Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GXriyg-Dpoxv0-g2c83s3bTly1A.roa
File: GXriyg-Dpoxv0-g2c83s3bTly1A.roa (raw, json)
Hash identifier: 67RPeR3xh51XqE39ucX3tp1CI3KXb0fDtPFu6dmaKDc=
Subject key identifier: 19:7A:E2:CA:0F:83:A6:8C:6F:D3:E8:36:73:CD:EC:DD:B4:E5:CB:50
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEDF444A9971C519DCC213D7D26B5B
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GXriyg-Dpoxv0-g2c83s3bTly1A.roa
Signing time: Sun 01 Jan 2023 06:04:54 +0000
ROA not before: Sun 01 Jan 2023 06:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208750
IP address blocks: 178.16.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:df:44:4a:99:71:c5:19:dc:c2:13:d7:d2:6b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=197ae2ca0f83a68c6fd3e83673cdecddb4e5cb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dd:63:7f:cb:dc:4c:9c:8a:d6:c8:31:4d:1b:
70:22:71:16:72:12:7e:7d:eb:52:85:bf:bb:be:a0:
16:25:6e:da:37:45:b1:d9:95:f8:b7:26:e9:28:b1:
15:18:e1:ab:b9:64:e6:e4:aa:9b:1a:5d:45:9a:4d:
db:5a:08:aa:14:c6:80:61:19:c1:fa:62:b4:4a:8f:
f6:5a:68:ec:c3:c7:32:c9:d8:79:8b:3f:7b:94:87:
ef:3b:d5:3d:5d:94:32:97:f1:1f:84:07:69:ad:67:
b1:b7:03:c2:db:cd:52:e1:56:eb:f2:7f:5a:81:1e:
d0:21:12:64:22:a7:d0:03:7e:87:88:f1:af:2e:19:
0f:db:c5:de:87:1f:d1:96:9b:f4:0a:6c:b7:4f:38:
7a:c5:8c:a3:09:af:e0:27:5e:28:46:69:44:95:10:
74:53:37:cc:81:9f:38:0b:bf:3e:2a:07:68:76:8e:
38:a8:fa:53:32:15:c7:a6:7b:19:3b:ab:4a:19:22:
07:ef:e5:8e:b2:15:eb:48:d5:7f:b9:6b:7b:d7:ab:
d7:ab:3e:a2:5e:30:fc:85:bc:79:95:cf:61:fd:dd:
94:e5:db:03:32:f7:94:a5:2c:87:3a:e3:32:3c:ae:
2f:40:68:67:e2:d2:83:64:d5:f0:b5:ea:3e:b3:67:
71:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7A:E2:CA:0F:83:A6:8C:6F:D3:E8:36:73:CD:EC:DD:B4:E5:CB:50
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GXriyg-Dpoxv0-g2c83s3bTly1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.124.0/24
Signature Algorithm: sha256WithRSAEncryption
83:db:5e:68:29:98:0e:3c:08:1a:76:54:83:17:d2:49:ad:ca:
9f:78:2d:c3:c2:d9:2b:97:d0:62:88:28:31:2c:7e:7b:79:7b:
3c:38:52:ce:16:58:4a:68:03:dd:22:b0:a1:04:89:45:a2:3b:
6d:0b:ca:31:79:fd:51:28:e3:ef:b3:88:3b:0f:f0:31:a2:59:
db:9c:ca:97:e2:35:45:80:73:a9:d8:4b:7d:34:32:37:c4:c4:
c4:66:4c:a8:0a:e2:4c:51:5e:1e:55:76:bb:d0:fa:ab:2a:6e:
1f:45:3e:6c:fd:1f:8f:ba:e8:e9:8f:03:37:4e:db:37:c3:83:
ac:2b:50:34:98:28:93:6a:93:da:85:d5:0c:61:38:64:0c:13:
8c:0d:31:16:99:a5:99:a7:74:f9:ae:68:cd:d2:fb:0c:91:7d:
ae:73:15:9f:59:99:fd:57:43:8a:40:f4:84:f5:2c:6a:50:9e:
5f:b4:22:bf:80:31:d3:cc:79:d0:3c:de:09:d5:f6:4b:80:99:
e5:a4:05:9e:69:cb:eb:5b:2f:54:33:43:ff:06:46:d0:9e:69:
0f:62:5c:9a:95:24:ed:92:15:ab:78:e9:a5:7c:eb:61:61:a3:
d9:e2:7e:80:71:7b:1e:7f:b4:16:1c:ca:c4:d7:b5:d6:1e:e5:
8b:da:9a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org