Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/gJLL7VkPr8MrhWbBgQsOSJzPldA.roa
File: gJLL7VkPr8MrhWbBgQsOSJzPldA.roa (raw, json)
Hash identifier: 2dhewu9P3CqmQBUYo1mfHWgU7E1dHDN/oL7Kw16BC7w=
Subject key identifier: 80:92:CB:ED:59:0F:AF:C3:2B:85:66:C1:81:0B:0E:48:9C:CF:95:D0
Certificate issuer: /CN=eb91e993a4a40ce7e5d9c86325f186df069ecacd
Certificate serial: 018CC726D583DE6AF0040A6E525473D7854D
Authority key identifier: EB:91:E9:93:A4:A4:0C:E7:E5:D9:C8:63:25:F1:86:DF:06:9E:CA:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65Hpk6SkDOfl2chjJfGG3waeys0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/gJLL7VkPr8MrhWbBgQsOSJzPldA.roa
Signing time: Mon 01 Jan 2024 22:31:00 +0000
ROA not before: Mon 01 Jan 2024 22:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202269
IP address blocks: 194.146.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 12:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:d5:83:de:6a:f0:04:0a:6e:52:54:73:d7:85:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb91e993a4a40ce7e5d9c86325f186df069ecacd
Validity
Not Before: Jan 1 22:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8092cbed590fafc32b8566c1810b0e489ccf95d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6d:46:0a:09:0c:c1:97:81:cb:63:07:85:84:
06:c9:b7:16:ee:c3:6b:17:f6:41:a0:04:23:41:93:
d2:09:24:3d:d0:3d:b1:5d:3d:61:f8:f3:cc:05:85:
6d:00:c1:fc:0e:10:c7:90:8a:34:21:39:44:b5:0d:
e9:50:35:db:e4:09:0e:79:e0:77:0a:c1:2b:2c:26:
e3:34:6d:ef:60:a1:b4:2d:2d:04:a1:6e:eb:a3:90:
bf:b6:eb:c6:e4:58:5f:05:6e:73:f0:d8:bc:88:91:
32:36:4f:cd:8c:15:8b:51:58:23:61:2f:d1:52:89:
35:71:f4:e4:d9:16:36:fc:d5:65:f3:da:e0:2e:6d:
80:d1:07:72:c3:9f:bb:71:a4:fe:43:47:88:f8:0f:
a6:aa:7c:2c:76:cc:a6:b0:81:e5:b8:0a:7a:ff:9d:
36:c5:5d:e5:b5:b6:41:e7:00:ff:c9:48:e8:11:1c:
b9:cc:37:53:ec:b3:15:40:29:52:ee:c9:dd:03:03:
7d:ef:46:1c:35:da:76:f8:99:3c:91:55:11:94:95:
c1:ff:0d:a1:76:92:e9:a1:ea:e7:4b:70:de:11:6c:
e0:eb:72:37:a7:0a:cd:be:24:1c:3b:f1:95:15:4a:
f7:17:ad:ab:07:75:d1:f9:56:f9:57:5e:2f:5a:05:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:92:CB:ED:59:0F:AF:C3:2B:85:66:C1:81:0B:0E:48:9C:CF:95:D0
X509v3 Authority Key Identifier:
keyid:EB:91:E9:93:A4:A4:0C:E7:E5:D9:C8:63:25:F1:86:DF:06:9E:CA:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65Hpk6SkDOfl2chjJfGG3waeys0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/gJLL7VkPr8MrhWbBgQsOSJzPldA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f3a02-0650-4e5c-b8d0-c701f279c6de/1/65Hpk6SkDOfl2chjJfGG3waeys0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:df:3c:7d:9c:91:d3:37:88:58:77:de:f0:df:03:a0:59:8f:
27:36:f0:51:8e:db:c8:c8:2e:2c:c6:5f:66:b9:93:ec:3c:d3:
71:73:df:6d:d7:d5:ec:f2:06:f2:16:73:c1:1b:d1:e0:07:7a:
19:6c:50:7c:ec:eb:f8:05:e0:e6:59:1f:7a:6e:bd:cb:81:e8:
5c:b8:16:88:3c:bf:56:fb:51:ee:e9:68:b5:b4:1b:ce:84:8e:
4b:cf:b7:7d:86:01:48:23:2d:cd:2b:52:b2:5f:11:9e:ab:fd:
39:aa:1a:d1:60:91:17:2c:83:70:1b:0e:4e:a6:10:0a:9b:d8:
fd:1a:58:ed:3d:16:3d:e5:f7:17:45:b4:8f:2c:8f:93:89:ad:
1b:ec:0b:7d:25:f1:fc:0c:42:67:54:98:19:8a:a0:6d:bc:cd:
2e:83:05:e6:f8:c7:b5:2c:56:91:eb:38:f2:4e:70:0d:72:9e:
a2:68:dc:fa:18:1e:ad:4b:b4:87:7d:f1:6d:49:f4:e3:7b:9b:
9c:02:0b:34:c5:99:0b:67:13:ef:ba:93:38:d7:a8:ef:07:82:
33:e2:68:69:9e:d1:d3:4e:6b:11:a1:9e:24:ce:f0:5a:59:87:
31:76:dc:15:07:1f:23:b8:52:62:90:3e:2e:c0:3b:6b:b6:57:
5f:94:e8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:11 2024 by rpki-client on console-fra.rpki-client.org