Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/GFGnaRc6OQMgyzDH1T38vr8c0IM.roa
File: GFGnaRc6OQMgyzDH1T38vr8c0IM.roa (raw, json)
Hash identifier: gYPfSsjOXHLLirk0lghJRb5ErCgY2l0mTehbVW6dpPI=
Subject key identifier: 18:51:A7:69:17:3A:39:03:20:CB:30:C7:D5:3D:FC:BE:BF:1C:D0:83
Certificate issuer: /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial: 01856D9D0FCDAAF60F3603DC29327DE05B38
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/GFGnaRc6OQMgyzDH1T38vr8c0IM.roa
Signing time: Sun 01 Jan 2023 13:54:47 +0000
ROA not before: Sun 01 Jan 2023 13:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206509
IP address blocks: 194.207.0.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:0f:cd:aa:f6:0f:36:03:dc:29:32:7d:e0:5b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Validity
Not Before: Jan 1 13:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1851a769173a390320cb30c7d53dfcbebf1cd083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ca:3a:fd:31:f3:78:f6:96:be:02:02:a4:16:
af:a2:aa:85:2c:ed:62:d3:20:ee:c5:42:e1:b9:2d:
9b:34:ec:bf:af:a4:b2:d3:ab:1e:74:53:8a:4e:f8:
4e:0d:4b:9c:3c:94:17:52:67:30:e5:83:3f:21:05:
d5:00:e1:ec:c9:58:37:dc:e1:41:82:dd:98:93:7d:
55:87:ca:ae:ef:2f:08:fb:8d:73:79:e2:76:73:fd:
5d:f5:e6:47:24:9c:9d:77:2b:95:ce:59:52:df:4f:
26:39:20:65:08:de:f1:f2:7c:15:80:15:de:2d:b8:
70:c7:05:6c:14:c7:d9:95:68:38:a0:cb:61:fa:b0:
6f:00:b0:6a:64:16:62:fd:a6:f3:d8:80:43:40:44:
55:c2:c4:0a:90:e7:fe:d3:73:d6:02:96:9c:f8:86:
c3:4f:fc:26:88:84:da:07:05:b6:06:d0:61:39:2a:
5a:d2:d1:9d:09:f7:21:fe:f6:9f:a3:b4:ef:e6:e2:
cb:50:7e:0e:b6:ee:65:6d:bc:e2:dc:a0:a2:a8:56:
fb:bb:ee:0c:ee:f5:cc:bb:a1:0f:ba:b6:fb:29:41:
dc:3f:8a:fb:04:fc:3f:a4:3c:c3:87:14:09:36:92:
71:20:eb:d3:88:db:94:f4:06:65:0e:17:94:8d:7d:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:51:A7:69:17:3A:39:03:20:CB:30:C7:D5:3D:FC:BE:BF:1C:D0:83
X509v3 Authority Key Identifier:
keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/GFGnaRc6OQMgyzDH1T38vr8c0IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
82:75:0d:bf:59:28:cc:4e:b5:55:d5:1b:36:b3:41:03:12:c8:
07:a3:d8:e1:11:03:04:03:2d:8a:c3:34:86:dc:da:f5:9d:f5:
76:c2:43:f1:6e:c2:17:27:fb:06:07:d2:2b:39:ac:64:85:84:
2f:36:1d:16:b7:cc:b4:b7:cf:27:cf:ce:15:d6:02:bb:c2:97:
61:e0:97:e8:d0:42:57:30:cc:c9:2a:f5:03:83:9a:3c:77:53:
76:e3:88:dc:4b:b4:61:67:08:03:1c:56:e0:df:05:f2:f0:a2:
43:93:00:39:8f:f8:18:8d:78:de:2e:62:35:52:32:ed:af:e0:
19:0d:8c:2f:d7:b7:a4:19:ac:10:97:33:89:79:ef:8f:39:d8:
2e:4e:a7:44:7e:bd:b4:de:a0:66:24:20:37:99:4a:35:d3:1e:
e8:00:29:d7:02:cc:cb:87:da:b6:a9:54:42:ba:7a:0d:7d:80:
cc:89:d2:15:ec:61:88:4c:f7:a9:ca:d7:9d:6f:64:d5:1c:84:
7d:7a:d0:11:e1:19:8e:66:5f:ab:64:c8:11:d4:38:3c:69:94:
38:09:93:22:3e:6d:4c:cc:56:56:93:8f:da:a5:ee:43:18:6f:
4e:6c:89:ed:43:66:f7:25:1c:c7:6f:fc:9d:68:95:bd:32:32:
da:2c:21:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:20 2024 by rpki-client on console-fra.rpki-client.org