Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/GsjIkdTShm9rpJa3czj47wIkops.roa
File: GsjIkdTShm9rpJa3czj47wIkops.roa (raw, json)
Hash identifier: oXLsA/6Km3DLdZ4s4tNaUbXHDBJrd+myLHMvMAZcz70=
Subject key identifier: 1A:C8:C8:91:D4:D2:86:6F:6B:A4:96:B7:73:38:F8:EF:02:24:A2:9B
Certificate issuer: /CN=c754c6069e49d24931379a4c92456385922b46ce
Certificate serial: 018B09874CB002BA8C657950662E5EB8EC66
Authority key identifier: C7:54:C6:06:9E:49:D2:49:31:37:9A:4C:92:45:63:85:92:2B:46:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1TGBp5J0kkxN5pMkkVjhZIrRs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/GsjIkdTShm9rpJa3czj47wIkops.roa
Signing time: Sat 07 Oct 2023 09:45:43 +0000
ROA not before: Sat 07 Oct 2023 09:45:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a0f:4a80:7::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:09:87:4c:b0:02:ba:8c:65:79:50:66:2e:5e:b8:ec:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c754c6069e49d24931379a4c92456385922b46ce
Validity
Not Before: Oct 7 09:45:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ac8c891d4d2866f6ba496b77338f8ef0224a29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:55:94:b5:94:65:c8:06:9b:8a:79:90:54:25:
76:44:f2:e1:17:08:55:7a:96:f0:c2:e6:08:2a:fa:
3d:7c:1a:49:e1:f2:b4:1d:b0:f3:ca:bc:58:e1:a2:
ab:11:7a:e4:e8:0b:75:dd:37:06:28:07:e7:e5:b1:
8e:a8:f3:f1:c4:a4:c9:15:66:84:ab:b3:28:54:10:
45:1a:83:2d:05:a3:85:78:09:cf:57:1d:88:fe:74:
89:8b:60:71:57:7d:f1:28:5c:49:51:6a:e1:05:50:
f0:52:99:82:55:9f:7b:c6:b9:88:16:c0:3e:ad:f8:
71:ef:fb:56:49:b3:2b:c7:56:5d:4e:31:46:67:66:
9e:b2:85:95:da:40:df:32:e3:cb:e1:0f:55:88:45:
2a:0f:c7:e8:76:23:61:d8:5c:5c:23:40:e4:4c:a3:
39:00:28:d9:8f:88:1d:09:8a:b3:10:83:50:8c:58:
51:c0:ae:a3:5a:52:65:a6:d5:a6:c2:7a:c2:de:ac:
ba:a9:15:f4:02:58:1f:a2:10:51:4e:3b:5a:de:5d:
56:5a:5a:b7:d6:c4:6f:77:be:ae:39:a5:d4:21:80:
c3:d0:3f:9c:99:75:83:d3:3e:70:a4:df:b4:bb:88:
8f:c7:ba:4e:41:d7:42:b7:a2:5a:06:47:56:3b:5f:
9a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C8:C8:91:D4:D2:86:6F:6B:A4:96:B7:73:38:F8:EF:02:24:A2:9B
X509v3 Authority Key Identifier:
keyid:C7:54:C6:06:9E:49:D2:49:31:37:9A:4C:92:45:63:85:92:2B:46:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1TGBp5J0kkxN5pMkkVjhZIrRs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/GsjIkdTShm9rpJa3czj47wIkops.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/x1TGBp5J0kkxN5pMkkVjhZIrRs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4a80:7::/48
Signature Algorithm: sha256WithRSAEncryption
0d:4f:47:3a:d2:ca:c7:00:3c:21:2e:4f:81:a8:ae:3c:a3:64:
5a:84:1e:62:25:ff:94:4d:2d:9e:2b:a7:70:8a:9e:53:aa:25:
ce:d3:af:ed:60:41:ca:b4:65:aa:ba:08:76:de:a9:ef:08:0b:
96:64:e7:5d:e0:1f:36:80:8b:69:be:9b:06:3b:a5:c7:41:f0:
f9:80:51:80:9e:43:6b:70:eb:94:93:77:9e:50:ac:59:aa:f8:
96:49:4a:98:6d:95:97:ed:84:9a:97:54:21:6b:83:ca:b5:29:
7b:d5:3f:0a:06:0c:4e:54:27:f7:90:a1:e8:db:d8:d2:ca:bf:
8f:06:4c:2e:cd:78:bf:dc:b2:5b:a4:d4:4e:c7:f3:f3:fc:9d:
7d:24:1f:86:cb:9a:f3:db:c0:02:c6:3a:0e:ed:de:d0:22:c7:
e9:17:50:7a:7d:fd:07:f2:1c:ef:cf:2c:b3:3b:fe:3c:56:0f:
ed:ef:5e:88:bd:78:6a:0e:35:d2:d7:7f:bd:23:3c:02:73:dd:
1d:99:7e:1f:71:4c:92:95:28:5f:b3:03:e8:2a:a7:0f:30:ea:
b5:a0:51:92:3c:19:db:e5:bd:dc:c5:94:8d:5a:5f:38:68:df:
3d:bc:7a:9a:b7:9a:74:23:f5:63:b0:34:c1:9a:17:86:52:ca:
1f:4c:96:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:21 2024 by rpki-client on console.sobornost.net