Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/GrnrIyPvIl7hrYnlhpYa1jV1FIY.roa
File: GrnrIyPvIl7hrYnlhpYa1jV1FIY.roa (raw, json)
Hash identifier: HyuQiLPeh6pEPDC4Ir3H50K7HMtQ7e6n68yesBq2Jsg=
Subject key identifier: 1A:B9:EB:23:23:EF:22:5E:E1:AD:89:E5:86:96:1A:D6:35:75:14:86
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 0189AD557A43E0EDA6F7EE592CBC3938B995
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/GrnrIyPvIl7hrYnlhpYa1jV1FIY.roa
Signing time: Mon 31 Jul 2023 19:03:27 +0000
ROA not before: Mon 31 Jul 2023 19:03:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202564
IP address blocks: 5.59.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:55:7a:43:e0:ed:a6:f7:ee:59:2c:bc:39:38:b9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jul 31 19:03:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ab9eb2323ef225ee1ad89e586961ad635751486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:93:33:65:33:42:df:37:c2:a9:1b:fc:40:ea:
49:4c:ce:ef:8f:7b:4c:a6:90:fb:8b:df:34:03:f6:
64:8b:a8:fd:cc:82:16:e9:64:e3:51:04:eb:d1:4e:
75:25:28:bf:0b:16:85:60:1e:bc:ac:c5:8b:25:ff:
d5:ee:7f:4f:58:80:e6:2d:d5:e4:8f:39:cf:bd:77:
a1:5f:9b:f9:81:bf:f9:52:c9:6c:00:95:e1:e5:0e:
7d:a8:a6:45:ca:9c:dd:fc:60:41:f7:d5:9a:3d:8c:
93:28:ee:2f:82:75:b5:a3:f6:e0:be:9f:8d:76:6a:
bb:da:87:04:75:ec:7b:60:73:c9:13:ab:9c:31:ca:
30:8c:55:b9:50:3a:56:7a:90:4a:66:4d:50:cb:b8:
c5:a3:74:76:5b:9f:80:6f:68:4e:b8:36:e5:1d:04:
0a:55:97:3d:1f:4f:60:60:64:32:06:83:a0:2c:af:
7f:c5:35:d6:13:d5:67:09:ab:9e:4d:43:99:dc:19:
a8:a5:92:0f:71:2c:85:ee:61:8d:57:e9:2b:32:ae:
3f:44:8d:48:fd:bc:b6:35:91:5a:f4:81:4d:ed:d2:
6f:a1:62:39:67:b0:89:53:86:dc:a9:05:d5:90:2d:
99:9f:8d:aa:53:c4:ac:87:f9:3f:bc:f8:35:a5:5d:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B9:EB:23:23:EF:22:5E:E1:AD:89:E5:86:96:1A:D6:35:75:14:86
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/GrnrIyPvIl7hrYnlhpYa1jV1FIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:f2:a7:90:2c:ed:bb:61:97:d7:8b:69:2f:40:d3:e6:59:0c:
5c:15:46:87:8f:fc:86:ae:1f:9f:33:3c:bb:0e:3f:9f:4a:aa:
5e:28:8b:75:26:c1:2e:c4:ee:68:69:e9:8a:c1:0c:b8:2f:2b:
60:31:d8:92:97:e5:2c:b2:27:d7:fd:aa:e5:09:e5:3f:97:cc:
06:d9:e9:a5:6c:80:e4:d5:ba:4f:3f:d4:ab:b7:87:9c:5a:26:
65:dd:c5:13:af:48:46:ee:2d:8e:3d:6d:8e:b9:da:d7:35:57:
6e:90:14:61:03:fe:2c:c0:43:50:67:05:9f:f0:a5:9a:fc:c8:
56:f1:29:6d:4a:b6:c5:cc:3d:36:2c:39:ee:9e:06:80:a1:67:
ec:71:db:8d:c3:94:05:2a:60:d6:c3:5e:cb:49:cd:57:4c:b4:
0a:5e:75:f1:5c:d3:7a:ec:0e:d4:37:72:4e:06:4e:1c:12:9f:
17:79:a0:33:9b:2d:8b:48:f0:88:68:1e:ad:8f:2e:db:a8:e1:
ee:ab:68:9a:af:a0:50:ca:c3:75:70:16:d1:79:67:78:19:9e:
fd:7e:d0:64:fb:40:06:bc:03:af:91:3f:ae:af:f4:e6:e4:b0:
98:cc:50:b8:7b:cf:0f:08:0c:14:8b:42:27:0a:98:78:8d:c1:
91:45:59:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org