Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/gFmiXxYIBwt3st8EL-1y5dtTGdo.roa
File: gFmiXxYIBwt3st8EL-1y5dtTGdo.roa (raw, json)
Hash identifier: 5jndufw+bKIRwUKYGWhAWUV428Uw3e+X7zR6+O01Nkw=
Subject key identifier: 80:59:A2:5F:16:08:07:0B:77:B2:DF:04:2F:ED:72:E5:DB:53:19:DA
Certificate issuer: /CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Certificate serial: 01856DC1BD841B6B2FEB5CB0E0A9BB5A3664
Authority key identifier: 0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/gFmiXxYIBwt3st8EL-1y5dtTGdo.roa
Signing time: Sun 01 Jan 2023 14:34:51 +0000
ROA not before: Sun 01 Jan 2023 14:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8426
IP address blocks: 194.48.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:bd:84:1b:6b:2f:eb:5c:b0:e0:a9:bb:5a:36:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Validity
Not Before: Jan 1 14:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8059a25f1608070b77b2df042fed72e5db5319da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:0a:09:e9:a5:93:a8:eb:48:34:c6:18:38:
dd:78:90:2f:0e:58:aa:5c:35:aa:6d:43:43:be:10:
cb:a5:3a:ae:55:c8:b5:c0:0d:0f:26:4d:21:1e:93:
4f:a6:dd:e9:b4:fb:63:f3:e1:bf:56:fb:72:dc:e2:
be:ff:05:cc:c4:6f:18:fc:65:ef:80:5f:7f:11:44:
d5:a9:9c:1e:6c:ca:71:f7:56:d7:14:15:dc:8e:5e:
26:d9:a7:47:b5:27:00:b1:9c:0a:db:04:3c:46:98:
f9:5f:f5:cc:58:78:92:88:55:a2:a9:de:cb:da:bd:
a9:a5:92:53:2b:3b:a7:57:3b:7d:33:56:24:99:6e:
9a:4d:e8:02:8c:88:5a:92:3e:b2:7c:72:39:ac:81:
7f:be:f2:2e:bb:c1:1e:2b:1c:7e:ff:40:9d:2e:ab:
e5:79:6e:95:da:e5:12:1a:42:99:e8:78:87:46:60:
4b:12:73:e7:4d:fc:8f:19:82:50:54:0b:35:88:6e:
07:6c:ec:2d:8f:77:90:4c:b0:dc:ad:3b:81:ec:fa:
b6:38:aa:c0:65:bf:33:8a:3f:c6:42:34:8e:37:ee:
b4:2b:b2:91:64:8b:ed:50:45:81:6a:b9:59:71:10:
e3:78:bd:64:6a:80:94:87:64:58:d8:ff:ca:71:09:
d5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:59:A2:5F:16:08:07:0B:77:B2:DF:04:2F:ED:72:E5:DB:53:19:DA
X509v3 Authority Key Identifier:
keyid:0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/gFmiXxYIBwt3st8EL-1y5dtTGdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.207.0/24
Signature Algorithm: sha256WithRSAEncryption
18:8c:0b:88:01:81:a9:36:04:8e:e2:20:b5:46:5a:50:05:e7:
43:87:91:ab:f6:29:5a:63:f7:68:61:3a:3a:57:b3:34:2f:00:
5a:42:17:7c:9e:ec:fe:3a:89:51:ec:b9:a6:97:9d:3a:30:90:
b0:87:53:74:de:5e:27:94:bc:76:66:c6:0a:99:93:ba:e3:55:
6f:3e:a2:5a:f5:7e:87:12:f3:d1:ab:d7:c2:1c:d7:2d:1d:c2:
c4:65:9b:6c:6f:7e:d5:c0:ec:37:e1:b7:f2:58:9e:0f:90:0e:
cc:1c:d6:e7:a0:8d:4d:2d:d7:c3:2b:da:70:2c:c2:e4:13:97:
e7:eb:dc:60:f4:74:33:c4:87:46:11:02:a3:24:1e:ec:4f:d7:
02:99:7f:30:6a:2e:85:01:83:d2:82:5d:ae:01:34:7b:86:b5:
fa:9d:ab:fb:57:53:fb:77:6a:07:db:1c:48:a3:83:cc:7a:f1:
f5:27:44:93:ea:8a:5c:bf:24:75:a1:87:d4:7b:6f:e1:9d:ac:
33:c4:ad:fc:a8:d3:7f:f5:e6:9e:e5:92:45:a5:8c:03:e9:35:
20:f0:83:7e:ac:35:8d:cd:f3:51:0f:43:79:94:76:9a:94:8b:
b0:1b:32:f9:a3:50:86:65:7e:a6:1d:fc:7e:ae:15:09:80:85:
ff:22:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:55 2024 by rpki-client on console-fra.rpki-client.org