Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/Gl3-Q24K-crHeZzKh59_rJIUaSQ.roa
File: Gl3-Q24K-crHeZzKh59_rJIUaSQ.roa (raw, json)
Hash identifier: luQpah/MbS7yNU4UQNOhRYJ7ZUZHnbmL7W028Gev3kA=
Subject key identifier: 1A:5D:FE:43:6E:0A:F9:CA:C7:79:9C:CA:87:9F:7F:AC:92:14:69:24
Certificate issuer: /CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
Certificate serial: 018A418EFCB8A743C52FC557BF0CAADA38D7
Authority key identifier: 7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/Gl3-Q24K-crHeZzKh59_rJIUaSQ.roa
Signing time: Tue 29 Aug 2023 13:50:04 +0000
ROA not before: Tue 29 Aug 2023 13:50:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49525
IP address blocks: 91.212.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:8e:fc:b8:a7:43:c5:2f:c5:57:bf:0c:aa:da:38:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
Validity
Not Before: Aug 29 13:50:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a5dfe436e0af9cac7799cca879f7fac92146924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0b:33:b2:a3:5d:bd:0f:1a:bc:d1:0b:2c:fe:
53:ce:69:e1:bc:ee:c0:5e:32:79:91:cf:ae:ed:b6:
ca:fa:d5:6d:c9:67:43:7e:4f:48:fe:c4:62:df:18:
60:20:80:5c:45:4f:38:33:5e:9b:ac:57:0c:6e:93:
56:24:c6:4b:47:de:07:f1:e6:6a:ac:a0:ac:db:1b:
bd:e1:2c:b6:55:25:e7:3c:00:d2:3a:fe:8e:8f:3b:
72:20:7f:e2:c9:a4:7f:77:8b:ce:0b:1a:b0:1b:ca:
a3:f6:f8:5f:22:f8:49:18:cd:12:55:46:f7:51:b0:
7a:5e:7f:c0:93:3c:c0:36:02:de:e7:87:9e:ac:d9:
6b:44:10:19:de:d5:67:c2:f1:f1:a4:9e:91:58:a5:
a2:24:9b:73:96:2b:de:14:87:e2:bc:f8:07:6f:2b:
b6:d3:18:85:89:27:ad:7d:e7:dc:c4:e9:a7:38:7c:
6a:a4:23:8b:a5:44:92:c8:c5:c0:71:50:ec:97:94:
bd:26:75:e5:41:e1:72:ef:2f:e7:25:e2:8a:41:f2:
39:9a:e2:e7:bd:5f:82:65:6b:22:12:0d:06:cb:d5:
38:24:58:71:e0:de:26:6f:a4:1f:97:91:63:27:f7:
df:f7:f5:97:23:f6:18:d0:23:1b:6c:d4:48:b5:ad:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5D:FE:43:6E:0A:F9:CA:C7:79:9C:CA:87:9F:7F:AC:92:14:69:24
X509v3 Authority Key Identifier:
keyid:7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/Gl3-Q24K-crHeZzKh59_rJIUaSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.234.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:36:f2:13:56:01:c6:03:99:3d:24:e9:1e:23:fa:01:48:2a:
0b:2c:f9:6b:df:93:d2:a1:1c:52:a0:9c:3d:8c:8c:19:d4:14:
33:51:3f:67:c6:95:28:89:4e:e6:d2:ac:97:0c:57:05:14:83:
1a:32:cf:2b:67:6c:5e:ea:83:cb:bd:76:91:cf:db:c8:07:9b:
39:c5:71:1a:27:2e:26:51:be:d0:a2:db:98:05:a8:e7:c9:bd:
d8:1e:b4:30:69:c0:51:5f:f2:c1:5c:b9:e5:c6:16:a0:ee:7d:
21:e4:fb:63:04:f0:0a:aa:1a:43:77:18:31:1c:11:09:f2:46:
bb:bf:9c:8c:b2:91:2c:79:65:18:2c:e0:d0:84:67:ef:2a:d8:
66:b3:10:7f:8b:5c:8a:35:80:8b:c0:66:f0:98:bd:f8:9d:6c:
ca:2a:39:d2:01:e7:2b:65:b9:14:10:b3:2e:17:f1:59:be:1d:
1b:19:89:a1:b1:67:41:1e:8c:ab:9a:aa:d7:b8:b1:cb:b0:bb:
0a:d3:50:72:8d:8e:36:6f:10:ed:c4:6d:df:dc:ea:31:34:25:
ee:22:17:fd:ec:1c:0b:41:82:e2:e4:26:49:23:d8:e8:6f:56:
5b:09:dc:26:4a:46:cd:cb:59:57:fe:cd:d5:bc:18:6d:31:fa:
f4:8d:cf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:06 2024 by rpki-client on console-fra.rpki-client.org