Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/gE1mmXXk5lgCh3HcArYJTZEjGWo.roa
File: gE1mmXXk5lgCh3HcArYJTZEjGWo.roa (raw, json)
Hash identifier: GCLY3JNuaFr2gKvhU2Mh5fkmK+0m2lKM8Uc8z8L/jH0=
Subject key identifier: 80:4D:66:99:75:E4:E6:58:02:87:71:DC:02:B6:09:4D:91:23:19:6A
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018C63D2282DEB523828208B4872A544EB12
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/gE1mmXXk5lgCh3HcArYJTZEjGWo.roa
Signing time: Wed 13 Dec 2023 15:36:06 +0000
ROA not before: Wed 13 Dec 2023 15:36:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24940
IP address blocks: 45.145.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:63:d2:28:2d:eb:52:38:28:20:8b:48:72:a5:44:eb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Dec 13 15:36:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=804d669975e4e658028771dc02b6094d9123196a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:00:6a:50:f0:4b:4b:d8:11:8f:bb:c4:12:7f:
d9:f6:d2:a4:93:91:33:d1:eb:23:16:84:c0:7a:65:
d2:a1:42:b3:1e:ad:40:11:db:74:1c:b2:81:7d:0e:
cf:c1:38:c9:31:99:af:97:10:59:26:b0:aa:75:36:
d7:07:66:47:a9:0c:85:6f:eb:68:19:31:8a:98:89:
e6:48:a1:f0:b8:83:e0:60:55:b7:05:96:c1:3e:86:
81:a0:c6:73:18:bf:bf:17:06:c4:23:8b:42:6a:09:
6f:59:4e:0e:c2:25:a7:d9:f9:13:e5:9d:a3:1c:45:
e2:fa:15:fb:45:cd:32:5c:c7:90:a9:6b:a8:53:42:
95:57:2d:a1:87:d4:5b:36:f7:94:b9:b1:57:2d:0c:
e2:b4:84:05:d6:2e:20:d7:7d:8d:f8:fb:ad:0c:ae:
67:d9:12:94:90:e1:8e:38:5d:17:fe:97:b0:e6:38:
06:c1:6e:eb:d4:a6:5e:89:4b:8f:e3:3d:4b:c0:bc:
d8:73:b9:d6:f5:35:8b:ba:94:e9:b3:df:59:32:b0:
9a:e5:a3:d9:ed:b2:4e:f4:16:bf:80:0e:b0:14:12:
50:c3:1c:3b:54:cf:30:b0:24:05:e6:9b:d2:27:54:
8f:e4:19:8f:c5:0b:76:af:b4:b3:cd:c2:75:1c:8a:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4D:66:99:75:E4:E6:58:02:87:71:DC:02:B6:09:4D:91:23:19:6A
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/gE1mmXXk5lgCh3HcArYJTZEjGWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.227.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:4a:78:cf:b8:27:2c:7c:b5:18:61:6f:a6:63:2a:03:e5:2b:
6b:d5:b3:5c:dd:d4:8c:36:fa:92:31:90:65:91:3a:7c:7b:bf:
f9:a9:b5:14:0e:7f:3e:fe:57:9b:9e:74:e0:dd:50:9a:23:d1:
94:27:74:b2:61:d8:b6:68:1c:3c:1c:de:6c:8c:e7:0f:b9:50:
52:43:c0:70:47:cd:6f:fd:4f:c1:9c:2f:e2:66:e2:c9:5a:51:
21:fa:a2:e4:15:77:d9:90:03:a9:4b:e0:9f:5f:97:72:9e:d5:
8c:55:c5:3a:3c:82:cd:44:23:e9:50:61:6a:a8:12:b7:c0:67:
98:11:cf:c0:5a:43:75:4e:18:81:31:b4:82:78:11:c1:0b:20:
c6:04:d2:34:ce:0f:4e:5b:52:51:3d:1f:32:85:e8:48:5e:67:
76:8b:64:f2:7e:00:b1:a4:05:41:ff:b2:1d:79:c0:78:29:67:
99:32:ec:5f:f8:bd:2b:4a:c4:c9:b3:a4:af:f3:56:80:90:2d:
e9:01:68:89:97:7f:ba:82:cd:88:2c:3b:8b:67:f0:d6:c5:cd:
ba:b1:05:c9:54:40:fa:59:f1:7f:2d:02:a8:0f:13:17:29:84:
88:c7:1b:b6:4e:b7:57:9c:f7:b5:28:c3:d8:fd:5d:be:f1:7e:
15:e6:a2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:25 2024 by rpki-client on console-ams.rpki-client.org