Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/gJYTquwGqZQ8W-BnO_5Nd7yUfEQ.roa
File: gJYTquwGqZQ8W-BnO_5Nd7yUfEQ.roa (raw, json)
Hash identifier: TWlpo8DlGuavSnOfQtljJrwNDVvu6lU+84Iq4R33Hg4=
Subject key identifier: 80:96:13:AA:EC:06:A9:94:3C:5B:E0:67:3B:FE:4D:77:BC:94:7C:44
Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Certificate serial: 018CC50149F2AE68A623BB9B56ACF7A9C1E5
Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/gJYTquwGqZQ8W-BnO_5Nd7yUfEQ.roa
Signing time: Mon 01 Jan 2024 12:30:45 +0000
ROA not before: Mon 01 Jan 2024 12:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42184
IP address blocks: 194.1.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 09:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:49:f2:ae:68:a6:23:bb:9b:56:ac:f7:a9:c1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Validity
Not Before: Jan 1 12:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=809613aaec06a9943c5be0673bfe4d77bc947c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:26:1b:ff:4b:1c:b8:a7:44:53:db:4c:1b:
d8:72:29:bb:08:27:c0:64:f3:30:ed:20:07:84:75:
fe:5b:81:58:8c:6e:6c:8c:f2:4e:86:7a:49:41:fc:
59:70:7c:4a:1d:32:13:e0:59:00:78:d7:b8:30:dc:
91:21:0e:fb:d6:4c:57:80:ed:41:a4:76:32:d0:3b:
7a:8e:58:d1:2d:af:42:48:4f:a0:27:a0:e3:0e:59:
0b:7a:07:f2:c0:45:52:a5:a4:61:2b:d8:9b:a4:86:
e9:62:65:3b:a8:9c:b8:b5:f6:e3:75:da:0c:cc:82:
41:6e:99:19:64:87:c0:76:de:fe:fb:66:53:08:1e:
1b:1f:f4:e5:94:bd:47:e0:ff:3f:21:01:61:00:4d:
c4:24:0f:81:82:8a:86:4e:16:2b:fb:23:ed:4d:1f:
8d:36:7e:09:74:ef:7f:82:fb:e8:84:4f:c4:dd:d0:
8a:b4:8f:c7:0f:8e:59:73:93:bd:22:1d:72:d6:5b:
f1:cb:8e:2b:83:a6:85:de:f2:eb:89:01:a3:df:b8:
5a:18:6b:ab:db:1a:52:14:b3:74:8a:46:d6:b2:15:
ac:d9:dd:97:22:28:62:8d:e5:20:a4:42:53:da:fc:
f5:ab:e3:8c:1f:f7:6d:14:c0:a4:c7:a1:25:82:6b:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:96:13:AA:EC:06:A9:94:3C:5B:E0:67:3B:FE:4D:77:BC:94:7C:44
X509v3 Authority Key Identifier:
keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/gJYTquwGqZQ8W-BnO_5Nd7yUfEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.176.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:92:32:fe:ee:04:bd:6e:89:e0:4f:da:83:03:47:51:64:c6:
6d:32:74:d3:22:1c:a9:1a:0b:e1:37:90:ad:7b:2e:0b:fc:f2:
bc:84:04:45:89:1e:ea:f8:01:f0:31:01:a2:f6:88:1f:4c:e3:
69:ff:d6:cb:87:8a:1c:f4:f2:37:15:7f:89:1a:d3:d3:98:2d:
71:7f:bc:57:30:01:d1:de:66:54:64:6d:1d:a3:ed:6a:ce:d1:
44:87:2f:37:e3:09:23:e5:62:07:84:8c:49:f0:cb:96:c3:76:
49:4c:4e:bb:7c:9e:9c:31:b1:98:88:d7:d7:d0:fb:fa:02:39:
db:5d:30:41:de:7e:f4:02:9b:43:6e:31:55:3d:ef:05:fd:26:
92:01:42:56:ef:af:2f:17:15:fa:4d:0c:97:2e:4d:fe:62:39:
26:ca:f2:75:6b:0d:ad:bb:ff:6f:80:08:c8:ff:50:f8:b9:3d:
3b:3a:7a:8d:fa:a0:a6:77:9c:57:1d:ff:86:64:c8:41:5c:e2:
8b:51:fa:0d:75:b9:61:35:f7:b1:e6:86:33:2a:b3:3e:cb:35:
24:9d:ed:4a:69:11:dd:ac:fe:9a:a8:27:c6:60:07:b0:21:48:
27:cd:fe:44:2e:ee:35:fe:7e:aa:27:ef:63:54:0d:24:db:ac:
a3:df:10:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 13:08:17 2024 by rpki-client on console-ams.rpki-client.org