Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Gd0VYQR2u8kVsOGVe2YAfOJuZPE.roa
File: Gd0VYQR2u8kVsOGVe2YAfOJuZPE.roa (raw, json)
Hash identifier: J/d+lfeCymzDQr2gOilxKdpVnzenJJRyNbybHy7Hcoo=
Subject key identifier: 19:DD:15:61:04:76:BB:C9:15:B0:E1:95:7B:66:00:7C:E2:6E:64:F1
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 018CC424F80B5A02736BC27454C556F95499
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Gd0VYQR2u8kVsOGVe2YAfOJuZPE.roa
Signing time: Mon 01 Jan 2024 08:30:06 +0000
ROA not before: Mon 01 Jan 2024 08:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210538
IP address blocks: 193.35.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Mar 2024 12:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:f8:0b:5a:02:73:6b:c2:74:54:c5:56:f9:54:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 08:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19dd15610476bbc915b0e1957b66007ce26e64f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:87:2d:72:82:02:f7:59:fa:a9:de:bc:2c:d0:
30:90:89:87:2b:e7:e4:36:f2:30:97:75:3e:7c:8d:
ff:e6:d6:9a:24:8a:49:5b:27:58:d5:3b:38:36:1e:
a8:1f:cc:2a:53:00:b0:93:1e:1d:11:87:6f:f6:62:
7f:80:12:98:e1:a5:13:a9:ed:d4:9c:75:ee:35:0f:
86:6b:54:d2:9a:b7:bc:4c:6e:d6:cf:e7:1f:65:ed:
5a:0b:bd:8e:df:7d:35:61:05:3e:c3:0c:6d:f9:b3:
7c:9f:c1:ee:de:2f:d8:8d:e0:3d:f4:0e:6e:93:d4:
60:f9:0e:fd:6c:16:f8:13:79:65:a9:51:20:4b:7f:
fb:45:71:17:25:70:c8:f3:7c:55:24:28:a4:02:d6:
7c:ac:6a:9b:ea:aa:df:b8:14:b4:53:2c:49:e2:28:
4f:3b:24:82:3b:ae:0c:a5:d0:f4:af:68:de:83:dd:
6f:f5:56:28:60:2e:66:16:30:ef:7f:1f:db:b8:e4:
3a:a8:e4:e4:a6:ba:55:6a:bc:14:90:fb:d9:2c:72:
8e:ff:f2:61:79:aa:ce:dc:ef:ad:9b:13:ee:31:d0:
59:b6:9c:ec:b4:bb:c5:a9:49:cd:0f:b6:47:a7:6c:
a5:af:7e:5c:f7:17:fd:e0:ad:4f:75:1c:7e:6c:25:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DD:15:61:04:76:BB:C9:15:B0:E1:95:7B:66:00:7C:E2:6E:64:F1
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Gd0VYQR2u8kVsOGVe2YAfOJuZPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.154.0/24
Signature Algorithm: sha256WithRSAEncryption
80:18:f5:23:cc:72:e7:85:71:b5:ad:cd:a0:aa:05:ca:c2:8d:
33:94:57:64:d7:16:1f:c5:1e:1f:65:39:d2:34:6b:97:2d:57:
22:04:fe:89:dc:17:46:9b:e5:78:3e:b9:f8:58:18:7a:2c:a0:
f3:12:08:bd:bd:9f:e5:f3:2c:b4:09:eb:5e:1c:6f:7a:f3:9e:
4c:be:61:85:f7:5c:70:e1:ed:64:37:ad:28:5e:29:57:39:7d:
b9:3a:06:bc:2a:a0:3c:e6:f1:9a:55:1b:f4:c6:51:1a:92:b6:
b2:41:1a:6c:4f:b9:d4:df:9c:2e:61:07:72:d1:01:b2:17:f4:
15:96:99:e6:17:03:6c:0d:3b:2a:f0:7a:f9:da:1e:84:6a:cc:
d9:0a:18:0b:7d:5d:73:2a:4c:6f:b3:27:5f:c3:0d:3a:3a:46:
37:41:0a:4e:39:c1:c6:45:bd:73:d2:db:ca:0f:ca:c1:53:dd:
00:ad:03:54:b4:6d:80:77:ce:48:61:1e:0f:02:ef:63:0f:cb:
40:cf:a0:3d:00:3f:1b:4c:f4:b3:c5:83:e3:6c:15:3a:ff:00:
b0:77:47:e7:30:21:e4:c9:61:8f:e6:1a:c8:6b:94:20:6e:43:
84:26:9f:a9:15:f1:33:01:a0:af:a5:7e:ac:a0:e4:ae:61:62:
45:ef:16:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org