Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gxUPehmR8KidL6w0mdx6FRpgjFc.roa
File: gxUPehmR8KidL6w0mdx6FRpgjFc.roa (raw, json)
Hash identifier: Ui/lPGhsIVbcyNbJ/bfUlgntDDKSehR1EnOD5ud0dTo=
Subject key identifier: 83:15:0F:7A:19:91:F0:A8:9D:2F:AC:34:99:DC:7A:15:1A:60:8C:57
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A201CE9E0F2E9307190E062BADC370A07
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gxUPehmR8KidL6w0mdx6FRpgjFc.roa
Signing time: Wed 23 Aug 2023 01:58:00 +0000
ROA not before: Wed 23 Aug 2023 01:58:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216461
IP address blocks: 45.14.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Aug 2023 00:47:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:20:1c:e9:e0:f2:e9:30:71:90:e0:62:ba:dc:37:0a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 23 01:58:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83150f7a1991f0a89d2fac3499dc7a151a608c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:40:ce:26:10:73:b3:a7:82:cd:72:a2:6f:
6f:d3:e1:ff:da:8f:a3:53:df:2d:79:2d:fe:10:be:
14:b2:a3:ee:db:c2:bc:43:ee:e6:77:ae:26:82:fd:
c4:f5:8b:c2:dc:ac:d4:9d:c9:8f:4d:7f:48:49:00:
09:63:28:bd:c2:9a:57:13:b0:e6:a8:24:6f:cc:17:
a7:1c:aa:23:ec:89:6b:81:5c:89:91:19:da:41:a3:
3e:2f:55:ed:7e:1d:09:70:0a:20:e6:2b:56:eb:24:
fe:aa:2d:ed:97:15:a7:67:19:a0:8f:c4:87:6e:61:
3b:a1:0f:14:b1:a7:bb:62:10:97:b2:9a:90:87:e2:
4d:db:2d:7b:c6:14:2e:19:59:89:8f:ee:8f:9f:b5:
55:f2:3d:f1:7f:db:91:7a:1d:4a:8f:f3:87:1f:7d:
19:55:c8:a0:fb:64:13:64:be:7d:cd:75:1b:8f:e6:
fd:c9:8f:4a:0e:4b:fe:fc:18:25:a4:75:67:da:ee:
3a:56:03:63:43:5e:72:fc:a6:97:70:38:d1:e3:ec:
76:36:f1:33:05:2c:4a:27:01:8e:e4:6b:2b:e2:17:
ea:48:41:b0:65:09:07:01:31:3b:de:d2:08:68:19:
31:f7:fa:fc:76:a7:49:0d:ad:29:31:66:1d:2d:bf:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:15:0F:7A:19:91:F0:A8:9D:2F:AC:34:99:DC:7A:15:1A:60:8C:57
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gxUPehmR8KidL6w0mdx6FRpgjFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.166.0/24
Signature Algorithm: sha256WithRSAEncryption
27:29:7c:e3:67:8a:3b:e3:d0:8e:5b:4a:02:f2:0f:1c:f8:50:
6c:86:ec:e3:dd:3f:aa:26:80:6d:b4:da:1f:e9:9e:fe:82:de:
29:6e:28:c4:45:3b:69:96:d0:3a:6f:35:6d:ce:56:8e:92:c9:
f8:cd:02:bd:e5:6e:63:12:6f:3d:42:41:85:65:0b:df:a6:4f:
95:95:a1:e2:a9:46:10:60:5f:07:19:ee:78:66:f6:d3:61:05:
90:0f:1a:7c:5a:c0:ea:b6:28:ff:71:fd:a6:f7:5d:e0:c7:d9:
21:e1:1a:29:b8:8f:3b:2b:1f:aa:29:f7:f6:c3:5a:b8:f8:65:
69:c8:5c:9e:24:5a:e9:f2:53:26:a5:e0:c0:56:23:57:e7:ce:
cc:fb:e7:a2:82:36:2f:23:51:8a:a5:26:d2:57:c5:a3:3e:2a:
d1:29:e6:af:2f:fe:a6:1e:64:1f:47:e1:b2:4b:58:48:8f:e8:
a4:e6:a5:99:e5:e2:36:e0:05:ed:31:e3:bf:61:bc:de:b7:6a:
20:a2:7d:3a:71:97:be:27:b7:bd:14:69:46:41:a6:96:b2:1c:
81:a2:bc:00:82:d1:b3:00:08:f9:85:4d:c3:2a:46:ac:cd:ec:
19:a2:a6:8d:09:33:c9:ac:0b:c8:b1:3f:48:1f:a4:e4:92:10:
eb:d8:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:16 2024 by rpki-client on console-fra.rpki-client.org