Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/gk0k4483RG3BD22McgfN37k-_zY.roa
File: gk0k4483RG3BD22McgfN37k-_zY.roa (raw, json)
Hash identifier: XX9AjGeLkSEDZT13chmQn/si6NQoDAzXwcS1B1EkRRI=
Subject key identifier: 82:4D:24:E3:8F:37:44:6D:C1:0F:6D:8C:72:07:CD:DF:B9:3E:FF:36
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 01856EC1FBED431EA8C405B50521C6AB16C2
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/gk0k4483RG3BD22McgfN37k-_zY.roa
Signing time: Sun 01 Jan 2023 19:14:44 +0000
ROA not before: Sun 01 Jan 2023 19:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210056
IP address blocks: 94.45.159.0/24 maxlen: 24
94.45.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:fb:ed:43:1e:a8:c4:05:b5:05:21:c6:ab:16:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Jan 1 19:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=824d24e38f37446dc10f6d8c7207cddfb93eff36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:73:ca:49:0f:5f:80:96:de:b6:f7:48:aa:
55:25:53:65:55:94:86:40:1d:5d:3f:ca:a1:53:99:
ac:e6:48:27:56:05:57:c9:d9:32:95:97:48:24:7c:
49:f7:ee:03:b7:d0:19:58:e4:50:63:7e:26:87:ab:
d0:be:1b:3e:af:bc:17:e7:73:15:2e:ed:83:66:0f:
11:ef:b3:05:28:82:34:31:f6:b4:82:46:1c:1b:e5:
0a:b7:c4:54:2b:bb:db:9f:a3:87:2e:85:24:55:b3:
02:78:c5:46:b0:9c:1c:27:48:0a:9c:17:a2:b2:18:
e9:81:d3:1d:6d:aa:26:0c:05:c7:83:f5:e3:d9:c3:
da:84:10:18:64:ff:08:62:9a:fc:65:3d:84:30:a9:
15:78:78:2e:05:5f:b7:79:46:04:c5:30:30:6a:b4:
cd:56:49:94:fb:30:7c:8f:72:64:3f:88:65:21:8c:
f5:68:7d:ee:94:1e:ed:f2:f2:91:aa:13:0b:f1:0c:
84:64:98:fc:70:c1:7e:c3:70:27:75:9a:63:a0:be:
ee:58:8a:c7:fb:9a:78:9b:be:9a:e3:76:ff:72:0b:
26:af:6d:2f:b7:12:6e:b1:84:5f:f7:49:a9:e4:1a:
3d:e2:d7:54:c5:36:a4:3f:67:e8:63:d5:e0:3f:99:
b9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4D:24:E3:8F:37:44:6D:C1:0F:6D:8C:72:07:CD:DF:B9:3E:FF:36
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/gk0k4483RG3BD22McgfN37k-_zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.158.0/23
Signature Algorithm: sha256WithRSAEncryption
52:aa:24:b2:4e:1b:65:ce:c6:51:3a:11:99:20:99:83:b5:d0:
39:b2:ee:0a:2a:f5:dc:30:8d:4b:96:fe:ac:65:0f:5b:9b:68:
9e:a5:0f:59:d7:a8:8e:f3:a8:55:97:cc:30:9a:9f:74:4e:51:
a1:a4:73:4d:f0:60:b8:c0:2f:ba:96:5b:54:57:e3:60:39:71:
76:b7:6f:79:b7:de:8a:e6:40:a7:89:11:32:42:b6:ed:b4:48:
b0:81:6e:72:bf:78:7d:9f:94:41:ef:bc:b6:9c:26:b8:a7:06:
8a:a0:96:83:fd:f1:d0:58:66:9f:ab:97:df:2c:c2:22:a3:a3:
6c:23:9b:cb:35:d5:68:87:41:da:5e:92:09:39:56:59:36:6e:
84:3a:44:5a:1a:71:0d:76:7a:be:d7:3e:cb:ff:35:2d:f9:a4:
3c:7f:c1:b4:60:b7:2f:bd:3b:87:c3:f4:04:ea:ca:99:82:e4:
7d:77:d9:d9:07:84:a0:64:94:78:a6:b1:cb:d4:8d:c4:5d:64:
92:ff:e1:b3:63:fd:13:f8:86:2c:40:90:d5:12:17:d4:be:c2:
cf:24:7d:db:30:1f:d9:ed:8f:fb:2b:1d:c0:73:dc:e7:cd:60:
bd:8d:2c:97:dd:1e:8e:50:d4:66:d7:10:a8:73:9d:97:f8:d9:
be:85:e3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:42 2024 by rpki-client on console-ams.rpki-client.org