Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/GO7M5bgeSWyNMpsZH7WSeRKbOno.roa
File: GO7M5bgeSWyNMpsZH7WSeRKbOno.roa (raw, json)
Hash identifier: XloskLwx0PLMA71SDxu+QxZroHsd7AS19wocHFvtiG8=
Subject key identifier: 18:EE:CC:E5:B8:1E:49:6C:8D:32:9B:19:1F:B5:92:79:12:9B:3A:7A
Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial: 01913261047BAAE368B21C6F4C9FDF77E7B1
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/GO7M5bgeSWyNMpsZH7WSeRKbOno.roa
Signing time: Thu 08 Aug 2024 14:25:04 +0000
ROA not before: Thu 08 Aug 2024 14:25:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33915
IP address blocks: 145.79.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 11:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:61:04:7b:aa:e3:68:b2:1c:6f:4c:9f:df:77:e7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Validity
Not Before: Aug 8 14:25:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18eecce5b81e496c8d329b191fb59279129b3a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:79:6c:84:dc:cc:f6:e1:fb:e4:3c:b7:5c:0d:
62:1a:eb:bc:05:f4:2e:17:f3:0d:a5:cd:1a:00:b9:
1a:ff:cc:7a:4d:a4:07:e8:4f:c5:47:96:49:0a:07:
7f:65:b1:55:33:cb:75:18:50:ae:0d:73:7e:f8:17:
38:bd:dd:2c:7a:54:26:95:de:fa:62:9d:94:b0:e2:
78:53:2b:d0:32:14:16:b9:68:0a:67:da:12:2e:55:
9e:64:e6:5d:f6:ea:09:d8:84:fa:82:93:61:7a:3f:
98:68:e4:a5:88:60:2c:49:6d:40:3a:e5:66:3f:d8:
3e:18:af:a2:b1:ff:55:6c:8b:7e:99:15:ec:82:ea:
de:e6:fa:b5:52:6f:ff:d8:f2:77:60:c3:36:4c:db:
4b:bf:17:4a:0e:21:64:55:93:97:64:6e:42:2d:dd:
6e:45:a7:ad:83:df:9e:23:79:9b:c7:16:a7:f5:b2:
ec:c6:9d:d7:36:ad:ab:40:cf:d2:7e:86:64:a4:77:
6f:13:96:77:c3:a5:1e:ec:fc:ed:21:a9:33:3f:e5:
3c:67:4c:d4:1f:c4:3d:5d:0e:9c:ba:9b:53:e4:9c:
eb:d2:42:24:55:4b:b2:dd:74:0b:5b:6b:28:bc:be:
0f:9a:64:92:35:a9:25:ed:0c:0c:d6:60:23:3f:48:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EE:CC:E5:B8:1E:49:6C:8D:32:9B:19:1F:B5:92:79:12:9B:3A:7A
X509v3 Authority Key Identifier:
keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/GO7M5bgeSWyNMpsZH7WSeRKbOno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:21:d3:5a:26:2d:e2:c9:9e:74:ae:2a:db:21:26:96:90:ef:
fe:46:28:0a:66:ad:43:1e:71:ae:e4:3e:b1:d9:36:46:ea:35:
09:85:1a:b2:65:b7:d5:d6:1a:57:f2:e8:15:60:05:8c:85:da:
72:f3:ea:4a:34:76:3e:19:4e:66:ca:f0:14:f0:db:77:cb:e3:
10:66:cb:96:7c:9b:3d:3c:f0:dd:65:f7:a5:a1:e5:05:e1:c8:
f6:ba:aa:5e:0e:b6:ea:d0:36:c5:96:91:c8:ea:e2:bc:37:60:
ec:7c:7f:bc:a9:27:bb:fc:87:65:37:f6:59:8b:a8:72:0e:83:
da:3f:cc:57:c5:3c:e8:4e:02:b9:16:dd:e7:82:8c:73:16:b1:
4c:02:07:1e:db:eb:6e:4f:96:9d:3c:ee:93:64:0b:7e:05:5e:
f4:91:40:68:9c:76:59:7a:3e:0b:fe:05:6f:1d:e1:de:06:56:
32:f0:b7:d8:bb:00:74:b6:93:31:81:37:33:d6:1e:4f:1a:0c:
a1:32:9e:4a:5b:ad:0d:38:73:f1:16:6b:2b:dd:2c:a6:3d:30:
fd:58:bf:50:1e:d4:9d:c7:69:c6:be:c4:68:c1:81:b2:da:1c:
bd:aa:84:a8:d3:01:f6:bf:b2:d8:5e:ef:75:88:9a:59:3e:e7:
97:3d:3e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 13:19:43 2024 by rpki-client on console-fra.rpki-client.org