Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/gb5UZwSMNVaxpPLqguM_QmwS0T8.roa
File: gb5UZwSMNVaxpPLqguM_QmwS0T8.roa (raw, json)
Hash identifier: 60XHKi7KwFA4CIrBS6PYaSHugEqJW+215vi/xT22XBI=
Subject key identifier: 81:BE:54:67:04:8C:35:56:B1:A4:F2:EA:82:E3:3F:42:6C:12:D1:3F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A26E2EA4EBD9CE90FE7B97F0C59959689
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/gb5UZwSMNVaxpPLqguM_QmwS0T8.roa
Signing time: Thu 24 Aug 2023 09:31:59 +0000
ROA not before: Thu 24 Aug 2023 09:31:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49217
IP address blocks: 193.57.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Aug 2023 11:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:26:e2:ea:4e:bd:9c:e9:0f:e7:b9:7f:0c:59:95:96:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 24 09:31:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81be5467048c3556b1a4f2ea82e33f426c12d13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:97:b1:08:16:c4:5d:85:84:2d:78:db:62:f4:
57:86:f6:e8:bc:f4:cc:8c:c9:78:9b:2b:dc:96:c2:
2d:6a:45:5b:32:4f:5c:22:73:d5:55:4e:fe:c7:97:
e1:f7:68:36:10:d8:6d:69:80:94:a1:c5:cf:51:82:
1e:cc:ad:b9:41:0a:5d:f0:0a:c2:a3:e1:79:fc:32:
cf:65:20:da:d2:1f:67:4c:96:65:3d:ac:5a:6b:65:
36:68:17:dd:cf:ba:b9:96:7a:51:fb:7c:9b:7e:29:
ce:61:46:1a:02:86:dd:a8:f8:7a:0f:28:66:3a:0d:
0a:ce:0d:25:fd:11:c0:96:70:a4:e2:bb:05:a9:0c:
c6:55:0f:96:ce:28:08:ce:97:cd:4d:7b:07:1b:fd:
30:9b:11:8e:cb:97:ca:15:6a:5b:80:5a:18:38:7d:
62:f1:69:c2:1b:7d:c6:dc:d0:ad:ec:3a:f8:64:aa:
9e:84:a9:80:31:07:5b:8f:a2:de:21:01:e9:1a:4b:
be:d3:12:1f:2c:c9:58:46:bd:e2:7b:86:ba:51:86:
b4:a2:d7:23:8c:dc:41:c9:47:20:24:b3:e3:ac:6d:
67:a1:63:24:ef:c0:cf:a1:55:c8:cc:e6:0b:3c:ec:
d4:a8:91:01:45:9d:93:8f:58:0e:eb:96:b8:90:28:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BE:54:67:04:8C:35:56:B1:A4:F2:EA:82:E3:3F:42:6C:12:D1:3F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/gb5UZwSMNVaxpPLqguM_QmwS0T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.41.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5f:12:e0:0b:42:bf:c1:03:17:3c:ff:47:1d:ad:02:2b:ec:
ad:de:d5:1f:bf:69:ef:cc:2e:1f:04:4f:bf:1c:13:e9:17:e9:
eb:f7:c4:24:82:df:88:ee:76:67:6c:0d:1b:b8:9d:8d:9b:d2:
49:49:22:64:c2:26:39:dd:48:a1:5e:2d:d6:56:b0:63:26:ac:
fc:1f:f2:51:b7:01:9f:ac:b3:7e:46:74:52:af:62:cc:52:e8:
79:26:d2:e0:37:e3:5e:75:26:a2:21:2b:0f:e6:d4:e2:cb:05:
88:c4:70:9c:1b:59:2f:f7:70:bc:a0:11:91:dc:cc:e3:29:49:
a4:56:3e:f9:be:76:5a:8c:51:7f:24:b9:cf:16:d1:bd:5f:fa:
27:5a:27:bd:fc:69:27:b3:3f:ab:06:61:17:bc:4f:d8:5e:49:
c7:53:80:eb:8b:32:78:1b:ba:be:55:77:9b:0e:b7:3c:e8:78:
fd:1a:0d:0a:dd:42:32:3c:9e:b8:f6:58:42:41:6d:b6:8e:1b:
c1:49:82:f5:3f:6c:15:6b:a9:ec:62:a3:85:a9:f6:0d:ec:9c:
c9:fa:41:3a:a4:98:61:0b:7f:b6:b2:4e:8b:39:e7:86:8d:23:
a7:b9:de:0a:2c:bd:7d:55:42:9c:87:fe:98:68:a2:02:54:c3:
de:fd:92:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org