Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/G5U0HCkAznmqybolk7vcK2vTOUk.roa
File: G5U0HCkAznmqybolk7vcK2vTOUk.roa (raw, json)
Hash identifier: tv0CtAe0VwmjepornErGUYd3NorKJ4Bbt2cdlGTINec=
Subject key identifier: 1B:95:34:1C:29:00:CE:79:AA:C9:BA:25:93:BB:DC:2B:6B:D3:39:49
Certificate issuer: /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial: 01924326CB16FF37B44F9950059378689FCE
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/G5U0HCkAznmqybolk7vcK2vTOUk.roa
Signing time: Mon 30 Sep 2024 13:37:48 +0000
ROA not before: Mon 30 Sep 2024 13:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214941
IP address blocks: 146.19.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:43:26:cb:16:ff:37:b4:4f:99:50:05:93:78:68:9f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Validity
Not Before: Sep 30 13:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b95341c2900ce79aac9ba2593bbdc2b6bd33949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:ca:0b:63:d0:0a:ee:e4:ab:21:b3:c4:42:
09:f3:06:56:50:5b:8a:af:cc:84:d9:d3:8f:90:34:
5c:68:93:07:cc:cd:60:a3:1a:d8:ab:ba:20:de:ee:
99:de:59:4b:c1:93:6b:c4:ba:c2:8f:70:d0:25:f6:
f9:0d:f6:3f:c5:db:af:6c:b4:41:57:a5:31:3b:ad:
ee:df:84:c0:2f:8e:99:be:eb:21:8a:48:cc:1e:bd:
c6:8b:46:1a:5e:f0:3d:c9:13:2a:a5:1d:ec:a3:fd:
71:2d:13:ff:74:5f:bb:2a:05:5e:26:42:05:51:a9:
22:7b:6e:44:83:09:81:bc:65:d5:94:ca:5d:40:1e:
bf:4e:e5:16:23:43:8e:df:e5:21:03:a3:e1:a1:16:
0b:01:df:ef:a7:5a:ca:66:c8:41:32:5a:bd:38:10:
65:6c:ba:d4:9e:47:14:8e:dd:6d:30:43:e5:e6:d2:
1a:4e:b2:f2:ee:25:24:2c:3d:47:fc:32:a3:33:02:
ba:58:ac:e2:47:7a:c8:6f:49:1d:69:12:c0:17:63:
9a:c7:fa:1b:1d:c7:46:bd:16:38:82:0c:2a:17:a9:
ae:d1:18:4a:b8:8d:bb:61:83:64:3b:44:52:1a:6b:
0c:b6:98:fe:cd:85:33:ec:6c:4b:bf:a5:d9:b2:4e:
43:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:95:34:1C:29:00:CE:79:AA:C9:BA:25:93:BB:DC:2B:6B:D3:39:49
X509v3 Authority Key Identifier:
keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/G5U0HCkAznmqybolk7vcK2vTOUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.57.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:71:3a:5a:c3:ad:3a:b5:5a:d8:0d:32:49:28:65:b4:bd:e8:
e8:88:fd:44:ca:45:56:f9:64:e5:69:93:67:b8:fe:d6:58:9c:
12:16:b7:37:9b:a3:df:e5:dc:f7:e9:48:33:be:de:ac:e8:31:
96:3c:26:a5:9e:65:fb:2e:7f:c3:83:6f:2c:a9:f3:07:5a:57:
b8:15:40:55:c4:1f:55:a1:2e:7c:58:74:0e:4c:38:f4:4f:9e:
bb:03:23:58:1a:a9:0a:fc:42:ad:a1:a5:b5:c9:1b:60:a0:5c:
14:8e:a2:33:17:87:6b:b1:46:6a:4a:65:bd:db:6d:18:b5:b1:
35:b3:0c:55:59:27:88:8e:d3:45:97:9e:c3:f7:e1:27:87:88:
fc:f6:61:76:4a:a4:0a:f4:8d:a8:71:e7:33:c9:74:fe:23:51:
7a:21:6a:c9:79:db:0c:97:a3:95:b3:72:ee:a3:d2:00:cc:b2:
80:6d:06:ca:1c:20:bd:25:0f:d5:e1:7d:de:ae:c8:71:0a:32:
c0:a9:3d:2e:f3:b2:19:f8:ef:ad:85:a1:8f:3c:01:64:fd:7c:
26:8c:08:b1:37:87:1a:30:d3:b0:cd:7a:93:13:a2:01:6b:41:
2c:7e:c7:3a:d0:d4:c9:de:d7:57:28:b4:26:00:0c:d3:d8:1e:
77:b0:7b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 23:03:39 2024 by rpki-client on console-ams.rpki-client.org