Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/gKD-f-ZkUofCT2oOyJzMCntZSX0.roa
File: gKD-f-ZkUofCT2oOyJzMCntZSX0.roa (raw, json)
Hash identifier: U1pQYlDEHVW2zvzGmrPDS/lLJNMo3z+2RCLVym70vcQ=
Subject key identifier: 80:A0:FE:7F:E6:64:52:87:C2:4F:6A:0E:C8:9C:CC:0A:7B:59:49:7D
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 01856D4AB74703F2D43077EA5EE1AF8F8FD6
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/gKD-f-ZkUofCT2oOyJzMCntZSX0.roa
Signing time: Sun 01 Jan 2023 12:24:51 +0000
ROA not before: Sun 01 Jan 2023 12:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41998
IP address blocks: 194.76.4.0/24 maxlen: 24
194.76.3.0/24 maxlen: 24
194.76.2.0/24 maxlen: 24
194.76.7.0/24 maxlen: 24
194.76.6.0/24 maxlen: 24
194.76.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:b7:47:03:f2:d4:30:77:ea:5e:e1:af:8f:8f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Jan 1 12:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80a0fe7fe6645287c24f6a0ec89ccc0a7b59497d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b2:82:8f:b8:7b:04:38:81:04:ef:a3:56:ce:
8a:06:28:80:f5:d6:09:bd:63:92:97:ce:29:15:f6:
81:64:4f:88:25:59:a1:10:40:5a:92:9c:2f:60:1d:
13:69:52:ed:05:05:db:7b:15:3b:c3:ad:df:e3:d4:
eb:ee:c4:da:c2:d1:14:1b:6b:84:f4:dd:09:73:90:
75:6d:46:dc:31:9b:45:43:34:66:de:04:c3:85:cd:
f7:82:1e:c8:29:96:71:33:52:c9:bf:79:df:34:73:
53:22:45:4d:28:7d:e0:eb:dc:14:ee:70:83:11:e4:
1b:35:13:8b:fb:96:44:22:0c:fb:5f:48:34:71:52:
12:54:21:dc:a5:d0:a1:24:f7:9a:21:b5:21:40:76:
9b:e5:87:4c:b6:55:4f:14:fc:e3:c7:d1:01:8d:b4:
ef:71:4c:41:b8:87:49:63:71:22:2e:33:2a:b5:b1:
67:ba:66:ab:e2:2d:04:1f:ae:74:4a:bf:2c:3a:4e:
5f:9d:26:f1:1a:c5:27:d4:62:68:a8:b6:db:04:95:
4b:ed:1a:b5:87:a4:99:fa:a5:e1:e8:58:f6:7a:c2:
79:ec:f2:b2:be:a8:d2:63:cc:e2:59:72:2e:9c:5b:
00:64:6e:59:83:e4:3c:4b:1c:df:71:97:4a:76:32:
28:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A0:FE:7F:E6:64:52:87:C2:4F:6A:0E:C8:9C:CC:0A:7B:59:49:7D
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/gKD-f-ZkUofCT2oOyJzMCntZSX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.2.0-194.76.7.255
Signature Algorithm: sha256WithRSAEncryption
b3:06:2a:81:6b:db:0a:78:57:ec:e4:45:fd:0c:90:97:04:7a:
da:c4:3a:0d:04:50:f9:27:19:6b:6a:7d:3c:8b:e0:4b:6e:b2:
5a:a4:08:d8:65:61:31:fd:e5:72:08:b8:46:66:95:8d:dd:9c:
c4:43:fe:df:a6:54:37:fd:ac:d3:3c:db:e3:6e:ce:c7:c6:f9:
e2:3b:7f:e4:45:09:8c:ec:38:8f:f2:8a:e7:ab:99:52:bd:e2:
69:d6:a0:ab:fd:fe:cb:df:db:db:a3:4d:05:35:df:70:09:48:
c2:82:05:9e:be:e0:24:66:7f:1d:f6:de:30:2d:6a:3b:e9:12:
f9:61:5f:b9:f8:bd:d1:b3:da:3d:21:c7:15:56:3e:c2:b3:2e:
d7:05:86:8e:78:5b:c9:cf:32:fd:5c:ca:ea:9b:ca:09:91:6f:
ef:00:4b:ef:54:08:73:eb:3f:b4:39:e0:ce:0f:12:6a:68:75:
75:6c:44:13:a0:bf:55:1c:51:95:08:12:38:c0:6f:be:78:df:
8f:54:3f:1e:21:1c:ff:16:8b:59:fb:7d:8f:d9:fd:2c:74:0a:
1b:de:72:28:ff:24:5f:4c:c8:d7:00:fb:51:4e:21:94:98:20:
98:c2:43:4d:d6:44:c7:e9:62:2d:30:3d:c1:0e:09:2e:4c:0b:
4f:20:64:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:44 2024 by rpki-client on console-fra.rpki-client.org