Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/GlcJ0uJlHTnHH84HvQX60UUBXWw.roa
File: GlcJ0uJlHTnHH84HvQX60UUBXWw.roa (raw, json)
Hash identifier: T9PCmDoEUxkYyNmKvdRSRwv+jju4n6xfOIepD6lTL28=
Subject key identifier: 1A:57:09:D2:E2:65:1D:39:C7:1F:CE:07:BD:05:FA:D1:45:01:5D:6C
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018AABAA76E31F1CC15E7AE4D868E057199E
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/GlcJ0uJlHTnHH84HvQX60UUBXWw.roa
Signing time: Tue 19 Sep 2023 04:19:50 +0000
ROA not before: Tue 19 Sep 2023 04:19:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.255.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Sep 2023 09:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ab:aa:76:e3:1f:1c:c1:5e:7a:e4:d8:68:e0:57:19:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Sep 19 04:19:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a5709d2e2651d39c71fce07bd05fad145015d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:1d:40:2c:84:f4:ee:3f:29:18:3e:3d:f2:
e4:4b:1f:5b:e9:bf:5a:10:53:f6:2f:33:61:65:9b:
68:a8:c7:1e:18:2f:72:c2:f7:18:7a:a7:37:dd:2e:
6a:8f:fd:2a:89:9d:ec:d6:dd:f2:11:0c:fe:cf:9a:
99:e0:e8:7e:45:f0:85:2f:21:24:c4:63:07:ac:b3:
99:32:7a:f6:6c:5c:99:44:6f:de:05:18:e3:1c:21:
8a:1f:53:22:d4:e2:47:65:87:88:d5:f3:a1:31:cb:
bd:99:73:49:7f:29:19:53:15:c3:8d:18:19:15:f0:
5b:0f:53:04:e4:ba:ea:aa:c3:1f:f9:7a:3e:f0:a4:
eb:78:1c:30:d8:9f:45:bc:4e:2e:bb:3d:c8:ab:2d:
99:99:fb:52:da:0d:ff:a2:6b:d7:24:79:0b:e9:ab:
89:30:f1:37:2c:a1:07:ca:60:a2:c4:6f:25:10:ce:
2b:a7:b1:dc:d5:eb:ac:63:95:e4:03:69:09:ac:d8:
61:25:22:f3:19:02:ed:60:14:e1:f2:93:53:91:cf:
81:83:a5:4e:ce:b9:2d:74:a5:04:2b:b4:c4:5c:25:
24:87:a3:2c:b6:af:a1:0c:25:6b:c1:99:f7:7b:68:
49:19:df:22:2b:82:21:64:99:3c:71:d4:bc:aa:dc:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:57:09:D2:E2:65:1D:39:C7:1F:CE:07:BD:05:FA:D1:45:01:5D:6C
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/GlcJ0uJlHTnHH84HvQX60UUBXWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.4.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e3:7f:ee:76:ae:3a:0b:04:8b:80:31:e0:65:ec:04:9d:56:
48:dc:d3:b0:ce:5d:ab:18:c5:59:7a:ee:0a:5e:75:56:41:d3:
30:c9:ab:fd:63:5a:1f:54:2d:40:c0:b8:35:8b:5b:a9:86:2d:
56:a4:68:fb:43:2b:ba:db:84:bf:61:af:9f:d6:11:37:bc:c3:
16:ee:93:80:17:2c:d7:49:1e:20:b4:e0:5d:fd:ab:fd:6b:6f:
bd:6a:ec:ef:eb:dc:c9:e7:e7:28:18:a7:f7:4c:95:3c:56:38:
20:3f:fa:33:28:74:24:54:7c:16:a7:fb:60:13:49:9a:26:ba:
77:58:c5:69:e0:a9:01:02:de:c9:09:1e:c7:45:e1:53:c1:84:
e3:09:ce:f9:78:36:9c:b9:54:53:36:84:b6:d6:9d:d8:a9:29:
d3:37:65:e9:c8:25:da:5b:65:0a:60:f4:b9:f9:66:86:0b:41:
88:7a:54:ef:b0:ae:05:f3:c2:9f:7b:fb:21:a3:e2:54:a3:64:
93:61:5a:90:66:c5:87:4d:1d:88:ad:e6:12:50:86:33:f8:82:
d2:1d:9e:0f:21:d4:b4:6e:5e:bb:93:0f:fe:73:a9:77:02:d4:
99:90:2c:4a:34:ab:04:49:46:4d:36:cf:e2:04:cc:7b:d9:75:
55:ba:02:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org