Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/G-vFj5GQqmXOuM5PJlTnadPRdH4.roa
File: G-vFj5GQqmXOuM5PJlTnadPRdH4.roa (raw, json)
Hash identifier: SHmXaIdvVHuwMz1qk970SMpSJ0kmErTLchVY72gL8/Y=
Subject key identifier: 1B:EB:C5:8F:91:90:AA:65:CE:B8:CE:4F:26:54:E7:69:D3:D1:74:7E
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 018CC50038BEEA532A137B2AE10AB050191E
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/G-vFj5GQqmXOuM5PJlTnadPRdH4.roa
Signing time: Mon 01 Jan 2024 12:29:35 +0000
ROA not before: Mon 01 Jan 2024 12:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62456
IP address blocks: 93.180.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Feb 2024 07:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:38:be:ea:53:2a:13:7b:2a:e1:0a:b0:50:19:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Jan 1 12:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bebc58f9190aa65ceb8ce4f2654e769d3d1747e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:db:f8:9f:56:37:f2:c5:67:49:99:12:30:
f9:0c:87:c4:35:18:4e:85:ea:42:07:41:67:68:0e:
2a:1e:34:fa:0a:a8:c9:4d:4b:4c:ab:a4:dd:c7:66:
ec:8b:26:70:67:6d:3a:56:cf:2c:8b:0b:bb:9e:c7:
5b:ce:e7:d3:5d:01:7b:be:d9:ce:5f:e9:4a:12:c4:
1c:38:77:36:7a:2f:1a:84:43:fc:f8:68:18:bb:3e:
e1:b8:97:22:f0:5c:84:ce:43:0f:c2:fa:18:e6:8d:
00:de:29:cc:c4:b3:6b:42:09:be:68:5f:bc:21:e3:
2b:87:1b:96:63:58:de:ed:6e:0b:e0:a5:b4:d1:b3:
95:9e:a3:05:94:d4:67:b8:23:23:df:3d:77:e8:07:
73:51:a8:1f:b1:95:15:0e:8a:a4:93:bf:23:91:9a:
55:c4:03:cf:ae:94:be:bc:37:e3:c9:75:8b:26:cf:
78:06:05:10:8c:d1:45:56:05:1e:10:1e:45:f0:05:
de:0d:bf:64:6a:50:e0:3d:ac:c9:c9:20:74:5f:81:
99:92:b2:a7:cd:7f:3d:2a:e4:5d:95:09:96:3b:28:
93:55:3d:fa:68:98:bd:66:84:2d:66:55:12:fd:50:
3f:2a:25:54:8b:a6:8d:bb:61:6b:d1:19:ba:e7:70:
78:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EB:C5:8F:91:90:AA:65:CE:B8:CE:4F:26:54:E7:69:D3:D1:74:7E
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/G-vFj5GQqmXOuM5PJlTnadPRdH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.135.0/24
Signature Algorithm: sha256WithRSAEncryption
85:83:e4:1c:6d:73:f4:8f:96:1e:4b:6a:ed:7f:c5:63:07:b8:
83:5e:7d:72:84:be:4c:d4:44:55:9f:bf:a3:5b:73:14:29:25:
83:11:3a:88:ff:6c:f0:61:38:c4:fe:6a:06:9e:b7:25:5a:b1:
f4:f6:c8:aa:bc:28:49:c3:4f:a6:b3:c7:f4:52:75:84:f5:c6:
26:2a:20:e6:4b:03:08:2f:98:aa:64:e6:12:b1:8c:58:d5:76:
93:a3:87:25:94:e4:9e:fa:c6:93:4e:2a:31:f8:48:f2:0c:59:
f2:63:3e:39:53:99:d7:2e:e1:07:cc:9e:52:ac:52:aa:69:0f:
7a:f9:22:e5:f6:ce:96:f5:12:7b:10:2a:88:cc:56:ec:e3:84:
60:52:ac:e6:7a:94:a3:71:f3:dc:ae:a5:44:95:5c:d0:bb:f4:
81:1d:da:c4:20:47:f2:99:ad:06:65:6b:b5:9d:f8:8b:9e:60:
ac:9f:f6:f6:0a:8f:7c:16:ba:43:b0:b9:5c:93:90:3a:74:b6:
09:b3:73:5e:ad:df:fa:95:e1:3e:2b:40:0f:a1:97:44:54:5d:
98:65:b6:fb:a2:d0:1a:51:87:d1:79:f6:3c:94:71:45:88:9e:
70:4c:47:00:91:90:dc:df:fe:24:ca:b0:97:2d:16:f7:23:39:
9c:76:9c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:44 2024 by rpki-client on console-ams.rpki-client.org