Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GfwIVjG0xpG-kFn45erHlHQMayo.roa
File: GfwIVjG0xpG-kFn45erHlHQMayo.roa (raw, json)
Hash identifier: sfi0JBrkW2aE+05C/nU8t1nCy2ht4K04k/1fqgJkDLs=
Subject key identifier: 19:FC:08:56:31:B4:C6:91:BE:90:59:F8:E5:EA:C7:94:74:0C:6B:2A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191B6FC224BCEE07D082C667927A7074795
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GfwIVjG0xpG-kFn45erHlHQMayo.roa
Signing time: Tue 03 Sep 2024 08:24:22 +0000
ROA not before: Tue 03 Sep 2024 08:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57433
IP address blocks: 5.83.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b6:fc:22:4b:ce:e0:7d:08:2c:66:79:27:a7:07:47:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 3 08:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19fc085631b4c691be9059f8e5eac794740c6b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:10:ce:ce:b3:c0:dd:ee:66:3a:c1:8c:75:
3f:25:a9:b8:ee:a6:da:4b:a4:8b:93:75:d1:59:0d:
a3:fb:61:ee:6d:48:29:f0:60:f7:62:5d:1c:6b:31:
37:c8:36:39:8b:f0:4c:c3:b5:f9:06:92:27:c9:da:
41:67:3b:1a:2f:98:5f:04:c8:c6:84:00:74:b7:e2:
d1:6e:dc:5b:40:a7:29:dd:f7:c0:1e:9a:b2:f2:7a:
01:91:a9:cd:0b:99:8c:45:59:62:a2:27:38:6f:f2:
76:3a:73:d3:0d:d5:49:68:60:33:0b:0b:c4:dd:a2:
5c:df:07:00:dc:f6:2f:d8:51:b6:ad:71:d4:b5:95:
f3:dc:f9:ba:2f:4f:cc:0c:6d:fd:ab:fd:7a:9b:d9:
04:9b:79:fb:ef:70:ec:bd:db:f3:a1:5a:72:c4:f9:
8e:82:36:e0:cb:03:94:33:33:78:32:78:65:ae:4a:
1b:cc:5d:10:91:de:f0:3b:29:ec:95:e5:e4:b4:bc:
b4:60:4f:de:78:6d:5a:a2:60:0c:ad:74:51:bb:17:
d1:bd:09:c9:0b:3f:01:16:10:86:a7:a7:60:39:a1:
53:ed:8a:e1:f3:58:c6:5d:91:d0:84:6e:0a:58:ff:
f4:4f:7e:bb:2c:34:e8:3c:77:5f:5a:6e:a5:04:d6:
18:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FC:08:56:31:B4:C6:91:BE:90:59:F8:E5:EA:C7:94:74:0C:6B:2A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GfwIVjG0xpG-kFn45erHlHQMayo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.157.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:cf:1d:9f:53:20:50:8d:ed:4e:0c:7c:7d:c7:3f:6f:b5:29:
c1:ef:03:4d:02:e2:5b:74:c3:ad:91:e0:55:79:f4:ca:26:72:
54:f3:e6:58:49:9f:21:46:cb:b2:20:50:1a:f7:f0:ec:84:3d:
98:d2:2c:02:e1:cc:b3:08:3b:cc:21:b4:b0:e9:c5:ad:e1:01:
45:fc:23:2f:df:b6:27:c4:41:a7:de:80:5d:45:ee:7d:99:9b:
78:15:a2:df:71:46:50:b8:61:88:83:11:24:a9:a6:82:83:99:
62:8b:6a:78:7d:12:1f:04:cd:90:74:6f:a8:10:e3:55:08:a7:
31:ef:71:c9:ad:ae:a4:9a:f6:73:f9:df:6e:c8:ba:fe:d8:d3:
83:60:35:7c:a2:d6:6c:36:b0:3b:24:21:0c:ea:21:b8:50:4a:
56:34:38:0a:9d:89:3b:8e:92:b2:3e:82:d2:52:1c:a1:86:59:
1f:d7:32:5a:5d:b7:7d:fe:6d:ac:2c:c8:9f:02:39:6f:e3:b4:
7c:f2:b1:6d:ef:b1:c9:43:2a:8d:4d:fa:f1:f6:20:16:67:ea:
a8:99:b1:78:3b:29:c8:d0:d0:a3:46:d7:94:d8:eb:67:e9:86:
01:c3:a0:b0:c8:90:f3:6d:1d:13:2d:90:45:ea:0a:92:fc:6b:
bb:d6:ed:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 11:37:23 2024 by rpki-client on console-fra.rpki-client.org