Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/gX6R2DCoHIk65Ao1HC3VM7Fk9Ns.roa
File: gX6R2DCoHIk65Ao1HC3VM7Fk9Ns.roa (raw, json)
Hash identifier: TQUtNZvjE9f54vws9RH5ETDjVMFEIjryOo9De5d+LAc=
Subject key identifier: 81:7E:91:D8:30:A8:1C:89:3A:E4:0A:35:1C:2D:D5:33:B1:64:F4:DB
Certificate issuer: /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial: 01857115541E9DC3C17EBCB73DF0286E46C5
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/gX6R2DCoHIk65Ao1HC3VM7Fk9Ns.roa
Signing time: Mon 02 Jan 2023 06:05:01 +0000
ROA not before: Mon 02 Jan 2023 06:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42831
IP address blocks: 37.75.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:54:1e:9d:c3:c1:7e:bc:b7:3d:f0:28:6e:46:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Validity
Not Before: Jan 2 06:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=817e91d830a81c893ae40a351c2dd533b164f4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:ad:ee:92:13:85:bd:fb:ad:fd:40:9d:70:
66:b1:84:76:fb:62:75:52:d4:ff:c0:73:fd:fc:c9:
be:95:13:4b:49:b8:2f:4f:b4:e2:21:93:e4:b3:84:
02:e3:f2:d4:54:a4:b0:f7:28:06:1f:8a:4d:95:fd:
e4:e9:ec:59:17:45:9b:07:5c:ce:52:c6:5b:a5:12:
54:6c:8c:96:be:46:82:87:cf:db:df:ef:a3:fd:58:
b7:6a:f1:f7:ff:7e:20:f6:43:36:9e:99:4f:46:34:
3a:f1:67:5c:5a:05:e9:f1:eb:de:fb:5f:37:6e:f5:
b6:05:32:c2:6f:ec:9b:fd:94:a6:00:da:a3:3a:e9:
97:f4:95:ab:f5:a1:b1:19:04:36:82:7d:e7:63:0e:
6f:bd:59:a3:f0:61:ea:51:34:04:e2:10:62:09:77:
5b:43:f5:97:59:97:f2:e3:b4:3d:2a:a7:74:db:b1:
28:44:e9:99:01:c6:c1:43:fa:a4:9f:1f:ee:d3:b1:
49:4e:a5:65:e7:16:f9:a9:3b:ed:3f:79:5a:f3:28:
f6:89:88:e7:fd:67:f9:4e:ff:dd:18:45:45:e2:7c:
f3:53:55:5e:c5:2a:73:15:6a:77:ab:29:12:f2:3d:
9b:6e:14:74:a8:d9:f3:36:ef:b8:12:f6:7e:b2:53:
22:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7E:91:D8:30:A8:1C:89:3A:E4:0A:35:1C:2D:D5:33:B1:64:F4:DB
X509v3 Authority Key Identifier:
keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/gX6R2DCoHIk65Ao1HC3VM7Fk9Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:0b:bb:75:e5:ca:25:72:9b:ec:5c:12:47:ff:42:64:27:1f:
cb:86:a0:0a:95:ff:c4:98:f2:d9:d4:d0:1f:ee:81:ec:23:3c:
46:f9:04:ce:93:40:78:67:e5:bc:80:9a:ae:0f:98:d6:dc:9f:
15:5a:36:bb:4a:dc:90:a8:28:69:de:61:0c:74:8d:7c:76:37:
6e:7c:8d:2e:a5:9d:d1:22:ed:e9:c2:bc:0f:26:b6:3e:9f:68:
40:4c:44:da:58:01:0c:a6:ec:b1:f9:88:87:c5:57:30:ad:c6:
8c:74:12:7c:12:3e:c4:4c:23:2f:49:ad:de:1f:5f:f3:f5:92:
a3:ed:b1:70:01:63:7f:e8:cb:fe:56:21:d7:a1:64:72:83:02:
b8:32:0c:5e:4f:19:d9:b3:eb:00:f8:27:28:66:aa:1c:15:dd:
43:a0:f8:49:14:ae:af:3e:91:f3:8f:c2:80:78:f1:eb:54:07:
c5:5f:43:d5:e4:fc:e1:64:f8:ce:04:b7:23:71:c2:2c:08:92:
2b:1d:0b:a4:14:18:e0:65:a0:ea:dc:bc:33:95:18:ff:2d:35:
4a:e2:1e:16:4b:d2:a9:56:d8:0d:16:7f:33:d8:d8:fa:08:07:
72:c5:3b:8d:ee:de:53:7a:9b:83:98:5e:3d:c9:a6:67:36:7e:
06:d2:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:55 2024 by rpki-client on console-fra.rpki-client.org