Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/gTDien1LBHCVxSlCHOXi8cQdXqk.roa
File: gTDien1LBHCVxSlCHOXi8cQdXqk.roa (raw, json)
Hash identifier: HXuywJiKMJs+wfqUxTc+FZJNHYLfxIfcWVO4/Yx/7lg=
Subject key identifier: 81:30:E2:7A:7D:4B:04:70:95:C5:29:42:1C:E5:E2:F1:C4:1D:5E:A9
Certificate issuer: /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial: 01856D7895049D96CB5F3B4D6EC29B5674A2
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/gTDien1LBHCVxSlCHOXi8cQdXqk.roa
Signing time: Sun 01 Jan 2023 13:14:57 +0000
ROA not before: Sun 01 Jan 2023 13:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44066
IP address blocks: 5.154.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:95:04:9d:96:cb:5f:3b:4d:6e:c2:9b:56:74:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Validity
Not Before: Jan 1 13:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8130e27a7d4b047095c529421ce5e2f1c41d5ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:99:d9:9c:91:c0:80:48:47:c3:22:97:df:
b4:5b:65:75:dc:67:e5:d3:78:27:79:86:7a:d6:4a:
1f:04:81:d2:98:fe:87:c0:44:3c:f4:bf:81:a6:b4:
1e:ac:8b:bf:06:cc:62:50:02:a6:e5:58:ed:bc:67:
79:da:ab:62:e8:d6:d4:ef:c5:d5:bf:39:99:d8:f8:
cd:6d:61:84:0b:ac:0e:9c:b1:73:0b:14:82:04:6b:
bd:eb:28:2b:a2:d6:b8:62:df:69:9a:df:7d:08:14:
05:40:97:4a:51:02:73:83:31:eb:f3:62:34:74:fc:
24:57:d6:45:74:cf:eb:65:3d:58:02:e8:ca:b4:43:
2a:88:04:e8:0b:83:39:89:ac:4a:ec:31:74:7b:15:
a8:6a:16:58:9a:72:81:d4:bf:d2:db:e5:ae:53:24:
a2:45:8b:64:ad:e6:4b:93:4e:76:3a:e2:ac:8a:97:
4d:b2:eb:12:b1:25:3f:e9:4e:a1:ef:45:8f:2c:ff:
88:1e:7c:5c:75:56:e5:1e:77:55:13:f1:e4:1a:b9:
a2:2e:37:cf:e8:77:03:88:bc:82:90:36:21:5e:c9:
cb:19:4a:69:4c:c0:31:3a:f8:5b:6b:b6:d1:2b:64:
6b:71:ab:ee:7e:d3:28:ee:78:39:49:2d:01:78:c7:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:30:E2:7A:7D:4B:04:70:95:C5:29:42:1C:E5:E2:F1:C4:1D:5E:A9
X509v3 Authority Key Identifier:
keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/gTDien1LBHCVxSlCHOXi8cQdXqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.181.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:69:53:39:78:bb:5e:ce:6d:55:d8:fd:b5:2c:8f:0d:b8:32:
da:7e:6a:8a:92:e7:50:11:36:b5:09:da:a9:c8:8c:ce:cd:03:
99:3d:c2:26:7f:e8:8f:ec:af:e2:04:3e:93:54:71:4e:93:c3:
03:19:7d:66:ad:5e:7e:90:38:3a:60:4e:e9:bc:9a:cf:96:c8:
54:06:a3:df:f9:a0:c8:12:d2:e8:e9:fb:ee:e4:cf:f9:92:11:
28:f7:37:6f:c9:96:46:7a:90:d5:40:7d:db:a2:5a:bd:2f:03:
cb:b8:ee:9b:4b:56:2e:23:59:b3:58:b1:d4:c0:f9:91:09:e8:
04:dd:94:60:70:15:91:a6:b3:fd:f8:32:b3:6a:62:61:d5:95:
bd:0a:4d:4b:59:f5:da:5b:24:e0:06:49:5b:ff:f5:11:09:6f:
e8:e1:02:39:6c:2a:53:a3:ca:25:12:41:24:57:00:b6:85:c2:
a6:15:ad:f2:d9:cb:c8:76:05:41:2f:02:af:e2:b1:36:67:ba:
c7:0e:ca:24:1c:e1:2c:4d:21:89:7b:c6:5a:4b:c5:d2:04:ff:
03:01:8f:21:a5:ab:5f:83:24:ba:7b:22:4a:d1:02:d5:1b:9a:
2d:05:27:28:0c:04:36:d7:75:f0:f8:bd:02:3c:14:e7:9e:68:
08:a2:84:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:09 2024 by rpki-client on console-fra.rpki-client.org