:85:c6:0d:c5:22:1d:ba:6d:e2:7d:
cd:01:84:48:d1:5a:ec:7a:7d:76:46:51:af:d6:f7:27:2b:80:
f3:17:cd:93:cc:bd:8d:96:d0:fd:02:8a:13:e9:be:22:b7:a0:
97:e2:33:89:34:ef:e5:df:17:91:a1:5e:df:2c:34:96:60:fa:
d4:f7:58:0e:21:12:cc:18:85:fa:71:08:95:fc:e2:ef:36:54:
bb:40:f6:df:07:4d:01:39:8d:a7:e7:c2:79:e8:42:5a:51:13:
cc:52:1c:19:d9:e6:06:35:9a:7a:12:60:15:21:e9:47:79:cb:
c5:b9:5c:7b:e0:52:3a:ba:1e:f5:30:26:c8:c3:1e:ed:a2:67:
a1:96:1e:13:02:60:a2:93:e5:42:a1:ab:5b:37:8c:e5:35:7a:
d0:68:e7:de:0b:b8:11:ec:0f:63:aa:57:e3:ca:f2:10:a5:84:
27:25:da:18:5f:bd:35:68:65:c9:2d:9b:a5:1a:00:90:bb:48:
eb:78:c3:4b:73:6d:9e:5b:95:8b:43:69:74:c6:e6:50:f3:08:
c4:77:4b:df:28:91:f2:2c:b0:33:fb:72:43:1b:18:ac:67:bb:
79:bc:fe:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:21 2023 by rpki-client on console.sobornost.net