Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/tXg3htSGxyS409ZJbWglFnJeVuU.roa
File: tXg3htSGxyS409ZJbWglFnJeVuU.roa (raw, json)
Hash identifier: IXXycAwXGOBljPw38EPZv6hAEt57wLxLCixTvy5hs3g=
Subject key identifier: B5:78:37:86:D4:86:C7:24:B8:D3:D6:49:6D:68:25:16:72:5E:56:E5
Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial: 018571555530F01022D7395EC34AD7EEBD9E
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/tXg3htSGxyS409ZJbWglFnJeVuU.roa
Signing time: Mon 02 Jan 2023 07:14:55 +0000
ROA not before: Mon 02 Jan 2023 07:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205881
IP address blocks: 151.136.0.0/16 maxlen: 16
2a07:4ac0:2400::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:55:30:f0:10:22:d7:39:5e:c3:4a:d7:ee:bd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Validity
Not Before: Jan 2 07:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5783786d486c724b8d3d6496d682516725e56e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:1c:1c:06:69:1f:a7:db:a8:c2:bc:95:09:
a2:4b:86:1b:77:00:b2:fd:ac:a5:c1:98:72:41:60:
76:98:05:93:d5:98:77:39:78:1f:cc:4e:9b:01:47:
18:5e:f0:6b:3f:e2:13:e0:b7:51:71:70:e7:7d:fa:
78:a6:d7:bd:c2:c8:76:0c:3c:06:a2:8d:e3:9b:8a:
1f:fb:4f:b1:af:a8:99:e0:e8:a6:80:8f:a7:10:8b:
cb:8a:56:89:6a:e7:78:29:1e:04:1d:d4:e3:c6:df:
91:96:f6:05:11:ad:92:00:6a:02:de:31:69:11:66:
b6:8f:50:d0:45:8d:a3:50:72:7b:48:bd:d8:1d:47:
a1:8d:e7:58:75:75:7e:9c:cf:2e:62:c7:3c:bc:0f:
8a:fd:cc:44:20:6b:fb:7d:fc:3f:f8:84:a9:80:cb:
38:08:d7:08:ff:74:24:6a:cd:81:9e:0d:b1:4d:05:
56:c3:bf:8e:6e:af:8d:6a:45:dc:b1:e5:65:59:14:
bb:53:42:f1:01:fa:9d:e1:58:2a:51:51:dc:00:69:
29:9e:7c:23:10:f1:ed:e5:e6:c9:d4:1b:e0:1c:8b:
20:5b:92:08:9f:57:4f:9a:92:11:03:32:e1:9d:02:
74:4c:43:ca:42:d2:5c:8a:9a:a4:b4:81:dd:45:0d:
2a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:78:37:86:D4:86:C7:24:B8:D3:D6:49:6D:68:25:16:72:5E:56:E5
X509v3 Authority Key Identifier:
keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/tXg3htSGxyS409ZJbWglFnJeVuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.136.0.0/16
IPv6:
2a07:4ac0:2400::/40
Signature Algorithm: sha256WithRSAEncryption
ac:be:c6:e9:4f:08:55:52:e0:38:fe:cc:c7:c8:d4:84:de:09:
01:63:94:62:5b:90:56:df:47:5a:06:0a:b0:56:94:51:54:6d:
fa:2e:50:90:b4:be:39:52:71:d1:10:c3:65:98:20:62:6d:4b:
bd:f2:ad:95:1b:94:d8:8a:d4:3b:32:2d:71:b8:01:87:80:57:
a6:e8:15:c3:43:bb:5f:2c:19:18:e9:7e:d6:3f:eb:d2:67:5a:
6b:db:03:f7:c9:56:41:0e:7c:2c:ba:de:69:92:ad:6d:7d:d6:
ca:21:81:d6:33:1d:db:d1:86:fb:15:94:e6:f2:c6:40:e4:32:
c9:b1:ec:ab:11:f5:14:aa:4d:18:ae:73:d7:7c:73:60:f1:20:
db:a8:c8:e2:3c:e3:d1:5d:8b:62:63:77:e1:f4:ea:13:5b:27:
c8:de:8e:2a:fe:be:12:5f:e3:a4:68:7b:3e:a3:dc:e6:92:a1:
06:70:ab:3b:8a:6d:45:72:7a:89:bd:ec:17:6d:bd:b4:77:2d:
56:4a:8a:5f:e0:e8:62:07:b7:e4:2f:36:0d:9c:fe:de:80:a7:
48:b2:48:1c:21:10:23:2c:c8:0f:4a:99:20:be:8a:8e:2c:68:
e9:9c:69:50:4e:60:46:0b:5e:a0:a9:49:fe:c1:7f:6c:21:a0:
e1:a1:c5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:02 2024 by rpki-client on console-ams.rpki-client.org