Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GgwYasGcvG3Qq1_scT3m-WWLuEE.roa
File: GgwYasGcvG3Qq1_scT3m-WWLuEE.roa (raw, json)
Hash identifier: hAmOU+K03hfOG++4ZEtDW3FXeG48WDgxU9AOIyrZLd4=
Subject key identifier: 1A:0C:18:6A:C1:9C:BC:6D:D0:AB:5F:EC:71:3D:E6:F9:65:8B:B8:41
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F799C0CFC24B269FAD830CEBBDEDB8E
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GgwYasGcvG3Qq1_scT3m-WWLuEE.roa
Signing time: Sun 01 Jan 2023 22:35:18 +0000
ROA not before: Sun 01 Jan 2023 22:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 262287
IP address blocks: 45.84.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:9c:0c:fc:24:b2:69:fa:d8:30:ce:bb:de:db:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a0c186ac19cbc6dd0ab5fec713de6f9658bb841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:87:2c:44:9a:15:f4:70:57:88:15:58:a4:
7e:ac:02:12:ae:41:0f:fc:07:83:a1:3b:a3:37:5a:
53:d4:0d:f0:65:44:70:c9:fc:1d:ff:46:52:f6:20:
13:25:8a:cf:05:5a:d7:e1:32:1b:42:c9:e9:73:5c:
5e:53:07:81:cf:54:42:c2:5a:3d:ae:6e:22:05:d6:
6c:82:42:53:d4:2d:dc:0a:21:4a:22:0d:b2:39:52:
98:c0:ea:ad:cd:97:2d:84:a5:ce:b4:9c:0a:c5:54:
8e:dc:0f:24:9d:34:7f:4a:3e:e6:6a:19:c2:3b:ee:
b4:20:41:7a:24:d0:6e:fe:bf:81:95:ea:c1:7d:69:
4b:5a:9d:91:f7:f3:fb:ca:2a:22:8a:21:e9:b6:fc:
44:33:33:72:ef:a5:9b:5d:6e:f1:2e:0c:2c:d2:96:
dd:c9:fc:d2:ea:98:4a:56:22:20:4f:da:cc:ff:bb:
5d:8a:94:81:ff:23:e3:65:56:a6:6a:a8:87:87:1f:
4a:07:88:26:77:00:64:27:86:e2:ad:b5:e5:c9:f2:
20:43:54:ed:73:0f:78:32:03:6c:e1:6f:20:5a:ff:
7f:f8:27:7d:19:ad:b1:f0:43:0b:30:d1:43:1c:52:
6f:87:89:6b:7f:2d:51:9b:55:e1:07:ed:fd:5d:b7:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0C:18:6A:C1:9C:BC:6D:D0:AB:5F:EC:71:3D:E6:F9:65:8B:B8:41
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GgwYasGcvG3Qq1_scT3m-WWLuEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.213.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a4:e3:d0:9b:1e:29:48:d2:37:c5:7d:9e:48:9f:fc:60:e1:
a0:36:21:a6:70:e0:de:91:84:8b:b7:43:df:a3:40:ce:c9:59:
93:5e:38:ed:25:76:ba:3a:e6:c3:6c:e7:12:bd:41:1a:65:ba:
c6:d8:9e:b4:ba:e7:b9:41:15:00:42:53:ce:ad:7d:4f:6c:8f:
c0:48:c3:ce:71:2d:1a:a4:a3:2d:95:5c:6b:0f:55:26:13:d4:
6d:54:63:86:d1:ca:d7:7e:77:1a:3f:24:58:05:5a:af:82:8d:
a2:4d:eb:a0:81:fd:73:50:62:20:c3:39:3f:40:05:55:4f:e4:
0c:e4:80:f5:f9:d8:2f:9c:eb:0c:3f:d5:30:8b:5f:ac:c1:cb:
a0:85:a0:b6:9b:d6:99:e6:6e:eb:17:d6:58:31:c9:ff:86:f3:
ca:38:ff:c1:5f:dc:58:cf:b9:89:f9:a6:04:74:ee:e7:db:d1:
7d:76:46:06:f5:a1:74:5f:f1:38:dd:03:d9:b9:8b:5a:dd:fd:
eb:22:4a:6d:08:4d:ca:da:da:eb:00:f0:51:47:63:05:36:96:
ca:26:0a:b1:73:64:7d:eb:ec:f5:52:da:56:e1:38:77:81:1b:
a3:43:bb:9a:75:e6:2e:1e:30:e6:c7:13:ba:cd:76:01:14:f3:
7a:2e:0a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:43 2024 by rpki-client on console-ams.rpki-client.org