Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/gI5PtqWIAWtdIGK9FnIghSwsyAI.roa
File: gI5PtqWIAWtdIGK9FnIghSwsyAI.roa (raw, json)
Hash identifier: HoW/0nQQtwkLVMYGyrPRULgMAW33HQC6kX7QYUKlGMU=
Subject key identifier: 80:8E:4F:B6:A5:88:01:6B:5D:20:62:BD:16:72:20:85:2C:2C:C8:02
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 0185BA0DC0F44CA7A580528524272E9FBC9F
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/gI5PtqWIAWtdIGK9FnIghSwsyAI.roa
Signing time: Mon 16 Jan 2023 10:09:01 +0000
ROA not before: Mon 16 Jan 2023 10:09:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 192.40.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ba:0d:c0:f4:4c:a7:a5:80:52:85:24:27:2e:9f:bc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Jan 16 10:09:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=808e4fb6a588016b5d2062bd167220852c2cc802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:71:58:db:c8:03:6e:9c:25:80:82:24:9f:
55:66:8c:9f:bf:95:2b:5d:8e:58:2f:5c:e0:4f:e5:
31:f3:38:db:59:e3:8b:a5:49:72:21:20:79:f0:40:
e3:0e:49:73:b3:2a:a9:8f:5d:92:ec:d7:60:c2:09:
a7:a7:38:e7:7e:1f:82:9e:3e:39:d7:90:ac:a0:21:
f1:12:6e:6f:cd:a1:ae:04:ad:f0:d0:cb:fa:b2:f4:
81:8c:d6:e2:22:b0:ca:03:20:1f:f0:c0:41:5d:5e:
5a:b2:d8:e1:89:dc:cb:f3:7a:68:aa:11:f0:df:a2:
33:85:21:dd:85:da:f4:bb:ca:cb:d1:e4:42:b4:dd:
83:41:25:53:b6:94:a3:24:ff:b7:fc:9c:4e:15:1a:
73:d9:db:2c:69:0f:51:af:9c:cf:15:94:74:95:b8:
a5:a0:ff:f4:98:4f:f3:47:da:ae:f4:85:c9:05:eb:
dc:95:56:54:6a:b0:21:d6:58:b6:28:df:7c:26:8c:
73:68:8e:32:7e:1e:09:fd:89:1f:cb:6d:4f:5c:83:
84:fb:a6:56:9e:7f:13:28:ff:de:5d:58:92:51:4d:
43:c5:a3:ee:5b:50:5b:e0:7a:5c:2b:73:71:c7:43:
3e:b3:f6:37:4b:0b:37:82:69:43:2e:ff:b1:05:a1:
0e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8E:4F:B6:A5:88:01:6B:5D:20:62:BD:16:72:20:85:2C:2C:C8:02
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/gI5PtqWIAWtdIGK9FnIghSwsyAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.40.69.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:9a:0c:34:b1:a3:49:2c:a1:49:36:d4:b0:2a:bb:64:d7:56:
1c:30:32:b3:e3:bd:e6:5d:fc:38:90:6a:23:20:1b:71:c7:46:
5b:6b:79:71:00:66:38:d7:b1:be:1c:57:07:85:b1:90:c0:7c:
79:f5:8e:78:12:08:c1:93:ab:e1:5f:da:c8:6b:a9:e2:d7:8a:
71:15:41:1e:77:24:a3:15:55:84:b7:9e:9b:54:0d:8c:d9:c2:
c7:2e:3a:34:3b:ff:95:e9:a6:d3:6f:06:b8:a9:8c:28:5a:67:
cb:e7:b3:93:b1:63:ba:2c:2c:fe:36:a6:0f:d0:76:18:a6:ae:
bb:cc:f5:a5:69:b3:43:3d:0d:2a:5b:0b:66:d5:d0:a5:18:b0:
e9:56:27:d3:61:9a:95:60:59:cd:65:da:c3:f9:6a:5e:5c:06:
96:93:a2:7f:c4:fb:ad:90:da:53:28:6a:29:e3:ac:df:47:ba:
08:8a:95:08:5b:c0:a2:1e:70:4b:fc:8c:73:31:8f:eb:62:8d:
8c:bb:ad:21:2b:b1:a9:da:23:6d:a0:de:93:3a:e1:5a:af:10:
3a:06:25:b7:6a:9a:f3:55:0c:8a:94:af:66:e1:15:22:9a:13:
fe:05:b9:fd:69:e6:ac:04:9d:a2:46:aa:65:22:58:81:17:cd:
a6:99:38:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:37 2024 by rpki-client on console-fra.rpki-client.org