Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/G0eVQw7ri4AG47MPfuALkiE_5Xs.roa
File: G0eVQw7ri4AG47MPfuALkiE_5Xs.roa (raw, json)
Hash identifier: QybCVWou4pozl0yxaupkdtsyEqMSPwv+OruBeYN1bd0=
Subject key identifier: 1B:47:95:43:0E:EB:8B:80:06:E3:B3:0F:7E:E0:0B:92:21:3F:E5:7B
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE61E9761469EEEA2DD3B542AE1451A
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/G0eVQw7ri4AG47MPfuALkiE_5Xs.roa
Signing time: Sun 01 Jan 2023 10:34:58 +0000
ROA not before: Sun 01 Jan 2023 10:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60558
IP address blocks: 194.15.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Nov 2023 10:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:1e:97:61:46:9e:ee:a2:dd:3b:54:2a:e1:45:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b4795430eeb8b8006e3b30f7ee00b92213fe57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:fd:7b:9f:ec:3e:ae:8d:df:d8:d6:dc:68:
64:24:ee:5a:97:d7:fb:f7:83:22:dc:55:dc:28:a3:
a2:e4:59:74:5b:fd:78:6c:0e:61:6b:0d:53:77:ca:
37:c8:e0:3e:64:e3:69:6b:02:84:92:cd:95:22:93:
33:5a:37:b6:8c:12:9c:92:29:94:b8:3b:b1:c1:c6:
1d:d9:3c:ac:10:4a:05:b6:64:18:68:83:5a:a8:9e:
1d:8a:25:fa:ea:4f:f0:48:27:3a:1c:d0:54:7e:d2:
b4:89:f5:c5:76:6e:db:40:05:bb:f1:df:2f:eb:c7:
bb:46:71:71:e3:6c:3c:a9:34:2c:80:a0:22:fe:fb:
73:ae:3f:dc:ac:c9:35:a6:83:da:ae:37:2b:59:67:
b3:a2:77:ab:54:f5:1b:9d:f6:24:ac:53:75:c9:27:
5c:d1:33:cb:84:81:cd:91:ec:cb:5a:c4:20:3d:69:
65:d6:89:fe:28:51:68:cf:26:19:0c:71:eb:c0:e1:
fb:70:ad:8e:4c:f6:ac:4b:c0:bf:22:bf:f4:14:ab:
58:d4:5c:4c:c8:b4:ce:7f:24:72:86:f9:bc:9b:41:
c1:b0:4e:3b:22:9c:ad:79:0d:d6:5b:89:e9:87:e1:
9b:b2:13:0b:b8:e1:a2:d7:11:34:b7:00:dc:66:db:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:47:95:43:0E:EB:8B:80:06:E3:B3:0F:7E:E0:0B:92:21:3F:E5:7B
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/G0eVQw7ri4AG47MPfuALkiE_5Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.38.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b2:46:aa:b7:1a:ec:a7:25:fe:0b:34:10:3d:80:b9:d3:3f:
64:38:6c:61:e8:1e:16:76:da:55:31:8b:25:e5:6a:33:84:5c:
4a:8b:a5:23:e5:28:ef:87:42:b4:b5:fa:5e:ad:ac:ea:6a:bc:
ca:c9:06:bd:a4:dd:77:dd:b8:91:ca:17:64:48:99:83:05:67:
51:74:f5:5b:53:7c:71:47:57:35:43:7e:3c:b6:fc:1e:02:ac:
ba:31:ef:15:1f:7c:7d:c7:31:58:59:7b:ce:da:87:73:18:ea:
3a:6a:1e:41:ac:fe:1d:11:80:f6:9c:7a:7a:ca:40:2e:0d:46:
d9:28:79:05:d3:b9:53:c6:89:2a:ca:0b:fb:4e:3a:7d:6b:59:
2f:b8:39:72:02:e6:7e:73:22:73:e2:e2:04:91:be:34:2a:01:
8d:7a:86:6c:10:0d:ea:c3:1e:a7:20:58:99:44:b2:30:e3:c2:
45:d2:99:83:ae:c3:83:ac:fd:f2:0f:7c:6b:c8:b8:6c:1e:c0:
74:8e:e9:cb:f6:c9:56:3e:9c:8c:f0:e9:62:1a:5a:57:6c:d7:
e6:76:b5:61:a0:36:14:1e:09:a0:20:75:ff:40:2b:7f:59:8d:
dd:5d:dc:37:8e:20:46:c6:7c:1b:ec:c2:90:29:08:b5:fd:89:
75:74:76:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org