Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/GduCDIgjem3A8IL_yCdxfh64GMM.roa
File: GduCDIgjem3A8IL_yCdxfh64GMM.roa (raw, json)
Hash identifier: yqsMVrKCKNmYg/1+nXZzuL50mY43vLEzQTDYcy6ZnU0=
Subject key identifier: 19:DB:82:0C:88:23:7A:6D:C0:F0:82:FF:C8:27:71:7E:1E:B8:18:C3
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 0185719551B69B386574E494FC5C9CE1CAB2
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/GduCDIgjem3A8IL_yCdxfh64GMM.roa
Signing time: Mon 02 Jan 2023 08:24:49 +0000
ROA not before: Mon 02 Jan 2023 08:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15924
IP address blocks: 45.156.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 13:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:51:b6:9b:38:65:74:e4:94:fc:5c:9c:e1:ca:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jan 2 08:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19db820c88237a6dc0f082ffc827717e1eb818c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:57:5d:5c:5f:d1:67:8c:4c:6c:49:8b:e3:
0e:2d:25:af:82:12:ec:6e:43:3b:79:73:a2:92:af:
c5:52:88:b8:c4:9c:1a:3e:b9:e1:be:2f:4b:ae:d9:
9d:16:b9:2d:7e:95:85:15:f4:73:fc:e7:a1:1f:65:
01:a3:e4:ce:5e:0b:83:4e:cc:fd:3c:49:08:05:ea:
7e:0a:be:47:87:bc:b0:78:a6:d0:7b:48:ba:8f:cc:
98:c5:ce:b4:15:c9:d4:92:c8:5c:e2:db:63:25:ce:
4e:4d:76:ae:c9:76:0b:d4:b2:d1:af:d8:c7:19:8d:
e0:8a:55:69:b8:0e:63:15:8d:13:43:8f:18:bd:92:
dc:6d:b0:93:f1:65:0d:aa:91:47:c4:d7:c6:06:17:
68:77:16:18:e6:88:9b:5a:ee:08:24:d0:68:04:cb:
0f:b6:8f:b6:f2:98:f8:2b:55:8e:1e:9e:ad:b1:35:
54:62:d9:03:43:97:c2:e4:1b:fa:50:c9:f9:c3:98:
10:d5:d1:c3:42:ed:f0:df:b3:e0:9e:72:c1:b0:aa:
8b:bc:61:06:60:02:bd:06:fe:8a:36:65:e2:79:7c:
97:b3:22:70:56:f1:a0:e1:39:8e:c8:22:80:e7:d6:
a4:93:38:0f:cc:5c:ca:88:95:16:df:9b:d1:e5:b6:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DB:82:0C:88:23:7A:6D:C0:F0:82:FF:C8:27:71:7E:1E:B8:18:C3
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/GduCDIgjem3A8IL_yCdxfh64GMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:b6:99:5f:14:f7:7c:20:a2:7b:7d:6d:d5:9e:61:ab:0f:91:
18:67:19:fb:e9:db:0d:65:00:28:d7:5e:ff:52:ac:6a:0f:c4:
79:d5:3f:78:f0:3d:6a:a3:59:82:ec:93:6e:52:d1:cc:b5:c4:
50:fd:bd:0a:32:8e:85:15:65:42:2f:7c:d9:9d:8f:9e:56:c7:
f8:59:a6:76:a8:50:6c:89:bc:71:6a:fd:25:e2:b2:f5:d2:21:
40:6d:74:62:1b:10:92:63:40:b5:67:18:c3:6a:c8:d4:c4:ad:
e0:a2:da:6f:6a:0f:d9:32:14:33:31:84:e5:b3:c7:27:a2:6c:
db:0b:3a:a6:5f:62:ac:64:97:77:52:0c:cc:b4:61:b8:c3:b6:
14:1e:e5:b4:01:af:95:a1:56:d2:8e:21:6c:a8:96:da:e0:d0:
c5:44:ab:3e:e9:c7:84:f2:fb:6e:4e:4c:11:6c:1e:ed:19:9a:
be:e0:7f:2a:26:d3:59:e8:68:82:27:12:a1:70:2f:ec:9d:1a:
0a:26:af:8c:05:6a:1a:2b:0a:c1:65:bf:bc:fc:b5:e5:05:e3:
d9:4d:12:dd:ef:46:0c:bd:23:90:d8:6f:33:a2:c3:64:da:02:
c0:4d:2e:4d:d4:7b:e0:d2:d8:5c:78:47:b4:52:bd:8b:4a:a9:
e1:d6:09:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:55 2024 by rpki-client on console-fra.rpki-client.org