Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/GxMqK5MKaaTn2jym2XRkiOox6qA.roa
File: GxMqK5MKaaTn2jym2XRkiOox6qA.roa (raw, json)
Hash identifier: hr7zBAtH7Tjp7nusvNbqf5FvmSn12bQh7VRJ7OwTjDQ=
Subject key identifier: 1B:13:2A:2B:93:0A:69:A4:E7:DA:3C:A6:D9:74:64:88:EA:31:EA:A0
Certificate issuer: /CN=e06314757548f074e84faf3fcbb7b82d82def3e5
Certificate serial: 01856EA69183C45CD1619B0E017D4588E59C
Authority key identifier: E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/GxMqK5MKaaTn2jym2XRkiOox6qA.roa
Signing time: Sun 01 Jan 2023 18:44:47 +0000
ROA not before: Sun 01 Jan 2023 18:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1103
IP address blocks: 130.112.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:91:83:c4:5c:d1:61:9b:0e:01:7d:45:88:e5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06314757548f074e84faf3fcbb7b82d82def3e5
Validity
Not Before: Jan 1 18:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b132a2b930a69a4e7da3ca6d9746488ea31eaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:bf:c6:e5:aa:ff:7b:c8:27:43:eb:12:bf:
fe:75:57:f3:66:bb:11:5f:54:de:da:9b:e2:51:a4:
eb:2e:cb:b6:ef:ae:ba:28:77:23:81:0d:31:99:d7:
72:62:83:0a:53:85:61:4c:3d:4b:c9:ac:1b:05:d2:
af:93:ef:44:af:73:1d:82:f3:fb:f4:f9:f7:f6:29:
6c:33:4c:b6:de:4b:33:b2:6c:44:7e:44:32:8c:94:
38:05:27:61:36:2f:01:c8:2b:ca:56:53:19:65:68:
cd:bc:a1:84:f1:1b:84:35:f8:25:05:b4:05:f8:cd:
22:4e:9c:a2:1c:84:4e:27:04:26:1d:fd:19:74:2d:
a7:91:3a:f7:25:a3:6f:22:82:d2:d3:f5:54:a4:8a:
be:ef:f8:03:17:b4:73:06:8a:b7:4b:39:5d:6e:44:
95:7a:e6:9b:31:9b:cd:a2:0c:8c:fe:15:de:04:cb:
ce:3f:c7:c0:ad:18:c8:8c:9f:58:86:37:ba:82:76:
6b:b1:e0:ce:c3:b4:35:63:1d:95:16:1d:18:8c:a8:
56:ad:a8:51:a7:93:38:fb:b0:93:4f:f2:76:13:a9:
bb:d6:c6:8b:f2:01:7d:9c:1f:31:92:66:f9:ec:95:
2c:9b:8e:bb:bf:cc:36:27:e6:61:5e:d8:ea:36:53:
5a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:13:2A:2B:93:0A:69:A4:E7:DA:3C:A6:D9:74:64:88:EA:31:EA:A0
X509v3 Authority Key Identifier:
keyid:E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/GxMqK5MKaaTn2jym2XRkiOox6qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:6d:ab:60:95:66:5c:10:66:c1:b5:06:22:2b:99:e2:43:e8:
c6:8b:5c:38:de:ad:0b:de:54:17:ef:e2:da:1e:19:b5:af:e9:
19:a1:6a:43:fc:2f:38:1f:f2:55:ef:fc:70:fb:03:cc:42:5d:
51:7b:56:4b:e6:9c:3f:b2:a4:0a:0d:76:25:e3:32:70:13:cd:
6e:02:c2:8d:c9:d6:4b:98:ec:64:b5:13:53:13:3b:b9:70:21:
4e:fe:5f:7a:00:72:95:da:d1:bc:47:4e:1a:8d:2f:15:b5:70:
70:62:1a:8d:8d:e6:d6:02:37:df:cc:c3:53:60:fc:8a:9b:99:
b7:06:af:fb:ff:6a:38:6a:82:23:89:bb:a7:d3:34:38:d3:fb:
6b:37:1f:7c:a7:91:51:c9:be:44:0f:b9:73:7e:13:e5:0a:25:
3a:94:87:1c:d5:86:cc:25:ab:52:c6:60:e2:31:ec:d7:42:ac:
79:67:c6:84:bf:ec:33:a9:4b:b8:80:fb:11:95:c3:f4:94:36:
0a:ab:c8:5e:1f:35:b0:d6:95:7f:32:44:2a:62:8f:18:6f:10:
1c:4c:6e:8a:f5:41:f7:a5:a9:b9:06:ec:28:69:27:7c:43:11:
27:9d:82:30:b8:ab:ee:6f:3b:53:ac:cf:1d:94:df:b3:4c:14:
94:67:86:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:53 2024 by rpki-client on console.sobornost.net