Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Gf4pPKYMUHY8ZyFO8yo3q2hKs_o.roa
File: Gf4pPKYMUHY8ZyFO8yo3q2hKs_o.roa (raw, json)
Hash identifier: T50CFM3RZqJKzLxzMaOApL+151cJBZT5AygwhVJxMJI=
Subject key identifier: 19:FE:29:3C:A6:0C:50:76:3C:67:21:4E:F3:2A:37:AB:68:4A:B3:FA
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018C30AD6ECFB0586D6565A60ACDE141D961
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Gf4pPKYMUHY8ZyFO8yo3q2hKs_o.roa
Signing time: Sun 03 Dec 2023 17:15:21 +0000
ROA not before: Sun 03 Dec 2023 17:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48266
IP address blocks: 45.67.201.0/24 maxlen: 24
45.67.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:30:ad:6e:cf:b0:58:6d:65:65:a6:0a:cd:e1:41:d9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Dec 3 17:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19fe293ca60c50763c67214ef32a37ab684ab3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:33:de:ab:4a:5e:f8:30:3b:7d:53:c5:83:
2d:a9:37:4f:a8:47:27:8e:6e:0b:01:9c:64:4f:ce:
f1:39:e5:06:12:cf:f4:39:ab:fc:8e:06:64:11:ec:
9f:09:82:6f:2c:c1:6d:43:32:8b:61:e5:ad:14:14:
5c:f2:14:2b:08:c3:ee:a6:55:ed:9f:27:b1:78:b3:
4a:53:d6:cc:2a:1b:c9:95:c3:a5:f4:96:8b:8a:7f:
8a:a0:6c:58:a4:ef:54:2c:6f:77:91:a2:59:63:d7:
16:aa:c7:a1:8d:ce:47:57:c7:77:7f:a7:89:a5:2f:
5b:1f:e3:55:55:3c:ab:65:5b:f1:6c:59:5a:b5:3b:
e0:a0:18:d8:0e:1b:04:48:a9:78:c1:e1:26:cc:5f:
f7:05:ba:20:a1:86:1a:b4:92:90:51:37:0a:85:64:
77:e2:18:2c:a6:43:7c:7c:cd:da:f2:74:a6:ca:7f:
db:4a:40:a4:0c:37:d3:e6:e8:dc:bd:01:d0:e4:d4:
88:16:27:a7:c6:9e:92:bb:2f:c3:96:e0:f5:48:50:
7b:ae:e5:9a:11:1c:40:4c:68:0b:aa:7c:e9:ca:aa:
e0:e9:82:eb:ed:60:21:f4:bc:8a:29:6a:c8:f7:84:
6d:02:fd:41:c1:28:39:d0:c5:b3:d2:2a:00:4e:c6:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FE:29:3C:A6:0C:50:76:3C:67:21:4E:F3:2A:37:AB:68:4A:B3:FA
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Gf4pPKYMUHY8ZyFO8yo3q2hKs_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.200.0/23
Signature Algorithm: sha256WithRSAEncryption
53:16:02:9f:46:a2:2e:64:a1:af:ee:66:ae:b9:80:9d:8f:b3:
a4:1a:0a:9b:55:7d:59:ed:d2:be:ac:c3:c1:0b:7d:45:cf:d4:
ec:99:d5:f6:80:21:a6:38:ee:fe:cf:8e:65:a4:2e:0b:10:49:
9e:f8:b9:8f:71:d9:d4:dc:ff:16:58:6d:d3:1f:ce:e0:e0:42:
99:c0:8c:6c:4e:c1:d7:01:dc:9d:0a:42:39:c0:44:e8:c5:93:
ca:d7:bd:de:01:91:01:74:34:78:2c:4e:4f:42:55:c3:87:5c:
5f:07:8e:e4:8f:b1:66:b0:cd:22:07:ea:95:46:2d:99:43:53:
86:53:71:99:97:8d:e2:71:ea:1e:1a:d4:b2:e3:ad:74:bd:19:
f5:46:5d:a1:3f:26:c1:28:d8:4e:eb:14:8a:03:09:07:4c:7a:
49:03:44:7a:77:d6:3f:6d:13:00:10:d3:09:2b:c4:a7:14:1d:
1f:2b:e4:66:cb:f5:89:27:d6:b6:e5:5b:6e:fb:1c:4b:78:b7:
34:1d:f4:66:c7:da:91:6e:96:83:fc:5e:15:af:ef:8f:a0:0e:
cd:4c:9b:f5:69:89:14:bd:3a:fc:c1:fc:b8:28:f0:d3:b4:c7:
19:1f:ed:6b:33:ff:22:53:8f:45:8f:f9:37:f4:81:c8:10:ba:
c6:b6:a2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org