Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/GxcL5zgAqg5QOPLxi4BasAHK1n0.roa
File: GxcL5zgAqg5QOPLxi4BasAHK1n0.roa (raw, json)
Hash identifier: nJCOl2rG4MgInusyo4OgtjsGLbNM9A5MVXTJs1WDaSk=
Subject key identifier: 1B:17:0B:E7:38:00:AA:0E:50:38:F2:F1:8B:80:5A:B0:01:CA:D6:7D
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 0188E215BF0BD43C5F3EF1AA120D46791674
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/GxcL5zgAqg5QOPLxi4BasAHK1n0.roa
Signing time: Thu 22 Jun 2023 07:50:55 +0000
ROA not before: Thu 22 Jun 2023 07:50:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 2a05:541:114::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 Jun 2023 17:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:15:bf:0b:d4:3c:5f:3e:f1:aa:12:0d:46:79:16:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Jun 22 07:50:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b170be73800aa0e5038f2f18b805ab001cad67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:91:6d:ef:8d:30:cc:ea:ab:85:5d:b9:69:
53:b0:8e:1c:ef:77:cc:80:64:8d:8d:32:01:2a:07:
ac:55:cc:4e:20:8f:6a:0b:9a:30:9b:47:33:9d:c2:
80:66:01:98:c3:86:8a:58:7e:1d:1a:13:c5:db:56:
e1:00:48:a1:33:3f:c3:20:74:7b:cb:17:6b:ed:8b:
be:65:b2:3d:77:73:10:87:31:2c:17:81:95:9c:99:
c6:c6:11:80:e4:fc:4f:7a:d2:37:28:2a:fc:f8:c2:
75:b3:a3:73:5a:99:a0:ed:0e:2b:b3:9e:55:6d:7d:
49:ee:df:74:4c:23:d9:33:0f:75:36:3f:ab:d6:44:
cd:cd:cf:02:2e:b4:88:ed:8a:a4:41:27:d3:46:54:
fa:ef:e6:e4:b5:29:73:62:7f:36:a9:fc:29:c1:79:
da:18:f5:9c:6e:92:6a:d2:75:60:4a:d1:ca:96:f5:
9b:b4:bb:6d:73:24:b4:ca:7c:84:ff:9f:1f:50:fd:
c5:24:03:05:f6:ed:50:09:c2:e2:eb:d3:51:ec:78:
2d:5c:90:73:8f:27:7a:10:0a:4d:15:b2:26:87:8c:
9d:3f:dd:a7:07:12:a6:3b:57:67:4f:55:84:5c:a8:
7c:29:e2:27:b1:e8:59:90:da:1d:d1:bb:df:24:81:
78:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:17:0B:E7:38:00:AA:0E:50:38:F2:F1:8B:80:5A:B0:01:CA:D6:7D
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/GxcL5zgAqg5QOPLxi4BasAHK1n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:541:114::/48
Signature Algorithm: sha256WithRSAEncryption
30:49:4b:e5:0a:87:c8:9a:36:e3:41:a9:a7:b0:71:11:32:11:
c3:77:ba:ae:55:07:87:f1:1e:8d:cf:57:5c:40:79:c4:b4:3e:
5e:00:af:90:89:50:2f:76:33:c6:f0:48:bb:91:83:2c:37:62:
37:d3:15:41:1e:06:9b:ac:9f:e8:a0:1d:28:f8:ca:02:fb:d0:
55:4f:ce:ab:2f:11:f2:2a:9f:94:63:1c:2d:54:91:42:4c:35:
f0:c1:bd:31:e5:fb:db:82:5f:42:17:08:38:73:7b:7a:b7:6a:
54:b8:be:75:a9:ee:b5:8a:bc:10:84:2f:2c:70:ab:99:70:d4:
e3:e2:91:02:17:35:ed:f6:d3:e2:d1:69:b1:32:ae:43:4e:d6:
a0:01:ec:cd:21:9f:71:7b:81:36:8d:ed:70:32:4b:29:0f:58:
75:f6:56:a9:f8:c6:73:3c:a6:8d:e9:81:ba:e3:55:25:11:d3:
14:79:56:bc:4b:21:d6:6c:93:76:40:e6:9e:0f:0c:7d:47:87:
78:5c:1a:82:50:f4:01:54:52:03:0e:b6:8b:76:49:af:d7:b0:
a6:63:25:c2:77:4a:cb:73:a2:6f:f6:72:13:89:9e:e2:e2:c5:
ec:38:1f:18:8c:33:53:09:17:da:a2:90:6d:4f:7e:24:9c:9d:
10:e1:ed:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:18 2024 by rpki-client on console-fra.rpki-client.org