Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/gQuxmkc0wWJkTUpAI3OXBctbt74.roa
File: gQuxmkc0wWJkTUpAI3OXBctbt74.roa (raw, json)
Hash identifier: Sn46MrvvFz0PiZ8Grn+VqC53XTJN0dC3ksjRJbdtUYw=
Subject key identifier: 81:0B:B1:9A:47:34:C1:62:64:4D:4A:40:23:73:97:05:CB:5B:B7:BE
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 018572FA8DC2083899CEFA8EC26255124BCC
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/gQuxmkc0wWJkTUpAI3OXBctbt74.roa
Signing time: Mon 02 Jan 2023 14:55:00 +0000
ROA not before: Mon 02 Jan 2023 14:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210150
IP address blocks: 45.144.76.0/22 maxlen: 22
37.18.48.0/22 maxlen: 22
37.18.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:8d:c2:08:38:99:ce:fa:8e:c2:62:55:12:4b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Jan 2 14:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=810bb19a4734c162644d4a4023739705cb5bb7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:8d:e3:df:94:b6:14:05:9b:4e:d9:75:a7:
27:b4:b5:0d:95:c4:a7:c6:cc:cb:17:78:62:e1:b1:
6e:c5:a2:a5:a1:05:73:6a:d0:cd:4f:21:19:30:44:
4d:0d:6a:c8:2c:0c:dc:3b:3b:8a:8c:b4:62:3f:53:
96:03:77:38:21:74:d3:85:00:39:f5:30:48:b1:25:
ca:c8:f2:91:ae:45:c7:5f:08:18:d8:23:05:77:ee:
51:4a:63:55:20:69:f1:80:bf:65:20:32:15:f0:60:
39:9f:12:fa:a1:f9:76:80:c1:ac:06:9a:f7:e3:0a:
23:17:fb:f9:5b:66:63:a9:1d:71:40:fb:cd:e0:8f:
34:f2:f9:fb:92:fb:3b:e2:a3:8b:27:93:22:ed:58:
00:38:91:bb:cf:39:e2:8e:a3:67:0c:11:bc:b5:93:
6b:b3:42:2a:55:c7:3f:51:5c:a1:e2:b5:db:35:14:
24:d6:f7:4f:2e:80:88:a4:3e:eb:6b:f7:d2:bf:e6:
df:48:08:da:d3:82:13:83:cf:97:61:62:5f:d2:0d:
99:16:12:91:c7:1e:e9:2e:5c:e9:18:00:3f:1a:1d:
60:d7:03:1c:b4:0f:e1:36:b6:e5:1e:f9:08:a5:a4:
8a:21:13:1b:6f:35:64:9c:1e:de:5f:4d:5a:5b:3c:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0B:B1:9A:47:34:C1:62:64:4D:4A:40:23:73:97:05:CB:5B:B7:BE
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/gQuxmkc0wWJkTUpAI3OXBctbt74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.48.0/21
45.144.76.0/22
Signature Algorithm: sha256WithRSAEncryption
86:c8:31:5f:ce:00:4a:08:5d:96:c3:6b:83:29:dd:a9:78:34:
66:fa:82:82:f6:bc:c9:39:5b:35:5c:13:58:03:5d:6c:8e:bf:
f5:23:ce:f3:a9:54:9f:8e:f0:13:2a:d0:69:a9:49:17:e3:9f:
00:e1:ba:f3:c6:61:97:a4:1a:fa:c0:bc:76:eb:ef:9d:19:1b:
dd:09:b7:fa:1c:f4:20:c1:52:6d:86:87:b1:56:8b:7e:54:98:
8f:77:b9:7a:e2:6b:9f:46:dc:8c:db:a9:8f:93:01:ff:05:7f:
8e:eb:7c:a7:7f:ba:8f:cb:90:bf:92:0d:50:92:29:37:1f:cb:
3c:ce:a8:39:b3:32:b8:be:c2:8e:90:8a:61:0c:7c:06:c3:de:
5f:cc:91:0b:84:d2:83:c5:4b:96:8b:80:b1:0c:3b:15:e4:46:
0d:38:d0:4a:c2:ed:26:ee:91:a6:eb:f0:35:ca:08:b4:cd:95:
19:57:08:b2:36:ed:fb:af:f8:61:d7:ba:8c:bd:bf:7c:b6:ab:
97:5c:a7:01:2d:09:b8:88:d6:fa:18:b6:8d:02:c7:13:97:8a:
25:51:ed:de:4d:23:56:a3:05:65:d4:aa:86:d8:65:bd:d3:da:
2a:2a:fe:13:4b:95:6e:e9:18:0e:94:c6:36:9d:9c:20:aa:73:
5b:7f:d9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:25 2024 by rpki-client on console-ams.rpki-client.org