Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/1-GjcxgWbaat48AWececedlHXfp4.roa
File: 1-GjcxgWbaat48AWececedlHXfp4.roa (raw, json)
Hash identifier: eM0Iwl5qXrD+6xwiO4Bhn5mVHiMRmZVryywmygc9O3o=
Subject key identifier: F8:68:DC:C6:05:9B:69:AB:78:F0:05:9E:71:E7:1E:76:51:D7:7E:9E
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 018F5D740A3FC41484AC188D11D1DBC418AD
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/1-GjcxgWbaat48AWececedlHXfp4.roa
Signing time: Thu 09 May 2024 13:03:56 +0000
ROA not before: Thu 09 May 2024 13:03:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.140.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 12:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5d:74:0a:3f:c4:14:84:ac:18:8d:11:d1:db:c4:18:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: May 9 13:03:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f868dcc6059b69ab78f0059e71e71e7651d77e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:9e:c0:bb:a5:17:6e:df:d2:dd:ac:cb:f5:
4e:51:82:e7:fd:31:b8:81:7e:5b:97:82:5b:05:91:
39:59:23:01:2f:64:66:98:8a:f5:80:ac:d5:48:54:
49:58:9e:64:21:8e:c6:82:79:61:e4:2f:c8:3f:fb:
19:8f:31:0a:fd:b9:31:9b:df:27:15:40:96:28:9c:
9e:85:ad:16:78:be:b2:c3:37:ca:ce:4a:a9:e4:6d:
68:ab:1e:07:91:81:8d:0b:4b:6f:6a:cc:d7:c3:ec:
9d:f8:41:d3:89:08:57:7e:b2:86:57:d3:48:6a:a6:
26:2f:c9:e3:f1:f5:3f:71:1d:34:79:86:ac:98:4b:
51:e6:e4:19:cd:7f:27:1b:44:b0:66:bc:b2:17:8b:
28:66:55:04:94:c4:8d:f4:0a:ad:ae:35:5d:d7:4f:
ba:c8:3b:b6:57:41:e0:54:f3:c5:cb:b7:0a:f5:53:
00:2d:47:48:02:1a:4a:7f:28:74:44:21:af:21:a3:
2c:e4:3c:c9:2c:17:d0:e3:3a:76:6b:f6:9b:fe:37:
d5:3f:3b:cb:21:2c:dc:4d:78:4e:f2:b1:1b:7a:3c:
48:95:73:a1:e6:df:da:3b:4f:4a:bb:b2:0e:42:b6:
a4:60:bd:d1:93:03:a9:58:d8:b5:c2:e8:e2:20:e2:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:68:DC:C6:05:9B:69:AB:78:F0:05:9E:71:E7:1E:76:51:D7:7E:9E
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/1-GjcxgWbaat48AWececedlHXfp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.195.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:eb:41:7a:7c:c3:96:92:bb:51:1d:d4:78:a0:8e:d9:9d:c2:
04:49:c5:2e:a6:d4:3c:09:d7:58:e3:44:61:fb:52:7d:72:c4:
6c:4e:5c:31:64:2b:2b:b4:44:12:cc:96:a1:7c:0a:bb:86:17:
23:c8:29:e0:a2:3e:d6:28:bc:ac:da:91:1f:c7:32:75:c3:d8:
35:1f:c7:46:50:4a:42:04:ff:b7:b1:3a:b2:14:f2:71:65:90:
46:58:49:a5:f7:7c:97:75:d0:b2:de:fd:84:4c:60:2b:56:c8:
68:29:67:01:c5:72:fb:d0:47:94:dc:01:a9:b3:01:27:ad:fd:
b0:4b:7e:c4:b7:d2:39:d3:89:30:d5:71:3e:f4:89:6b:fa:a5:
b8:3b:07:0c:28:fc:72:af:8b:4f:8e:c8:27:b8:57:0d:36:83:
9e:0e:33:15:1e:fd:1b:d3:76:1a:13:97:53:90:8c:2d:43:c7:
2d:e4:f5:c5:0c:56:bb:58:5e:e0:91:1c:c0:2f:16:68:48:57:
49:d8:27:50:2f:bd:da:ce:5d:75:3f:17:b2:59:8c:38:07:84:
30:56:45:4d:ee:22:69:d1:d5:31:7b:0c:34:01:38:2c:8e:ca:
ee:81:98:60:8c:4a:11:fb:82:c9:aa:0f:41:ce:51:9e:9a:96:
19:09:39:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:56 2024 by rpki-client on console-fra.rpki-client.org