Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VOo_Gu1603KrdyHeH1vPq4gvd_0.roa
File: VOo_Gu1603KrdyHeH1vPq4gvd_0.roa (raw, json)
Hash identifier: 1gaVoPJgD5BFmCYf17DSSTWy6lquJcjzuUGxqh+gYBY=
Subject key identifier: 54:EA:3F:1A:ED:7A:D3:72:AB:77:21:DE:1F:5B:CF:AB:88:2F:77:FD
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0187761F64FCA6EA44C98FAC00554441EBE1
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VOo_Gu1603KrdyHeH1vPq4gvd_0.roa
Signing time: Wed 12 Apr 2023 15:39:41 +0000
ROA not before: Wed 12 Apr 2023 15:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.138.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 16:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:76:1f:64:fc:a6:ea:44:c9:8f:ac:00:55:44:41:eb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 12 15:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54ea3f1aed7ad372ab7721de1f5bcfab882f77fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:67:32:b6:62:6b:ba:45:e2:a1:b2:e6:3b:
89:27:11:1e:7e:78:b2:76:f3:c8:9e:85:51:34:8d:
59:a9:eb:57:2d:12:f5:5a:58:4d:9d:ef:46:f5:64:
ed:ce:f9:d4:3f:7d:1e:88:d0:1b:8b:40:51:a7:a3:
f0:58:32:97:9f:d4:c7:4d:06:ec:6d:4b:42:a6:8d:
44:b5:18:86:f3:ac:f3:b0:f2:b1:e5:84:bd:ab:42:
de:ca:ec:00:9d:56:b2:30:23:90:a7:af:33:63:9d:
c2:24:04:ad:6a:b5:3b:b2:46:cf:85:1b:11:4f:b2:
7f:f9:13:52:d9:c1:a0:70:1e:9e:b1:75:bb:e2:d8:
ba:b6:ad:43:17:82:03:df:7b:e3:b6:96:43:c2:78:
c7:a3:86:7f:ec:b4:5e:15:e0:aa:d4:7f:49:3e:8d:
4e:db:26:7d:f9:9e:db:93:eb:29:95:03:7d:3b:30:
bc:27:cf:3e:a3:e6:c2:b0:9e:c5:13:0b:79:f8:cb:
06:93:97:a3:f9:19:f8:56:93:78:d9:ef:51:21:5d:
6d:0f:64:a6:7f:0d:81:d2:45:e8:09:1d:1a:de:59:
4e:f7:7a:7e:a0:32:95:f1:05:49:55:fb:d4:90:00:
2d:87:c6:d5:90:c6:25:3b:c3:87:fa:60:52:11:86:
44:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EA:3F:1A:ED:7A:D3:72:AB:77:21:DE:1F:5B:CF:AB:88:2F:77:FD
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VOo_Gu1603KrdyHeH1vPq4gvd_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.183.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:90:a1:e0:81:5b:7f:08:e0:c3:6f:2d:c0:01:06:68:3f:50:
c5:ff:3c:4d:37:0a:09:97:54:8c:75:09:f0:9c:75:ca:c6:e8:
f3:4b:22:a9:76:db:ce:63:3a:22:8e:d1:d7:69:ea:87:a8:66:
13:3f:81:e1:25:aa:83:34:31:fc:50:5d:ad:b9:e4:84:49:be:
53:28:f8:91:85:eb:35:a3:3b:9f:f5:55:fd:84:8d:5b:ae:d0:
8b:2f:b0:8f:b2:ee:63:7f:f9:76:dd:de:d9:8c:22:60:09:5d:
2e:da:1e:c8:f1:71:ef:d1:1f:8e:c2:32:4f:3e:52:d6:f6:12:
8e:db:72:c0:68:85:87:97:84:01:0f:11:c5:e6:9c:33:e8:bf:
bc:10:ec:f7:23:94:34:53:79:b7:e4:a1:77:bd:2c:f5:3e:d2:
ea:6b:f9:c3:8e:6f:c5:88:42:9f:d9:90:30:61:84:bb:44:78:
6a:af:93:ff:11:7b:ac:7a:ab:24:1a:b0:b8:18:2f:92:ed:5f:
cb:a2:33:9a:d9:a6:35:df:3d:2a:24:8b:16:54:89:5d:06:b2:
c1:8f:30:a5:64:a8:c4:59:db:ff:2f:de:05:38:12:41:94:45:
76:bd:9e:20:23:c2:7e:87:68:41:7d:64:0e:28:d7:fb:19:97:
8d:cf:a4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org