Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/gpQHHLn9F3JKLr7PCOeGKbwEt-U.roa
File: gpQHHLn9F3JKLr7PCOeGKbwEt-U.roa (raw, json)
Hash identifier: In71N+i7/UEn+WISfWHUBOS28j/ZJrmRMgQMdVK0f1Y=
Subject key identifier: 82:94:07:1C:B9:FD:17:72:4A:2E:BE:CF:08:E7:86:29:BC:04:B7:E5
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 01856D386D265A0E6C0E5BB7CC87DA230A25
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/gpQHHLn9F3JKLr7PCOeGKbwEt-U.roa
Signing time: Sun 01 Jan 2023 12:04:52 +0000
ROA not before: Sun 01 Jan 2023 12:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 193.189.142.0/24 maxlen: 24
2001:67c:2ba0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:6d:26:5a:0e:6c:0e:5b:b7:cc:87:da:23:0a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Jan 1 12:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8294071cb9fd17724a2ebecf08e78629bc04b7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:e0:f5:30:a6:c8:b5:a9:b1:7d:20:f4:35:
59:3d:0a:da:ea:9c:0a:9a:5f:41:40:f8:96:19:b4:
22:68:a2:aa:9c:56:a1:d4:66:53:3e:73:58:41:bb:
6b:89:0a:c6:e9:93:dc:76:b4:d9:91:70:b3:1e:95:
8e:1e:d4:cf:ce:38:5b:8f:ff:8b:f2:49:b4:b4:1d:
3e:50:0c:6b:8a:3c:4e:7d:6f:ad:7f:c9:14:83:09:
c2:fc:96:38:39:10:71:84:24:fe:3a:54:54:24:8f:
2c:06:80:90:27:da:99:58:fa:22:80:38:88:34:54:
f9:cb:f3:90:88:b7:89:c1:0a:c2:0d:d7:9b:10:70:
90:02:62:9a:fb:f9:d9:30:ca:fe:35:83:92:0e:8a:
80:98:7b:d5:41:71:d8:01:dc:76:75:1b:b4:99:fa:
da:5f:1f:56:7b:94:99:10:fa:82:cb:a3:a9:9a:82:
d9:0f:cb:b4:bc:09:f2:17:2c:eb:d5:cb:9d:3c:6f:
76:e4:6e:d8:0d:d9:52:cb:38:04:7c:a3:2c:d8:5d:
21:c4:a0:43:55:7d:70:bc:04:7a:db:82:d4:5c:ff:
cd:49:f5:58:0f:f9:a8:03:ad:7f:a3:10:9d:37:64:
11:37:10:9b:6b:00:b3:b9:40:a4:a3:50:a1:44:c6:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:94:07:1C:B9:FD:17:72:4A:2E:BE:CF:08:E7:86:29:BC:04:B7:E5
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/gpQHHLn9F3JKLr7PCOeGKbwEt-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.142.0/24
IPv6:
2001:67c:2ba0::/48
Signature Algorithm: sha256WithRSAEncryption
03:6b:d6:ae:68:8c:be:13:0b:81:93:a4:ca:db:48:f2:d3:ee:
e0:4d:09:d7:fc:c3:d5:04:fe:7c:61:b1:6e:e8:bf:4a:56:ea:
bc:57:15:f5:1f:d8:83:bd:63:aa:53:ad:11:41:78:7e:33:cb:
de:63:ca:dc:df:7f:1c:6e:5d:88:35:0c:4b:9c:95:3d:78:a8:
d5:30:7b:de:99:cf:fd:1b:cb:2b:80:b7:ac:a9:00:1f:c7:43:
a4:c3:f5:22:c4:9f:36:a9:f9:f3:78:6a:16:77:e6:8c:59:27:
a2:76:18:46:09:36:22:b0:5e:ba:2a:e5:98:16:d7:69:b2:0f:
a9:52:b1:93:db:a7:fc:58:1e:8f:ea:bb:03:04:20:6a:03:a4:
99:53:3b:f6:0e:ad:08:25:a6:57:2b:8e:ff:ae:fb:33:23:5e:
a5:c4:8c:3c:4a:08:6e:e5:d7:7b:13:d3:ba:f4:9c:c1:2a:95:
e4:0a:b5:90:45:dc:b8:ff:b0:3e:9d:89:43:a6:41:e0:07:3d:
80:76:96:44:e0:37:58:06:7c:1c:06:44:35:f2:00:99:52:44:
01:e7:21:da:94:5a:b1:42:ae:8b:a2:9c:c2:1f:a4:d8:dc:ee:
70:e0:17:bf:ac:6b:b2:87:79:2a:cc:00:2f:d8:f9:4f:bc:95:
cf:e4:c0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:49 2024 by rpki-client on console-ams.rpki-client.org