Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/gaHtXH142Nkj4-F5owM3iPU2a78.roa
File: gaHtXH142Nkj4-F5owM3iPU2a78.roa (raw, json)
Hash identifier: WyAs54KqNMDyMkCBw+MTW5kpR5wIOMpKyFAtlIHtRqk=
Subject key identifier: 81:A1:ED:5C:7D:78:D8:D9:23:E3:E1:79:A3:03:37:88:F5:36:6B:BF
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 01856EB914DCB3513FB50527798D02A8BC91
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/gaHtXH142Nkj4-F5owM3iPU2a78.roa
Signing time: Sun 01 Jan 2023 19:05:01 +0000
ROA not before: Sun 01 Jan 2023 19:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49388
IP address blocks: 188.94.8.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:14:dc:b3:51:3f:b5:05:27:79:8d:02:a8:bc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Jan 1 19:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81a1ed5c7d78d8d923e3e179a3033788f5366bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:1c:72:79:4e:6a:0c:77:af:db:01:01:15:
cf:e4:6e:2e:c4:f6:35:23:6d:bf:a9:df:4a:08:d8:
54:52:a8:38:44:40:d4:19:7e:74:c4:79:a2:f0:87:
57:b1:7f:0f:fc:af:04:4e:74:a9:27:8c:82:08:ed:
d0:2e:49:b5:3e:12:56:f4:67:fb:e0:e5:b5:e3:fd:
2f:5f:f6:e6:ad:d9:64:2b:c5:9c:cb:33:ee:86:b2:
e7:2b:37:61:5c:13:bb:08:d3:63:7f:f3:16:18:80:
03:1e:9d:05:e2:a0:ce:14:c9:2c:d1:f1:3a:a3:6e:
e9:94:80:ea:1b:ce:c6:92:31:e6:c4:64:98:6f:62:
bc:a0:21:f5:46:a0:86:d9:ea:23:4f:67:1a:76:4c:
38:9e:e7:c5:94:ec:02:16:b5:6c:2d:3d:35:85:8b:
4e:20:37:cc:47:4c:8b:48:5c:78:30:a4:6f:e5:3b:
74:a6:10:94:c1:c2:99:49:2d:e2:18:10:f9:58:ff:
92:be:d6:32:93:78:d7:6a:cd:b6:cc:de:c8:90:b4:
31:6b:03:5b:31:9a:d3:f9:89:16:27:70:29:74:80:
1b:c6:ec:6d:44:16:78:f3:0f:3a:16:6b:31:24:8a:
8b:61:3f:94:8e:e3:8e:23:27:3d:78:c3:b0:4e:29:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A1:ED:5C:7D:78:D8:D9:23:E3:E1:79:A3:03:37:88:F5:36:6B:BF
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/gaHtXH142Nkj4-F5owM3iPU2a78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.8.0/21
Signature Algorithm: sha256WithRSAEncryption
38:83:90:e9:7d:90:9c:76:e9:d5:66:75:a6:6f:1e:5b:ff:aa:
13:59:cf:41:89:7a:ba:c0:23:07:c4:c6:91:f5:e1:a1:a9:6f:
ad:9f:df:df:1a:e8:e5:7a:7d:23:aa:0b:6a:ab:fb:29:3c:3f:
ce:1c:b8:c9:e7:a7:d8:1a:4d:c3:4d:0f:02:dd:3c:c2:c6:14:
73:1c:09:d7:d9:7a:50:c2:6c:42:e9:c8:22:a4:26:80:17:b1:
16:45:75:4b:bc:18:91:14:38:36:b6:9b:2a:cc:d9:c7:b7:48:
27:4b:97:1a:f5:4e:01:fa:66:80:35:2f:22:3f:c7:52:d1:54:
2f:63:19:41:6f:ac:a5:0a:07:cc:39:40:e3:a7:a7:ef:54:2f:
3d:de:09:d2:05:52:06:e6:2c:88:b3:12:5c:34:be:5d:c0:2e:
4a:cc:79:c5:68:54:2a:73:72:b3:8a:41:0a:7a:f2:fe:a7:75:
39:ad:86:e0:67:fe:42:46:8f:98:00:6c:7f:24:fe:02:ec:78:
15:ac:83:00:60:be:d0:8a:3f:47:ae:30:7e:bb:74:e5:c7:b6:
9f:d0:fc:6f:cd:0c:d2:c4:37:56:a7:93:61:22:66:3d:cd:bf:
5c:3f:93:ef:27:1d:91:f6:2c:38:61:38:e9:6f:e1:a5:bf:7f:
b1:40:66:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:13 2024 by rpki-client on console-fra.rpki-client.org