Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/Gh_I-c8Qhw89U73KDDxiS2VfenI.roa
File: Gh_I-c8Qhw89U73KDDxiS2VfenI.roa (raw, json)
Hash identifier: H5XMj7ydl6gS8u6wF813rhjHklgvFHm39SRi/q4FyqM=
Subject key identifier: 1A:1F:C8:F9:CF:10:87:0F:3D:53:BD:CA:0C:3C:62:4B:65:5F:7A:72
Certificate issuer: /CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Certificate serial: 01856F02496F230C2DE2D6A653F5899416FD
Authority key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/Gh_I-c8Qhw89U73KDDxiS2VfenI.roa
Signing time: Sun 01 Jan 2023 20:24:58 +0000
ROA not before: Sun 01 Jan 2023 20:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39561
IP address blocks: 194.67.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:49:6f:23:0c:2d:e2:d6:a6:53:f5:89:94:16:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Validity
Not Before: Jan 1 20:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a1fc8f9cf10870f3d53bdca0c3c624b655f7a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:7e:ef:28:d2:d0:b7:a2:23:19:4e:57:3d:
b1:df:0d:3b:01:6a:93:79:95:7c:34:0c:fe:13:3f:
b2:e7:5b:9f:e7:1c:41:b4:01:86:1e:11:ca:59:db:
18:d9:2d:4a:bd:8a:07:d0:33:ed:56:6d:d3:44:8e:
61:a3:5b:58:a8:bc:fd:6a:85:aa:a6:c2:ba:c2:43:
1f:52:36:28:ce:b9:a2:84:42:20:dd:22:22:b4:e0:
01:06:74:38:7a:d2:9e:76:66:c2:12:2a:d0:1d:59:
b9:44:db:0a:0f:36:7a:b5:2e:e0:1e:0c:9b:d2:2d:
9c:b4:33:8e:08:53:fe:52:b4:c5:44:3e:2f:8b:e7:
90:00:36:17:ee:74:76:c2:78:a5:20:a5:7e:0c:37:
15:de:e6:d3:59:e7:e9:80:42:e7:ac:f0:c9:40:e6:
2b:42:2c:ed:20:ba:e1:bb:8c:29:af:c6:76:f9:da:
a3:8f:18:ab:47:fd:84:71:a2:29:da:c1:46:3d:d3:
23:08:31:8d:fd:33:94:5e:d8:d8:98:c9:c6:53:07:
45:39:6d:dd:89:50:af:7f:1a:06:fe:4e:49:eb:54:
be:31:d5:01:3e:6d:06:28:e6:91:2e:f4:cc:db:bd:
d1:e5:f9:6f:1c:63:70:d8:a7:3c:08:24:df:5b:d6:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1F:C8:F9:CF:10:87:0F:3D:53:BD:CA:0C:3C:62:4B:65:5F:7A:72
X509v3 Authority Key Identifier:
keyid:58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/Gh_I-c8Qhw89U73KDDxiS2VfenI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.67.73.0/24
Signature Algorithm: sha256WithRSAEncryption
91:41:0d:41:2e:27:9d:d8:ff:c8:18:c9:b7:fd:ec:8a:92:24:
ef:a3:17:53:2d:52:69:fa:3a:77:c4:e4:1a:53:15:01:60:a3:
9b:d9:03:2c:51:8f:fd:3a:64:23:e8:34:95:11:a2:e2:bd:b7:
99:68:0e:6b:db:b9:5e:76:11:c6:13:40:74:b7:9b:2f:c1:66:
03:53:6a:c8:e5:10:10:75:50:c7:43:3f:8f:99:b9:b8:cb:bb:
20:02:5e:49:68:9c:e5:59:c1:cc:6d:5b:bf:73:d3:dc:f9:04:
3a:00:37:5a:1e:df:c9:ab:10:07:0b:5f:e5:ff:3f:2b:9a:12:
5b:76:ca:0e:69:89:70:c4:f6:04:57:7b:ed:30:0b:bd:68:b1:
b3:ad:85:72:ef:44:da:b5:9c:0a:22:9c:3f:21:d9:ac:c5:7f:
89:6f:7f:dc:f7:6a:76:a9:a9:b5:fe:28:13:bb:59:ce:b2:75:
ff:7b:7e:d3:d0:05:db:eb:39:0a:40:53:3b:80:ec:df:7b:8b:
33:9a:8e:20:8a:56:e1:12:8c:82:03:9f:2f:08:87:a9:43:f9:
e8:ed:c1:60:67:60:3a:bf:d1:f8:27:e0:14:b0:eb:17:f4:5f:
05:19:dd:07:26:44:dd:c5:b5:d6:09:bb:7a:b7:c9:57:b4:67:
b9:eb:15:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:34 2024 by rpki-client on console-ams.rpki-client.org