Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/gBoyTDxVyzU0CW50fa1t-V5mFeg.roa
File: gBoyTDxVyzU0CW50fa1t-V5mFeg.roa (raw, json)
Hash identifier: WzibW6mXW3OaQ9twAYKZ1Rxj4W+hP3FXZXIwzM2KU0c=
Subject key identifier: 80:1A:32:4C:3C:55:CB:35:34:09:6E:74:7D:AD:6D:F9:5E:66:15:E8
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01856EAA29501A4ADB0D4C9989773C34E1E6
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/gBoyTDxVyzU0CW50fa1t-V5mFeg.roa
Signing time: Sun 01 Jan 2023 18:48:43 +0000
ROA not before: Sun 01 Jan 2023 18:48:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 193.239.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Apr 2023 19:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:aa:29:50:1a:4a:db:0d:4c:99:89:77:3c:34:e1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 1 18:48:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=801a324c3c55cb3534096e747dad6df95e6615e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c8:fe:ef:5e:f5:20:15:20:dc:8f:14:4a:13:
14:aa:db:ed:b2:2a:9b:f0:34:3e:e0:7b:17:44:6b:
4e:4c:a9:95:18:ac:34:ba:e4:97:df:db:02:25:a5:
85:2a:e4:00:75:af:28:00:8d:23:4f:03:96:05:a2:
c2:16:76:f4:52:23:2e:2e:f9:81:82:d1:30:19:41:
39:37:ba:55:98:4f:fb:3a:7a:49:34:34:db:6e:f7:
27:7f:4e:21:a9:09:e7:16:3b:8a:b9:91:e5:7c:d6:
cb:1e:d5:24:ef:15:ea:ed:9f:0c:58:86:ab:57:88:
17:0c:56:6c:36:b8:24:da:40:f2:a1:86:4f:f1:6a:
de:e4:1f:87:99:65:37:62:34:f1:20:bb:54:af:5d:
90:17:29:c9:54:49:27:3d:fd:22:12:40:7d:67:7a:
e8:a0:07:47:fe:f2:a5:a5:6b:11:f3:13:a5:9b:7a:
9e:13:d9:22:c5:6c:42:63:f5:f2:cd:23:53:b9:a7:
08:9f:c0:88:54:f9:da:86:dc:e7:8d:73:c7:9c:9d:
7e:79:63:3d:12:e9:8e:44:f8:c8:c1:7c:3f:94:16:
a3:0e:97:4f:a7:1f:4e:0b:9e:7d:03:5c:3e:f9:72:
db:ad:22:0e:c4:d0:b5:db:65:82:b3:1e:97:13:59:
90:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1A:32:4C:3C:55:CB:35:34:09:6E:74:7D:AD:6D:F9:5E:66:15:E8
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/gBoyTDxVyzU0CW50fa1t-V5mFeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.237.0/24
Signature Algorithm: sha256WithRSAEncryption
35:60:b9:d6:bc:3a:93:3a:a3:53:a4:fb:cf:ab:f9:10:39:22:
79:d4:84:a6:2f:9c:bd:0e:2b:eb:be:ab:96:60:44:7e:56:70:
a9:6e:2c:21:08:87:67:7e:41:ef:d4:86:ca:e2:66:f3:e1:8f:
a4:51:8f:1d:45:ac:a0:3e:84:30:f0:fc:31:da:a2:1f:73:3f:
d2:84:8d:4c:b7:e2:82:14:2a:ae:77:26:da:5b:5d:4f:b4:be:
0d:23:e7:f9:d2:76:cc:fb:2c:14:43:1b:5e:38:d7:91:f0:40:
d9:3d:38:f4:dd:6e:6d:ce:de:c3:ac:4e:78:8f:f4:92:c4:b1:
10:27:a7:ad:c1:86:4b:30:1f:2b:f4:bf:db:d7:48:26:05:9f:
ba:1d:6a:45:21:8c:cb:9e:55:16:0a:ef:bf:ee:01:e0:96:eb:
59:3f:9e:ce:6e:eb:a3:40:1a:7c:d4:1b:3a:64:47:7a:a9:20:
e9:a7:e7:bc:37:29:85:e1:71:72:6d:01:47:1c:fa:b6:0a:4d:
80:d1:13:7b:db:96:46:8a:fe:bb:37:3e:85:64:1c:5a:f5:08:
18:df:b6:03:1a:54:35:0b:a7:c0:cf:93:4f:89:48:3c:95:40:
9e:0a:cc:64:d8:93:56:ab:74:8b:5f:1a:48:64:66:67:a9:c8:
95:c6:1e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org