Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/g2szJOYaTJqyZk8AOgidOFowr24.roa
File: g2szJOYaTJqyZk8AOgidOFowr24.roa (raw, json)
Hash identifier: cFTOeyx/fPMOlpPcVfD1iD5WyXn7bRJbFa8e13Gygqk=
Subject key identifier: 83:6B:33:24:E6:1A:4C:9A:B2:66:4F:00:3A:08:9D:38:5A:30:AF:6E
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE6105AFB157C58815BF7E728B755E1
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/g2szJOYaTJqyZk8AOgidOFowr24.roa
Signing time: Sun 01 Jan 2023 10:34:54 +0000
ROA not before: Sun 01 Jan 2023 10:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29670
IP address blocks: 45.11.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:10:5a:fb:15:7c:58:81:5b:f7:e7:28:b7:55:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=836b3324e61a4c9ab2664f003a089d385a30af6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:55:fb:18:e8:ef:c0:b9:fe:b0:f1:0c:44:
0e:b2:f3:04:be:6e:dd:64:fa:a4:be:61:3b:e1:cb:
19:66:44:a0:4d:e7:cf:26:35:fc:d6:2c:5c:45:98:
82:6b:09:1c:78:4a:5c:75:90:be:b0:00:e2:4d:30:
ca:f2:ea:75:66:68:42:31:60:90:41:6d:67:19:a0:
82:39:fc:86:02:13:93:2b:db:cb:86:f3:79:c9:2c:
16:47:4c:6b:ed:72:5b:e3:a4:2b:98:3a:df:f2:2a:
b5:a0:f0:20:c6:e0:26:1d:5d:ca:af:1c:da:41:93:
90:96:e4:02:13:23:5e:28:76:97:bc:ca:3b:d9:6b:
2a:24:63:76:bd:5f:7d:40:f4:4e:bb:cd:23:2e:14:
5a:81:be:4a:85:84:36:42:7b:67:cb:5f:c5:70:55:
a5:30:2e:bb:a8:ae:f7:42:5c:0f:14:65:15:6a:a3:
77:38:e3:06:0f:42:7b:6b:37:65:85:e5:9b:f1:61:
6c:e3:04:b6:14:1c:b7:80:79:8b:26:ff:1e:29:d0:
7d:c9:78:d2:df:eb:de:9b:10:63:16:c4:33:f9:74:
d7:b6:07:0e:c8:87:b3:d9:05:89:c8:d1:06:36:c0:
12:95:61:90:03:ad:ac:6d:6a:0d:5e:5a:aa:94:bc:
14:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6B:33:24:E6:1A:4C:9A:B2:66:4F:00:3A:08:9D:38:5A:30:AF:6E
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/g2szJOYaTJqyZk8AOgidOFowr24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.230.0/24
Signature Algorithm: sha256WithRSAEncryption
58:78:aa:f9:cc:67:a6:1a:91:08:54:93:34:22:13:df:59:58:
a5:6d:cc:89:d3:47:a8:1a:94:4c:19:50:27:8c:ea:b4:60:55:
9c:e4:24:96:80:a0:85:76:56:38:b5:ed:b7:88:09:58:b7:9a:
b8:ac:f9:bf:08:2e:94:0a:ac:e3:cb:54:fd:43:59:e6:4f:24:
79:83:d5:57:5e:eb:48:5e:3b:bc:40:2f:03:fa:81:bb:1c:8d:
b5:0d:d9:62:14:8f:b1:ac:67:6e:29:6a:c2:bd:8d:85:7e:f8:
7e:c8:b9:91:f3:9f:8d:a5:35:0b:a3:47:20:eb:6e:df:f5:33:
aa:96:8d:45:b9:a7:9a:a0:70:45:07:88:3a:e3:ef:2e:42:1a:
41:df:e9:9a:b3:4d:f8:11:70:bb:61:e2:14:49:56:83:e5:b4:
5f:bd:ff:70:49:d6:e3:b9:f9:88:b8:66:2c:f3:ee:9e:a0:8f:
4c:34:2e:ca:64:9c:a8:2d:69:52:b2:d9:ab:6a:26:fb:49:91:
46:cd:62:00:b4:ee:9a:5d:6f:aa:c7:5c:79:f1:1a:9f:92:83:
19:c3:97:a1:10:b4:ba:eb:1e:70:da:d1:4e:81:1a:9f:39:0d:
3b:1e:57:6d:66:1d:b2:68:0a:13:f9:ff:14:de:eb:96:31:fa:
2a:c4:06:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:25 2024 by rpki-client on console-ams.rpki-client.org