Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/g5txxla_5inMbvW31JEaNWGgeo0.roa
File: g5txxla_5inMbvW31JEaNWGgeo0.roa (raw, json)
Hash identifier: EBZtSoaf8k5k0LUq2TRQkNTxomJpUA6+M6VtLkozRxQ=
Subject key identifier: 83:9B:71:C6:56:BF:E6:29:CC:6E:F5:B7:D4:91:1A:35:61:A0:7A:8D
Certificate issuer: /CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Certificate serial: 0185711E6DE0B1E68EED9E870CE746B78939
Authority key identifier: 71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/g5txxla_5inMbvW31JEaNWGgeo0.roa
Signing time: Mon 02 Jan 2023 06:14:57 +0000
ROA not before: Mon 02 Jan 2023 06:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42783
IP address blocks: 194.0.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:6d:e0:b1:e6:8e:ed:9e:87:0c:e7:46:b7:89:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Validity
Not Before: Jan 2 06:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=839b71c656bfe629cc6ef5b7d4911a3561a07a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:39:41:db:2d:5e:4c:07:b4:d1:0d:51:27:
39:cc:05:67:d1:ab:f8:48:ba:51:0b:46:7c:3b:66:
2a:a3:a6:68:8e:6d:3d:56:46:98:3b:d0:56:ed:9f:
6b:74:f3:31:39:03:92:37:2c:03:77:38:a1:68:4d:
c0:4d:00:f7:e7:41:f2:75:65:7d:0f:ef:bc:72:26:
5a:4e:69:d8:5e:ce:d3:63:cf:b7:7a:21:b1:a4:f5:
56:3a:67:15:44:4d:a3:2b:19:1b:4c:17:b4:7f:f7:
96:b0:d9:23:c1:c2:5c:c4:46:d2:dc:ea:4b:5a:f0:
18:51:e7:96:5d:bf:f4:78:ca:13:4b:9f:4a:6c:37:
28:f2:2c:56:45:d5:24:07:27:42:1c:63:e6:f8:38:
22:9d:04:27:89:d9:17:61:1b:d2:06:12:5f:28:98:
ba:e0:2c:af:d5:2e:0e:4b:20:88:c1:aa:85:36:ba:
17:eb:0b:d7:19:00:65:00:ef:9d:7e:a8:b0:b0:5b:
01:7e:6c:c1:a9:88:f6:9a:da:1e:bf:cd:05:d7:f4:
42:9f:da:fd:a6:81:ef:a8:ae:05:c0:c5:ba:6e:7e:
c3:99:da:10:34:f0:3e:53:65:3c:0f:23:b8:8f:9f:
3f:c8:d9:13:d0:10:0f:f8:a8:1a:b1:f8:67:81:8a:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9B:71:C6:56:BF:E6:29:CC:6E:F5:B7:D4:91:1A:35:61:A0:7A:8D
X509v3 Authority Key Identifier:
keyid:71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/g5txxla_5inMbvW31JEaNWGgeo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.230.0/24
Signature Algorithm: sha256WithRSAEncryption
70:59:fb:ed:9d:a8:8c:bf:5f:7b:fd:db:dc:95:27:d3:76:36:
9b:d3:c3:7a:69:46:6c:2f:66:24:ad:22:46:09:48:fd:cf:f5:
aa:c2:2c:45:1e:96:d5:a7:33:f3:ee:2c:ad:73:2b:6f:51:28:
10:56:b1:a0:e1:b6:d8:20:0a:99:02:cf:26:47:f9:92:7a:f4:
d9:d2:3d:e6:a2:f9:b9:67:f9:88:02:14:33:c6:ab:6a:c0:4a:
86:04:a1:82:3e:56:8f:a6:97:0f:3d:7e:df:9a:a2:c2:ed:97:
ef:6a:6d:fe:ae:fc:3a:01:25:1e:07:cf:04:25:24:74:60:30:
7d:69:75:e7:42:95:93:af:7d:53:32:6e:cc:54:e2:6a:c6:5e:
32:f0:2a:46:d3:8d:ac:96:e4:b5:4d:85:39:2f:56:e5:dd:6c:
23:49:be:fc:b8:31:66:60:93:89:a1:7c:b9:a0:73:41:b2:fe:
e6:b6:4c:ce:20:80:7b:0c:08:ec:6d:13:6e:24:8c:a2:9a:5a:
37:d5:13:7b:aa:5f:2e:25:b9:04:8f:af:7f:85:5c:da:1f:99:
8a:34:6e:ac:cc:a5:9b:84:43:be:41:64:07:09:91:c5:e4:5d:
fe:ba:35:6b:32:30:ea:ce:ef:07:d3:ea:73:e9:44:f1:74:e8:
27:ed:eb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:26 2024 by rpki-client on console-fra.rpki-client.org