Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/G8ktrCxCUP7ziBLyUxP6uS2gkMU.roa
File: G8ktrCxCUP7ziBLyUxP6uS2gkMU.roa (raw, json)
Hash identifier: ukbY7UxU3CF7jQI3neV6JzFwsgS1NHx43BUo98xa6Os=
Subject key identifier: 1B:C9:2D:AC:2C:42:50:FE:F3:88:12:F2:53:13:FA:B9:2D:A0:90:C5
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 0185728343040785AA46871CEE39C1571B34
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/G8ktrCxCUP7ziBLyUxP6uS2gkMU.roa
Signing time: Mon 02 Jan 2023 12:44:43 +0000
ROA not before: Mon 02 Jan 2023 12:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 141.6.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:43:04:07:85:aa:46:87:1c:ee:39:c1:57:1b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: Jan 2 12:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bc92dac2c4250fef38812f25313fab92da090c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bc:8a:70:61:f9:2b:ca:b1:90:d5:5f:e7:2e:
e2:00:33:d9:a8:d5:30:c2:29:62:dc:06:63:15:cf:
0d:78:d5:bf:3f:b9:38:9a:6b:6c:62:84:b7:82:f6:
78:c5:69:77:56:19:62:58:5f:c3:68:a7:73:0c:0c:
0b:bb:4d:24:78:9e:34:40:ee:f0:74:0d:16:b5:88:
87:50:ef:42:cb:be:f4:65:13:54:bf:23:a6:b1:3c:
1b:0c:b0:81:6e:30:b1:57:97:15:a2:fa:10:9b:77:
b4:28:73:6b:34:b4:83:66:96:52:30:d8:73:54:65:
fd:6d:45:65:a0:8d:bd:a3:37:94:c1:2a:93:4b:63:
76:42:fa:5d:12:c6:b0:2f:5b:51:8b:1c:bb:f2:c0:
0e:2d:4f:91:3f:e7:b3:51:03:a7:93:6b:56:30:da:
0f:f0:73:4e:68:cd:43:b6:b5:00:93:6d:89:af:4f:
bd:76:d5:9b:da:78:4d:f4:3b:9a:55:80:bb:d0:b7:
c6:9f:60:36:dd:31:95:ec:3e:3b:53:33:2c:a5:78:
55:dd:a2:5d:4a:c5:fa:cc:40:06:f9:b9:55:d7:51:
06:be:c2:76:77:bd:5c:2f:18:da:40:2d:2b:da:14:
ba:90:1a:ad:7e:ad:35:b8:2b:4e:80:7a:e9:b3:ff:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C9:2D:AC:2C:42:50:FE:F3:88:12:F2:53:13:FA:B9:2D:A0:90:C5
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/G8ktrCxCUP7ziBLyUxP6uS2gkMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.6.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:cc:ae:67:bd:1f:88:70:fc:b6:d5:9d:1f:8f:b7:69:33:70:
61:62:18:be:39:52:28:0d:b3:4a:1c:5e:bb:99:06:9c:75:37:
d0:a4:0a:f7:81:c5:ce:b4:69:a2:ea:ff:22:2f:bc:70:a0:8f:
18:c1:ba:fc:de:8c:36:17:ef:ff:ae:9e:9f:33:12:8c:3c:84:
8b:cf:15:60:74:ac:cd:b5:f2:38:a2:87:e6:e2:bb:cb:7f:a0:
4d:30:6f:a9:f8:df:52:d7:4d:af:7d:5c:29:7f:95:9a:ed:51:
ae:32:6a:ef:c5:99:14:e0:01:48:28:19:d0:00:50:3b:eb:bf:
ef:6f:91:1c:b6:cf:e1:61:f0:79:f7:02:84:8a:8a:88:07:32:
d5:1f:8a:c2:c3:84:32:02:77:a1:cb:70:1a:df:a6:b5:b9:f6:
5e:4b:a4:d3:bd:42:d5:99:e0:30:3b:59:1a:bb:04:63:28:60:
91:76:31:0a:2b:8c:3d:a8:83:25:8f:48:83:24:f5:3a:75:d0:
e0:3c:87:a4:06:48:35:37:74:5a:38:00:7f:1f:6e:e2:11:86:
03:34:53:ae:f8:fe:0c:f3:31:51:8a:cd:95:cb:9d:62:f5:ce:
b0:ef:a0:c7:3a:46:29:a9:4e:a5:35:b5:c8:3b:c0:79:f9:a1:
1b:44:08:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:39 2024 by rpki-client on console-ams.rpki-client.org