Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/GAkOjSdHCwvIxE8IpuijXtk9stI.roa
File: GAkOjSdHCwvIxE8IpuijXtk9stI.roa (raw, json)
Hash identifier: NRNQr0jj6dH1oLGiQ9W7i2mNsFKo/YV2ZeYkV49Am6Q=
Subject key identifier: 18:09:0E:8D:27:47:0B:0B:C8:C4:4F:08:A6:E8:A3:5E:D9:3D:B2:D2
Certificate issuer: /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial: 018685B67EE886CB2487EA1595AC7D8A000C
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/GAkOjSdHCwvIxE8IpuijXtk9stI.roa
Signing time: Fri 24 Feb 2023 23:16:15 +0000
ROA not before: Fri 24 Feb 2023 23:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397540
IP address blocks: 176.125.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:85:b6:7e:e8:86:cb:24:87:ea:15:95:ac:7d:8a:00:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Validity
Not Before: Feb 24 23:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18090e8d27470b0bc8c44f08a6e8a35ed93db2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:27:e0:90:f1:b5:db:8d:db:78:a2:7b:8c:
f6:e8:58:62:23:34:ab:1c:04:a8:fc:20:c5:8f:98:
a9:ad:81:87:b2:ea:20:75:ed:82:1b:79:6d:99:51:
c1:d5:23:e2:79:8d:2e:31:f7:0e:0a:d6:f8:52:1f:
d3:f9:4d:3e:4d:ab:34:9d:bd:6a:68:c0:20:6d:b1:
98:54:09:2e:58:3d:4e:b1:24:ae:e4:52:ca:53:b6:
d5:b9:b8:3c:df:8f:1f:c0:3d:8d:67:43:01:bb:78:
df:9b:c3:a5:a4:9d:fd:1a:4b:ae:39:f0:7f:09:94:
a8:f1:b4:80:31:b9:88:ab:fb:65:6b:30:37:73:0f:
ef:e6:fe:02:54:a4:e9:b9:da:d0:3f:bb:cc:5c:a0:
7e:c2:46:a9:b2:e0:35:7e:f9:2f:d1:60:70:b7:b0:
98:31:6a:f2:bc:d4:ac:23:1b:25:01:27:62:86:25:
f7:65:11:d8:1a:8c:1a:c7:8f:ab:a7:69:b1:78:da:
95:95:09:3e:4a:8b:4d:58:92:25:34:23:74:d1:62:
b1:f9:02:70:d7:0b:83:a1:a5:9b:c8:1e:df:83:0d:
ce:aa:5a:03:c7:6d:e4:c9:e6:5c:02:96:bf:0c:4b:
69:5b:f6:17:86:2b:70:d7:19:4b:31:ec:d0:8c:c7:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:09:0E:8D:27:47:0B:0B:C8:C4:4F:08:A6:E8:A3:5E:D9:3D:B2:D2
X509v3 Authority Key Identifier:
keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/GAkOjSdHCwvIxE8IpuijXtk9stI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.236.0/22
Signature Algorithm: sha256WithRSAEncryption
64:87:46:63:36:d2:84:3d:a4:bc:8f:be:ff:45:e1:b8:91:21:
23:0f:f9:34:ea:4f:73:e0:ac:4f:a6:e8:18:f1:91:be:bc:41:
5a:5b:15:7c:5f:81:06:e0:03:73:f1:92:d7:57:93:4d:84:06:
c3:71:b0:1b:e6:a9:a9:ec:b5:4b:a9:80:62:b7:4f:eb:5e:a0:
cb:a8:ee:c5:5d:9c:77:01:b3:14:08:34:59:48:d5:8e:af:d8:
ad:c1:90:d3:3d:9f:b6:ca:0d:c3:5c:83:d6:5b:39:5b:b3:4f:
0b:75:19:9b:1f:4a:a6:09:f1:c4:d4:dd:08:1f:2f:ac:2c:4f:
58:49:02:5f:63:6d:84:98:10:35:24:7a:0c:52:8a:de:f8:a1:
81:e7:68:fc:01:16:97:ed:35:4a:b6:61:ba:45:6d:24:ad:a3:
8c:1c:94:43:14:95:14:b9:ae:87:2d:43:2c:87:77:6b:3d:9d:
00:99:0d:98:33:fe:89:8c:cb:b2:a5:cb:93:cc:a7:0d:09:eb:
3e:94:08:57:03:a9:d1:1c:71:7f:4e:09:f7:2d:a8:a6:b4:90:
5a:9a:2c:39:09:9c:76:d6:09:2c:02:a1:ef:3f:8a:f9:f4:02:
e2:29:88:2e:8d:71:c8:40:d9:a8:ba:63:ed:67:93:58:ae:5e:
26:fb:5e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:57 2024 by rpki-client on console-ams.rpki-client.org