Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/G1XV8F5YOrXUdD3EWe_53KZejuY.roa
File: G1XV8F5YOrXUdD3EWe_53KZejuY.roa (raw, json)
Hash identifier: X0A+kdXDREhkbZui5mDOecJ+97d9PDcZ34sUWOAcYAg=
Subject key identifier: 1B:55:D5:F0:5E:58:3A:B5:D4:74:3D:C4:59:EF:F9:DC:A6:5E:8E:E6
Certificate issuer: /CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Certificate serial: 018B3D2A07DA01A9BA89AC362F24106E9BD8
Authority key identifier: CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/G1XV8F5YOrXUdD3EWe_53KZejuY.roa
Signing time: Tue 17 Oct 2023 10:24:06 +0000
ROA not before: Tue 17 Oct 2023 10:24:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207706
IP address blocks: 94.154.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:2a:07:da:01:a9:ba:89:ac:36:2f:24:10:6e:9b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Validity
Not Before: Oct 17 10:24:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b55d5f05e583ab5d4743dc459eff9dca65e8ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:95:9c:7b:55:9f:29:4d:4f:e3:28:49:1c:81:
db:94:5d:5f:33:0a:26:47:e9:cf:61:e8:d7:fd:27:
76:eb:f1:32:a1:8c:9a:74:65:f7:c8:89:2f:54:ba:
8d:ec:03:09:be:de:71:48:e7:47:41:f9:40:83:1d:
9e:74:84:40:6b:31:6f:f2:5b:79:cd:50:ba:2d:6f:
bb:7e:b3:f2:97:43:54:a3:f0:f6:4d:b3:fd:ac:96:
5a:74:66:f5:65:88:79:e2:12:5d:d0:08:9d:41:6f:
ce:b6:b1:65:a1:59:da:89:dc:75:03:ef:f7:35:7e:
39:a7:7c:2e:4f:36:9a:a5:2a:a2:11:18:44:53:30:
be:63:11:44:14:63:be:c4:d9:ef:c5:59:a3:b6:4e:
27:b7:6b:c3:c0:57:73:e5:7b:0f:19:f2:db:f9:28:
77:26:51:36:a1:e1:9a:cc:77:d0:04:84:7a:31:cf:
ed:0b:04:ac:75:ed:fd:35:63:93:73:ef:af:81:bd:
a1:1a:6a:3d:23:f2:ec:1c:7b:71:3d:8f:3c:a6:6e:
f9:ab:78:12:1c:a2:5d:89:41:7c:d4:8a:a5:1a:5c:
6f:26:03:56:6c:16:4c:5d:51:8d:59:f0:e8:1a:20:
3e:82:7d:6c:f8:29:41:e6:e2:70:3a:b8:0b:11:82:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:55:D5:F0:5E:58:3A:B5:D4:74:3D:C4:59:EF:F9:DC:A6:5E:8E:E6
X509v3 Authority Key Identifier:
keyid:CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/G1XV8F5YOrXUdD3EWe_53KZejuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.7.0/24
Signature Algorithm: sha256WithRSAEncryption
00:23:2a:06:7c:5c:1d:e8:41:fa:e7:23:4d:48:e1:2f:f5:6c:
0e:11:89:6d:b9:49:fb:bb:12:8e:6b:60:cf:79:fe:b0:36:ef:
7f:ff:4f:83:20:1b:b2:f2:aa:b8:11:4e:1e:27:c3:56:1d:fe:
90:e8:03:ca:46:48:09:e9:2a:69:6a:30:78:72:50:c7:b3:7b:
41:c2:67:b6:9e:8f:a1:21:31:81:6c:28:a5:28:18:9a:c9:08:
ac:d1:5a:95:73:5c:53:20:51:75:e6:a3:69:d8:2f:14:82:28:
45:ce:7a:f1:3b:be:1c:86:3c:19:ae:e0:2c:cc:72:61:cc:64:
09:c2:be:aa:c3:06:6d:c5:7e:84:fb:d4:b7:30:67:90:cc:9f:
c3:6d:98:dc:cd:b1:82:1b:34:a2:fc:5c:2e:29:e2:ac:55:a2:
fc:7e:f7:af:e6:59:dc:f0:40:79:ce:ef:1a:72:7f:60:f0:93:
e1:c7:4d:8b:41:b1:35:1b:e9:d9:99:26:2e:86:99:75:7c:68:
d9:18:0c:86:2e:18:32:e9:89:b6:6e:56:fa:ca:85:17:c6:86:
de:d5:45:71:af:06:4a:7d:6c:d3:a1:96:c6:e9:7c:52:e1:c4:
5b:ab:64:51:93:9f:2c:d0:b3:b6:b1:5d:2a:6c:e7:b6:1e:52:
11:f9:20:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:52 2024 by rpki-client on console-ams.rpki-client.org