Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/GWteL4INAFvjrMjVvY14NL0XM6w.roa
File: GWteL4INAFvjrMjVvY14NL0XM6w.roa (raw, json)
Hash identifier: ZaUWkzXl3PU+oWdfWeGe6fy4GEDxOQEFJnETmtGtdUM=
Subject key identifier: 19:6B:5E:2F:82:0D:00:5B:E3:AC:C8:D5:BD:8D:78:34:BD:17:33:AC
Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial: 018F4D3E36B1AEA724358132064CFA5D9CDD
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/GWteL4INAFvjrMjVvY14NL0XM6w.roa
Signing time: Mon 06 May 2024 09:31:13 +0000
ROA not before: Mon 06 May 2024 09:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198381
IP address blocks: 80.84.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 10:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:3e:36:b1:ae:a7:24:35:81:32:06:4c:fa:5d:9c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Validity
Not Before: May 6 09:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=196b5e2f820d005be3acc8d5bd8d7834bd1733ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:72:74:5e:fd:c5:f3:80:c0:da:fd:39:b7:
ef:0c:ad:7e:64:16:01:a4:b5:8a:b2:4c:91:b3:b8:
fc:b2:18:f0:7a:3c:ad:61:56:1f:7f:dd:84:45:a5:
bc:0b:84:c3:79:f5:3b:5b:1a:17:a4:70:f6:42:51:
a3:6d:6e:96:f6:7c:61:33:37:b1:22:bc:e0:db:56:
65:b0:40:ba:aa:d3:4c:76:87:bf:1e:db:a1:b8:49:
2f:85:26:ac:ab:33:81:0b:4a:a1:32:90:9e:c5:87:
02:7d:ad:d0:a2:01:be:d8:0c:d2:64:14:d4:78:48:
43:36:2a:4a:bf:e8:51:0c:22:ed:a4:5c:7c:d7:1f:
a0:00:cd:88:90:31:65:24:a9:2d:52:ea:ff:91:9e:
1b:4e:9a:a0:17:27:81:e9:a4:07:55:92:c7:5d:50:
1a:31:d3:57:d5:f6:bf:61:07:86:29:13:44:5f:50:
dd:75:e1:c9:3f:a0:f3:7c:f2:a6:b1:be:e3:77:a8:
94:93:76:4c:ae:07:fe:38:b9:28:9f:72:2d:d9:51:
8b:5f:cc:42:39:10:b7:61:98:22:4b:2b:85:2a:42:
b9:dd:5b:e7:8d:09:66:61:c2:ac:d5:89:6e:11:86:
6e:9d:f0:e3:e5:82:f3:88:7a:b7:6a:ba:a9:92:41:
06:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6B:5E:2F:82:0D:00:5B:E3:AC:C8:D5:BD:8D:78:34:BD:17:33:AC
X509v3 Authority Key Identifier:
keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/GWteL4INAFvjrMjVvY14NL0XM6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.145.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:45:61:86:89:1c:ba:c6:cb:8b:88:36:2f:ec:94:1a:51:dc:
43:b7:b7:a2:ec:16:a4:cc:f7:32:c7:b3:ee:54:23:12:3f:7e:
87:81:37:c7:c4:13:a2:b2:46:74:3b:99:93:20:f1:09:1a:f5:
0e:16:cc:3d:e6:5b:61:21:5e:96:9c:4f:5d:67:fc:37:d1:8b:
52:58:68:89:a0:19:cd:46:44:d3:62:12:75:0a:31:0d:e8:19:
11:e5:7b:b7:29:e5:10:0c:78:39:c3:88:04:af:46:0a:92:3f:
9a:56:a7:17:e0:17:b7:4f:c2:3f:86:b2:e9:d0:8a:79:0c:53:
66:5d:43:ee:a5:e6:aa:73:22:f6:97:62:e0:1d:53:b9:e9:56:
b6:fc:b0:cb:98:c8:22:69:8e:04:fa:1e:42:9b:5d:c9:48:49:
18:3a:9c:b9:07:60:9b:96:7f:c8:26:a0:ef:e7:96:93:3b:c7:
5e:71:22:6c:09:fa:0d:5f:64:97:cd:c6:1b:78:1b:ca:d5:57:
29:a1:94:e1:b2:c4:c7:fe:d5:e3:50:bc:4c:dd:8a:ff:f0:57:
c7:fb:42:04:6c:06:c4:29:02:a5:68:2d:a9:bc:c9:80:ac:c8:
de:99:2a:89:4d:be:3d:1b:8f:c6:e2:46:ff:6a:48:99:bb:17:
31:8e:94:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 13:14:02 2024 by rpki-client on console-ams.rpki-client.org