Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/g0lMdR5QcNhDM6kAA6hymCkpr_o.roa
File: g0lMdR5QcNhDM6kAA6hymCkpr_o.roa (raw, json)
Hash identifier: rHosHgmeuxVYI0fz/126CUYY9uLoMtxVOFdd4eGTx5k=
Subject key identifier: 83:49:4C:75:1E:50:70:D8:43:33:A9:00:03:A8:72:98:29:29:AF:FA
Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial: 018FA4A623ABCF8689DC2AF325BDDB706593
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/g0lMdR5QcNhDM6kAA6hymCkpr_o.roa
Signing time: Thu 23 May 2024 08:51:42 +0000
ROA not before: Thu 23 May 2024 08:51:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 194.101.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 23 May 2024 16:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a4:a6:23:ab:cf:86:89:dc:2a:f3:25:bd:db:70:65:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
Validity
Not Before: May 23 08:51:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83494c751e5070d84333a90003a872982929affa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:2f:cf:63:08:db:b5:7b:fa:3e:1b:3a:9d:
a5:b5:c0:4b:40:8b:d2:54:3c:06:10:84:da:1a:78:
f5:3f:73:96:33:06:11:66:2e:dc:17:82:94:2c:e1:
59:46:97:49:48:59:4d:cd:24:e5:48:92:27:d0:1b:
6d:8b:bf:e0:8c:96:ff:11:0b:c1:94:2a:ed:9d:be:
e9:9f:f7:3f:fd:3a:74:8d:bf:68:a4:4b:03:65:f2:
98:5e:0e:d7:68:36:41:5a:aa:c7:73:7a:77:2f:ca:
8d:b3:32:19:64:33:1c:71:59:24:a0:59:55:bc:f3:
5d:6c:60:2b:36:6c:b9:bc:2e:66:a9:74:3e:f8:69:
d1:ce:ae:13:03:9b:71:05:c6:ae:c7:ca:ab:1c:d0:
25:53:42:6c:27:a0:6f:bb:25:f2:f7:f6:63:17:49:
5e:a3:b2:61:eb:57:12:c9:96:2c:fa:67:c8:19:d1:
dc:bf:1d:0a:26:d5:7f:38:90:e2:f7:eb:50:4a:fd:
a0:ad:7d:df:85:70:ca:19:d8:cb:73:fb:16:a7:f2:
08:a0:4a:eb:61:84:cc:99:d7:f3:68:d0:d8:09:9f:
e3:91:80:f6:57:04:20:d6:80:8e:9d:fe:2f:e9:5b:
27:d6:2c:5b:f7:06:1f:4e:fb:fa:3e:d2:00:8b:db:
b9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:49:4C:75:1E:50:70:D8:43:33:A9:00:03:A8:72:98:29:29:AF:FA
X509v3 Authority Key Identifier:
keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/g0lMdR5QcNhDM6kAA6hymCkpr_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.101.120.0/22
Signature Algorithm: sha256WithRSAEncryption
25:c8:f6:e3:e7:ea:41:3c:9f:fc:4b:1f:d5:f9:47:f6:5b:76:
d7:0d:04:1b:98:52:f3:ba:7f:32:89:24:1b:76:2b:2e:b0:2d:
15:7b:a7:83:92:36:26:f2:0d:40:04:7d:e9:42:d8:11:35:d6:
d8:0e:04:a9:ff:db:55:53:7b:0b:a3:87:9c:0d:c1:6f:76:7d:
a3:21:71:c0:43:9a:04:5f:44:f9:be:cf:f6:c3:7f:be:b4:32:
57:7c:4f:e8:4e:db:03:f3:e7:7f:9a:0f:d5:ad:cf:0e:e8:e0:
d9:4b:0c:33:80:fe:3b:dc:d6:d0:58:f2:1b:53:b5:ce:b0:7e:
44:a6:a7:10:d5:20:d9:ef:14:64:21:cc:1b:98:fc:9e:1e:f1:
c7:04:d4:40:08:01:6f:0f:87:1a:82:ea:e6:4e:79:66:8e:6d:
32:b7:89:b4:fc:a6:fe:50:46:83:f0:92:cf:f4:ba:0e:2f:5e:
d3:2c:14:35:5e:de:fa:c1:b1:de:b7:6c:ab:28:79:f3:6e:3d:
94:4f:22:af:02:fd:a0:35:c4:ef:7c:36:47:76:35:5f:c2:66:
8a:2c:22:67:85:47:2d:70:ad:18:cb:1e:aa:0a:2c:0f:f4:fd:
e3:e8:eb:2f:eb:aa:f1:77:23:dc:ea:05:4b:c6:5a:00:cd:91:
56:4f:82:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:06 2024 by rpki-client on console-fra.rpki-client.org