Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/GSw5p-foLBIwLBN8UH9VIYdpssg.roa
File: GSw5p-foLBIwLBN8UH9VIYdpssg.roa (raw, json)
Hash identifier: V0EBmV9U9l963z2onhSb72kIDzwmdYXW3IwQ6lRdyG4=
Subject key identifier: 19:2C:39:A7:E7:E8:2C:12:30:2C:13:7C:50:7F:55:21:87:69:B2:C8
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 018CC5DC8E727D9008CF69F74A836C372A27
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/GSw5p-foLBIwLBN8UH9VIYdpssg.roa
Signing time: Mon 01 Jan 2024 16:30:15 +0000
ROA not before: Mon 01 Jan 2024 16:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27257
IP address blocks: 213.247.46.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 16:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:8e:72:7d:90:08:cf:69:f7:4a:83:6c:37:2a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Jan 1 16:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=192c39a7e7e82c12302c137c507f55218769b2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:71:8b:a6:07:fc:e8:12:c6:26:3e:90:14:88:
5e:8e:23:08:92:f1:6e:58:9c:bc:0f:dd:fc:46:53:
79:23:0f:2c:5c:e0:65:02:f7:3c:5f:56:1a:f3:45:
c5:d5:aa:9b:18:d9:06:77:1f:cc:20:87:d9:81:1f:
2d:8a:21:ba:13:29:86:fb:61:32:25:42:99:f6:9b:
14:33:1b:6b:c8:26:ab:e4:f3:1e:a9:97:4a:fa:9c:
44:b7:4e:c4:8d:09:59:d7:eb:7f:0a:8f:3b:09:0d:
f7:5f:c6:2e:5c:fb:02:66:98:ff:60:3a:52:b6:16:
75:8f:6f:9d:86:12:8f:c7:c4:a7:5e:44:a3:73:e3:
21:0f:e9:39:a8:59:7d:36:1f:b0:c0:56:e7:64:8c:
3d:53:e3:f0:d3:46:1d:67:f1:d5:18:b7:8f:7f:65:
1e:80:d2:19:17:f5:65:74:c2:e1:43:2a:48:12:bb:
2f:69:c7:a1:2e:f8:0f:8f:5e:22:49:0e:5c:b8:1d:
82:96:43:50:1d:00:84:a7:57:14:27:62:fe:b9:66:
cf:23:38:9a:88:08:2a:59:a1:25:e6:74:b7:0f:a8:
83:3a:e1:71:34:32:09:fa:8d:d7:d7:28:9a:eb:f8:
9d:ea:ec:be:f0:4e:61:cf:47:b1:e6:50:e2:56:50:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2C:39:A7:E7:E8:2C:12:30:2C:13:7C:50:7F:55:21:87:69:B2:C8
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/GSw5p-foLBIwLBN8UH9VIYdpssg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.247.46.0/23
Signature Algorithm: sha256WithRSAEncryption
01:21:4d:80:06:bf:13:14:fe:dd:07:8b:fb:58:14:f1:d3:85:
41:2c:81:7f:d4:92:25:35:cd:86:b1:db:54:93:f3:83:90:58:
93:46:f6:dd:38:f7:2e:2a:57:59:85:93:22:f9:d2:36:b3:04:
60:fe:b0:a1:92:3e:83:da:d6:96:bd:4a:d1:a0:3d:f9:4c:2b:
ef:bc:00:0b:01:5c:cc:15:60:0d:5a:56:ad:2e:5c:56:01:9a:
45:51:76:ca:ec:a5:99:e2:f8:53:c7:91:73:99:6c:f8:f9:51:
2b:ba:21:22:77:62:f5:05:cc:e6:be:f2:f3:46:c5:79:c8:89:
d4:e3:93:66:b7:60:36:1e:79:56:6f:8d:68:78:30:d4:eb:0f:
96:01:98:1f:83:f0:f2:c4:e4:88:37:3f:50:db:ff:71:8e:c2:
89:1d:27:ba:fb:96:b9:ec:eb:1a:a2:91:2a:14:65:05:db:95:
4f:d9:4b:01:d9:f9:b0:c7:f0:8f:26:e3:b1:07:7e:ee:68:fb:
ce:81:88:ed:9c:64:f2:3c:1c:e5:9d:38:bc:91:80:1f:05:fa:
72:9c:f1:cb:a6:0a:30:95:48:a4:fd:56:68:42:7a:af:a1:06:
93:7b:5e:35:ce:77:4b:e6:d0:12:0c:cd:8f:f9:6c:fe:a8:7b:
20:b4:30:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:17 2024 by rpki-client on console.sobornost.net