Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/gFbSrQniqXAnsydVEipVYo3cmNQ.roa
File: gFbSrQniqXAnsydVEipVYo3cmNQ.roa (raw, json)
Hash identifier: M3qH1Aha/L9A8fshJNc0vnf/C80+6OpsReVxB60Vuxw=
Subject key identifier: 80:56:D2:AD:09:E2:A9:70:27:B3:27:55:12:2A:55:62:8D:DC:98:D4
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 018C4965D9F8043CE02FC5C4CD287D26CE67
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/gFbSrQniqXAnsydVEipVYo3cmNQ.roa
Signing time: Fri 08 Dec 2023 12:27:40 +0000
ROA not before: Fri 08 Dec 2023 12:27:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209474
IP address blocks: 194.62.54.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:65:d9:f8:04:3c:e0:2f:c5:c4:cd:28:7d:26:ce:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Dec 8 12:27:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8056d2ad09e2a97027b32755122a55628ddc98d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:f5:5b:1a:26:20:75:a5:b9:b4:43:a9:ed:
42:87:d3:b6:4f:37:06:9b:dd:8d:43:fc:16:62:5a:
bf:3e:f5:e1:51:b4:b3:c3:fc:1b:4c:21:3a:ff:36:
ee:b1:e3:19:04:a2:02:b5:9a:27:d1:3d:0f:23:44:
25:fd:ec:a5:05:7c:3e:ee:50:4a:bd:8b:ba:c7:a5:
2d:e3:c5:1d:51:13:45:94:88:3b:a6:57:4d:e1:d6:
49:7a:52:21:46:49:10:63:d3:cd:6b:b0:e7:a9:ae:
c0:02:b5:32:6c:b9:90:ff:02:e6:bb:f7:d4:b3:d4:
5a:54:a1:fb:cd:5c:46:4a:44:c2:ab:77:87:63:0e:
cc:31:46:e8:33:8a:27:6e:2f:58:c5:79:b4:f2:4f:
c3:42:b0:58:09:fe:3e:88:2e:a3:ab:7f:0b:bf:aa:
04:49:c2:6e:a1:2d:fd:4c:52:85:e2:61:3e:89:49:
ec:27:0e:a3:e2:2f:a7:b9:24:8c:ef:89:c6:f9:8c:
eb:26:2a:2a:6c:7e:74:22:8b:30:35:02:21:7c:3b:
8c:92:5e:41:43:ad:d5:06:4e:13:10:9c:56:5f:07:
78:44:38:cb:37:0f:b0:c5:06:83:31:08:9e:9b:11:
e5:43:54:23:84:2b:a3:8a:72:50:1e:c0:ac:2c:d5:
66:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:56:D2:AD:09:E2:A9:70:27:B3:27:55:12:2A:55:62:8D:DC:98:D4
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/gFbSrQniqXAnsydVEipVYo3cmNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.239.0/24
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
58:29:78:d6:56:bf:3b:b0:10:20:fd:33:18:4b:2c:fc:54:18:
b4:28:33:ff:e2:98:56:29:92:1c:2c:6f:97:52:bb:74:77:6f:
77:21:fe:d1:25:bc:c7:c5:07:f4:26:8a:3c:13:25:0d:81:2c:
fc:4f:26:e0:56:9f:eb:76:2e:e6:25:6e:cc:06:c7:32:0a:f5:
bb:82:5f:34:6a:eb:7f:7b:26:61:af:0c:b3:5f:fc:f5:c1:55:
2a:98:f2:1f:78:22:75:c7:1d:0b:9e:ba:26:83:00:82:e3:3b:
48:e4:20:ca:56:6f:da:20:b8:88:4d:4c:62:e5:85:a3:d1:2a:
d9:76:b9:09:6c:22:a3:b3:84:9f:0a:26:23:0a:88:34:13:44:
32:31:df:1b:82:be:dc:af:8b:41:df:5f:c7:0f:fa:51:01:90:
e3:de:41:68:cf:df:32:6e:68:01:71:21:a3:b0:25:71:45:e5:
48:3d:d8:d8:6c:89:90:1c:97:22:0d:22:a3:58:02:eb:fb:56:
e9:0a:39:b2:17:fc:b0:b1:35:14:7f:e6:7b:32:f4:8d:dd:3a:
3f:82:24:c8:61:6e:d7:b6:7a:3e:46:27:fc:07:6e:83:d9:15:
10:03:ad:50:fb:1e:c0:4b:97:4d:55:66:fe:03:72:21:da:ed:
5c:e7:91:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org