Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/G5RbSueNiB8obTt7Z2aAvPjb_Ik.roa
File: G5RbSueNiB8obTt7Z2aAvPjb_Ik.roa (raw, json)
Hash identifier: 9VIB4LTM97a31vHPYCM0iMr8Hb5r52+CsfxLJSUUTLk=
Subject key identifier: 1B:94:5B:4A:E7:8D:88:1F:28:6D:3B:7B:67:66:80:BC:F8:DB:FC:89
Certificate issuer: /CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Certificate serial: 01856F42A1E5E08A7A342D2A7D9602CB8E91
Authority key identifier: AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/G5RbSueNiB8obTt7Z2aAvPjb_Ik.roa
Signing time: Sun 01 Jan 2023 21:35:15 +0000
ROA not before: Sun 01 Jan 2023 21:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 194.124.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 May 2023 11:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:a1:e5:e0:8a:7a:34:2d:2a:7d:96:02:cb:8e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Validity
Not Before: Jan 1 21:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b945b4ae78d881f286d3b7b676680bcf8dbfc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:5a:fb:2e:1d:aa:73:21:42:4c:a5:be:6f:
17:46:09:5c:ba:87:8d:84:f7:c7:4f:73:50:5f:ff:
c2:c1:34:80:bf:dc:7c:cf:2b:3b:a7:b0:a3:86:b4:
91:93:91:07:ad:91:35:06:cb:f8:e2:c3:2a:19:36:
53:7f:35:56:db:09:e3:26:a8:94:13:57:cd:b1:20:
71:e6:07:59:09:d8:86:ab:27:ae:14:34:a7:27:c7:
b6:ca:52:38:06:1d:24:31:87:6e:0e:dd:aa:e1:19:
da:31:df:e2:3b:d2:36:3e:02:f3:30:08:eb:f1:76:
0b:86:0a:ca:ae:f8:21:f9:1a:94:6b:0d:4f:eb:bd:
72:10:34:02:a0:8a:e9:f9:13:ac:39:f0:3a:86:00:
e5:ba:b7:9f:2b:e0:53:67:bb:2b:e0:dc:a3:09:a7:
8b:2e:35:3c:2c:c3:37:53:cf:55:3c:5a:8a:ab:e7:
5c:b8:51:ec:fd:63:13:e9:9a:18:1d:8d:ca:d0:1c:
1e:6f:6f:bd:ba:37:3c:2d:38:fc:b3:b8:ad:f9:3c:
c1:66:78:de:d4:93:48:3b:09:3c:20:a4:a0:68:62:
de:b3:89:28:71:25:29:e1:1c:b1:c7:b4:a7:05:51:
af:89:da:6e:97:69:e8:a3:44:01:de:a8:06:e1:6c:
0f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:94:5B:4A:E7:8D:88:1F:28:6D:3B:7B:67:66:80:BC:F8:DB:FC:89
X509v3 Authority Key Identifier:
keyid:AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/G5RbSueNiB8obTt7Z2aAvPjb_Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.254.0/24
Signature Algorithm: sha256WithRSAEncryption
05:64:31:26:64:dd:d1:4f:af:2f:9c:c4:6b:81:3c:70:e8:c1:
d3:c4:05:f4:0f:61:f2:f5:d9:b4:76:7c:f3:13:52:f0:bb:8b:
40:65:ae:10:68:b3:e8:87:86:ae:cf:58:8e:75:68:2a:a0:89:
68:57:e5:18:d3:85:fc:11:0d:3a:1f:e4:4d:9f:85:f3:f5:05:
ae:78:5a:02:57:c1:26:6a:fb:34:dd:54:93:95:22:e2:01:d8:
b2:44:0e:8f:84:ce:fb:04:33:73:d4:bb:35:e9:0e:41:30:d4:
c2:d2:cd:79:3b:69:2e:bd:74:72:59:85:9f:4b:72:d9:5e:a0:
b3:87:9f:28:83:8d:52:60:dc:51:06:97:33:57:ed:3b:14:56:
8c:1d:5a:1e:47:84:e8:89:ed:00:9e:f1:98:a1:1e:22:7f:31:
cb:07:59:8a:a1:c0:1c:5e:fd:09:c3:0b:77:84:0d:f4:cb:42:
5d:ff:ea:a8:de:6e:7e:1f:d0:eb:68:28:3a:9c:9a:ab:a9:29:
75:c0:c5:31:c9:be:37:dd:6b:9e:f5:c0:95:85:4c:2a:a8:97:
ab:fc:82:5d:8e:06:be:1d:57:3f:01:38:b4:26:62:30:be:29:
30:a6:7c:46:11:d8:c0:a0:de:81:df:9e:db:ee:37:cd:c1:39:
fd:1c:f3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:46 2024 by rpki-client on console-ams.rpki-client.org