Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/gJeNr_8nEjxz6L2fSCpDVIUf_K8.roa
File: gJeNr_8nEjxz6L2fSCpDVIUf_K8.roa (raw, json)
Hash identifier: puz06GfPYtJ3kzJiBXpad6vDzgBWqjQZdXTaveTcEJs=
Subject key identifier: 80:97:8D:AF:FF:27:12:3C:73:E8:BD:9F:48:2A:43:54:85:1F:FC:AF
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E0E02ECF812A7FB60F53C22A02EA6
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/gJeNr_8nEjxz6L2fSCpDVIUf_K8.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202425
IP address blocks: 5.8.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 11:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0e:02:ec:f8:12:a7:fb:60:f5:3c:22:a0:2e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80978dafff27123c73e8bd9f482a4354851ffcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:50:47:29:13:f2:8e:ee:b6:e9:58:04:64:7c:
e2:93:b7:fc:09:66:cf:d2:e6:4f:00:8a:4c:91:5a:
1d:96:a1:1b:37:b9:e1:33:ca:91:62:60:81:43:f7:
a2:d1:65:9f:e5:aa:de:45:81:f6:08:9f:1b:c1:3c:
a2:1b:82:24:a7:bd:a0:24:84:97:75:40:b1:23:13:
8c:b8:94:f1:0b:9c:47:7c:7a:8b:01:b5:58:57:5e:
7c:be:78:a6:cf:30:46:25:0e:e7:1f:61:14:7d:36:
5f:90:3c:79:8c:c6:6c:e9:ce:89:a7:9d:e6:e3:94:
b4:f9:ce:e1:16:88:2b:bc:7e:d5:48:36:80:d1:12:
92:46:13:c9:1c:01:8e:5f:b9:dd:06:cd:d7:71:ff:
c3:cb:b2:3c:16:52:1e:28:1f:aa:5d:26:1e:09:c3:
57:e6:b7:94:b1:72:6b:cc:ba:d2:00:87:0d:34:0b:
87:ce:ed:e4:be:64:28:44:72:75:9e:dc:d8:00:86:
87:d4:ed:3b:24:27:3b:da:29:91:ee:33:cd:72:01:
9b:dc:35:29:b0:64:9b:aa:91:a7:25:0c:b0:c9:b6:
4b:cb:23:f7:58:e8:64:cf:13:f9:60:77:93:1a:b8:
eb:a1:85:40:07:6c:c2:fc:06:95:91:61:14:b4:8d:
f1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:97:8D:AF:FF:27:12:3C:73:E8:BD:9F:48:2A:43:54:85:1F:FC:AF
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/gJeNr_8nEjxz6L2fSCpDVIUf_K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.18.0/24
Signature Algorithm: sha256WithRSAEncryption
51:54:14:37:3b:4b:d8:55:6e:91:c1:6a:25:8a:e2:c6:4b:ef:
91:4d:a6:88:14:5d:6e:e9:42:ca:ed:aa:3d:08:f6:ca:2e:6e:
91:94:6c:5f:a3:ec:a3:af:ca:f1:b1:e3:95:12:d8:8b:d1:78:
fc:fc:d1:67:13:6d:11:87:1d:3c:63:c4:4d:c8:e6:8a:90:ab:
be:c9:d2:22:19:bd:90:fe:06:16:1a:cb:23:c9:71:ba:12:8e:
83:bf:8a:20:3f:30:a6:9c:9b:4e:de:cf:08:39:7a:48:47:34:
48:4c:0d:23:92:81:92:ed:6f:a4:3b:96:b3:7e:7b:f5:96:ba:
b3:ec:22:a9:f3:2e:9c:e2:46:6c:ca:3c:fd:0f:a4:49:7f:11:
74:42:73:39:e5:88:7c:cc:2f:70:a3:96:bb:4e:63:73:43:52:
ec:7e:df:68:61:61:03:4a:1a:cb:db:fc:95:26:5a:08:90:88:
a6:74:56:08:10:c7:f4:22:fc:9b:8d:31:37:ff:e0:c7:56:8e:
df:6d:b3:7c:82:35:59:21:b5:33:23:57:a5:c9:15:6e:f0:5d:
9f:a3:78:8f:9e:7b:62:b3:0d:b0:df:95:28:ca:76:b1:a6:1d:
85:f3:9e:88:68:a5:34:90:08:84:ea:43:70:e0:90:de:66:c6:
d3:29:b6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 15:50:41 2024 by rpki-client on console-ams.rpki-client.org