Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GN3RAx5cDUv1kXPEvANyXJR8nLw.roa
File: GN3RAx5cDUv1kXPEvANyXJR8nLw.roa (raw, json)
Hash identifier: C4EamRFKJM+lKCuuT4O2Gx/5mtSO/Bi6pQTLAjNBUg0=
Subject key identifier: 18:DD:D1:03:1E:5C:0D:4B:F5:91:73:C4:BC:03:72:5C:94:7C:9C:BC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A79C99A2917EC31BDD4160B6DC971
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GN3RAx5cDUv1kXPEvANyXJR8nLw.roa
Signing time: Tue 02 Jan 2024 12:33:50 +0000
ROA not before: Tue 02 Jan 2024 12:33:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 212.192.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 10:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:79:c9:9a:29:17:ec:31:bd:d4:16:0b:6d:c9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18ddd1031e5c0d4bf59173c4bc03725c947c9cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:61:50:f1:0f:65:5f:28:35:8d:f1:2f:60:
8b:66:db:db:8f:52:52:f8:7d:8a:6f:0f:fc:dd:96:
81:bb:d1:b7:3f:b4:c3:45:34:55:e2:db:1f:46:84:
31:74:d3:3e:63:17:44:4d:08:ad:7c:3a:92:2d:00:
00:83:9d:1e:73:e7:02:a7:20:9c:e3:38:26:b3:59:
a8:94:6e:68:71:b5:39:6c:59:10:7a:30:a7:97:ca:
05:c3:2a:04:26:33:5d:b3:c3:d9:5c:36:af:81:3a:
2f:37:ca:ab:f0:e2:21:94:37:fd:8b:48:ff:d5:8d:
d9:da:a0:74:dc:c8:82:4a:e4:35:f6:92:95:03:0c:
1f:ea:10:c9:26:c7:61:fb:4b:ef:99:7f:01:88:e4:
41:19:60:e8:a2:f9:5c:d3:43:1e:ca:05:af:33:54:
a1:45:af:c1:2b:3d:d6:63:96:d9:df:b1:ad:ce:bc:
06:7a:18:26:74:50:f0:ac:90:e4:a0:25:36:fd:05:
0a:a4:8a:b5:44:7d:0a:bf:70:01:f7:59:5b:52:0b:
94:e7:6e:07:06:43:df:0c:b6:7d:16:3d:04:8f:48:
ec:f0:b0:00:5c:e1:1f:a1:d8:28:f9:75:e0:10:cd:
70:e9:2f:96:dd:d5:7b:99:76:ab:09:c2:55:02:2b:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DD:D1:03:1E:5C:0D:4B:F5:91:73:C4:BC:03:72:5C:94:7C:9C:BC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GN3RAx5cDUv1kXPEvANyXJR8nLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.244.0/24
Signature Algorithm: sha256WithRSAEncryption
06:6c:59:fa:cb:d7:a5:d2:f2:62:dc:59:a1:90:68:36:25:d1:
13:8d:4e:b4:7f:90:a1:49:ec:dc:08:aa:dc:38:c2:80:8b:f7:
ce:2a:bb:f0:e7:ab:27:5b:a9:71:ea:a3:77:5e:02:2d:b7:e8:
34:b5:7e:f6:28:cc:ba:3d:2e:9a:39:38:3f:a6:2e:20:e0:49:
5d:d7:0b:5f:4f:a9:64:7d:c0:8d:99:06:97:1b:fa:49:60:ab:
78:a9:7b:58:ae:6d:a6:df:4f:5e:82:eb:6e:b6:d4:38:03:b7:
8f:33:74:c1:d3:b1:39:a9:33:16:00:43:60:5d:9d:7b:cb:70:
97:32:a5:a6:a8:a4:5c:d2:dd:d6:32:8e:08:9d:1b:ac:ef:cf:
86:89:de:7a:7c:45:49:eb:b8:02:b3:aa:e2:1f:2a:41:58:80:
1d:45:5d:92:4b:01:08:fd:d1:5c:a3:ca:bf:c1:29:57:01:02:
06:b5:34:7c:53:e7:43:57:08:45:91:08:d8:d1:71:f0:3d:7e:
c6:2c:53:ba:12:ee:1c:e2:42:ad:09:bc:c8:06:60:2d:15:57:
5b:7c:31:67:44:b3:e0:51:7f:ac:bc:3f:59:bb:98:12:7d:de:
37:f7:c8:84:9e:43:ac:0c:f1:ce:0c:41:a6:03:af:89:6c:13:
21:35:fb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:11 2024 by rpki-client on console-fra.rpki-client.org