Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/GMrwghURqGiYUqAmJ4omupR1DtU.roa
File: GMrwghURqGiYUqAmJ4omupR1DtU.roa (raw, json)
Hash identifier: uYOwDCicwkcetxU6581TS1GYPzN2F3/+nTBaM6BtjdQ=
Subject key identifier: 18:CA:F0:82:15:11:A8:68:98:52:A0:26:27:8A:26:BA:94:75:0E:D5
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 018D78198B0625BF9E79DD84C03EDAF6C18D
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/GMrwghURqGiYUqAmJ4omupR1DtU.roa
Signing time: Mon 05 Feb 2024 07:09:16 +0000
ROA not before: Mon 05 Feb 2024 07:09:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 193.178.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 06:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:19:8b:06:25:bf:9e:79:dd:84:c0:3e:da:f6:c1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Feb 5 07:09:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18caf0821511a8689852a026278a26ba94750ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:4b:6a:6a:0f:42:97:f8:67:cd:16:21:60:
38:c8:30:cb:eb:cf:c7:eb:5b:59:51:66:40:b4:85:
17:dc:ac:ee:3b:59:08:d6:05:11:03:e8:40:b7:37:
7c:2a:ef:1e:ff:d3:f4:2d:73:b2:c8:9d:e3:56:da:
41:32:98:4f:20:fe:b4:72:6c:3a:44:c7:80:86:0e:
f6:b3:bf:10:62:bd:d5:a2:21:63:7c:b5:45:33:16:
8f:ae:cc:1a:57:98:da:f1:96:6e:47:c4:01:66:3c:
76:a5:1d:49:43:dc:a7:b7:cb:16:7c:a8:8a:2a:fb:
30:aa:f6:47:87:4f:f4:a2:40:08:d8:8c:bb:ad:a1:
78:0c:1c:69:d0:60:cc:26:80:fa:4c:48:b9:3a:0a:
2d:13:36:91:ad:75:85:4c:62:e8:d5:a2:0b:e3:df:
c0:7e:9a:58:62:7c:27:82:9d:60:46:18:81:c5:ad:
07:0e:0f:0b:68:2a:53:56:b4:65:ef:19:82:c7:0e:
06:c3:8e:75:97:51:ec:c4:e3:36:54:46:59:6e:cf:
5b:67:c3:ba:a8:58:9a:07:64:dc:07:5e:40:55:15:
b7:b7:c4:85:99:8f:fc:99:ab:95:f4:5f:27:50:f4:
83:de:2e:05:e6:b8:b1:bc:b5:9d:ff:7c:83:38:ca:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CA:F0:82:15:11:A8:68:98:52:A0:26:27:8A:26:BA:94:75:0E:D5
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/GMrwghURqGiYUqAmJ4omupR1DtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.52.0/24
Signature Algorithm: sha256WithRSAEncryption
92:69:2f:03:a2:b8:35:f2:e6:ed:26:d5:d2:87:88:c4:72:49:
3d:92:c7:17:92:a2:af:24:79:36:ea:5e:ac:bb:91:5d:e0:b5:
6f:ab:e9:20:ad:02:76:0d:c0:34:84:ed:0f:7d:fe:5f:8c:43:
7f:f2:20:e0:61:d5:59:d4:8e:09:5a:a6:84:bb:99:b1:19:c2:
93:64:ef:ae:b6:e1:69:2a:45:ba:eb:77:56:97:c2:09:5a:c1:
e2:80:c8:48:84:92:38:f2:9d:92:7a:a2:3f:81:e1:a6:c1:e7:
30:e6:81:96:df:94:eb:e8:30:50:49:f9:ea:6e:cb:22:d6:e4:
38:7d:60:31:58:6a:26:a4:de:10:35:9a:29:15:b9:74:4f:a3:
75:ea:dd:c0:a1:38:6e:06:7a:70:3d:28:63:c3:d6:65:ac:5d:
a8:82:64:5e:a3:1c:c2:40:dd:df:a0:8f:9c:78:ee:5f:cc:69:
5a:6f:6e:6a:60:22:57:09:57:aa:3f:58:dc:89:9b:70:36:3a:
b7:99:4d:62:25:65:f2:d7:95:0a:83:56:56:13:76:e7:79:fc:
1d:41:9f:97:e0:a7:44:56:ee:67:4d:34:21:5f:7e:23:10:aa:
de:3a:cf:b3:93:b1:79:4a:ef:1d:67:b9:69:ab:ce:e0:67:5c:
0e:1a:c7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:11:24 2024 by rpki-client on console-fra.rpki-client.org