Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/GdekEmndknihYQWlfb3wS-DCY2c.roa
File: GdekEmndknihYQWlfb3wS-DCY2c.roa (raw, json)
Hash identifier: 8+0wCEQ4sE96QpuBcgHT8FIqaxe2wknqzdT4HbdRV1E=
Subject key identifier: 19:D7:A4:12:69:DD:92:78:A1:61:05:A5:7D:BD:F0:4B:E0:C2:63:67
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 01864B96AAA19F3E75B6E1E82EC813E92599
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/GdekEmndknihYQWlfb3wS-DCY2c.roa
Signing time: Mon 13 Feb 2023 16:23:30 +0000
ROA not before: Mon 13 Feb 2023 16:23:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 45.151.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 07:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4b:96:aa:a1:9f:3e:75:b6:e1:e8:2e:c8:13:e9:25:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Feb 13 16:23:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19d7a41269dd9278a16105a57dbdf04be0c26367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:f6:3b:b7:f2:f2:06:c7:b9:d1:6f:08:c3:
8d:26:fc:b9:66:e2:d5:aa:b7:4b:37:2d:ba:20:37:
4f:82:4d:ef:45:e6:3e:a4:9e:b2:e5:63:e5:7d:d4:
bd:dd:01:09:61:02:4f:05:b8:37:eb:eb:53:54:6d:
81:ca:89:ad:a1:26:de:ad:28:9e:04:a3:a5:7f:5d:
f8:48:d2:6e:58:44:cc:d9:ee:ad:cb:9e:a4:56:ad:
6c:28:c9:bd:e1:ba:6a:66:7e:70:39:f4:4a:7a:18:
94:08:b4:72:c4:e9:bc:8b:c8:8c:ca:03:83:2c:1f:
f3:00:7b:f7:9b:f6:12:3f:a0:ab:17:10:47:a6:48:
22:3b:99:a2:09:3d:c3:21:c4:57:88:d1:cd:6e:4e:
a5:6c:d2:16:24:45:37:d0:a2:34:09:91:7e:8a:c5:
00:15:69:c0:6e:13:0e:a8:15:41:99:dc:bf:bb:1d:
da:b3:45:26:58:17:e3:9d:a1:95:95:a1:ea:35:62:
b4:09:5b:0f:1a:6f:53:a3:40:17:ae:76:8c:b3:24:
f6:49:b6:3e:ae:d6:c2:98:a8:73:64:a9:c7:ba:4c:
67:e6:9f:fc:1a:1c:2f:4f:22:35:b2:56:52:2e:0c:
9f:3b:ff:83:70:1d:98:b4:63:14:85:bc:ef:ed:2c:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D7:A4:12:69:DD:92:78:A1:61:05:A5:7D:BD:F0:4B:E0:C2:63:67
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/GdekEmndknihYQWlfb3wS-DCY2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.140.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ed:f7:cc:33:d4:b9:11:16:41:85:c2:8e:82:af:5e:71:54:
e3:17:21:90:29:a8:6e:12:9d:e5:70:c2:71:83:f7:43:7b:04:
b7:b0:0b:7f:73:85:4f:16:92:e8:3a:ce:ff:46:30:40:a3:67:
c2:6b:dc:4b:6b:6f:95:71:01:e6:cd:d6:17:1e:05:ca:47:6f:
e6:2d:bb:4f:0f:9d:00:71:8d:c0:4b:b9:aa:34:ea:cf:7f:16:
01:5c:85:e8:b5:c2:8e:65:2b:2c:88:1e:a3:fb:98:e6:3e:46:
d2:94:bb:0f:ac:e8:3b:a6:17:a2:9c:99:70:e4:17:a7:8b:d3:
71:8a:6e:90:88:8b:7b:b3:df:b5:22:ef:61:a8:29:06:00:67:
44:5e:36:11:f1:6b:f6:e7:d7:44:83:3d:ee:e9:2c:02:fc:aa:
ce:d9:da:25:46:84:bd:01:6d:63:41:7a:2b:b5:4e:65:c2:bb:
86:a1:62:74:7f:c3:00:23:eb:5e:21:28:46:4a:e4:27:44:0d:
2f:a4:23:57:1a:7d:b7:97:d4:47:1e:98:73:73:7b:90:a2:bb:
39:47:eb:ee:9c:97:cf:fe:35:36:95:d6:7e:3e:22:e5:7d:d4:
0f:7c:13:47:84:d4:bf:a8:63:14:e2:76:73:dc:42:ad:7e:01:
9e:9b:a1:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZLlqqhnz51tuHoLsgT6SWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmYTNmOTlkYmE5NGEzMDdiNmNkMmUxZDkwZjY3OGRhYzA1
NjgxZjgwHhcNMjMwMjEzMTYyMzMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWQ3YTQxMjY5ZGQ5Mjc4YTE2MTA1YTU3ZGJkZjA0YmUwYzI2MzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/b2O7fy8gbHudFvCMONJvy5ZuLV
qrdLNy26IDdPgk3vReY+pJ6y5WPlfdS93QEJYQJPBbg36+tTVG2ByomtoSberSie
BKOlf134SNJuWETM2e6ty56kVq1sKMm94bpqZn5wOfRKehiUCLRyxOm8i8iMygOD
LB/zAHv3m/YSP6CrFxBHpkgiO5miCT3DIcRXiNHNbk6lbNIWJEU30KI0CZF+isUA
FWnAbhMOqBVBmdy/ux3as0UmWBfjnaGVlaHqNWK0CVsPGm9To0AXrnaMsyT2SbY+
rtbCmKhzZKnHukxn5p/8GhwvTyI1slZSLgyfO/+DcB2YtGMUhbzv7SzsmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBnXpBJp3ZJ4oWEFpX298EvgwmNnMB8GA1UdIwQY
MBaAFH+j+Z26lKMHts0uHZD2eNrAVoH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjZQNW5icVVvd2UyelM0ZGtQWjQyc0JXZ2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81YWUzYzQtNGFhNC00YzYyLThlYjUt
NGVhNDdjY2UwYzYzLzEvR2Rla0VtbmRrbmloWVFXbGZiM3dTLURDWTJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81YWUzYzQtNGFhNC00YzYyLThlYjUtNGVhNDdjY2UwYzYz
LzEvZjZQNW5icVVvd2UyelM0ZGtQWjQyc0JXZ2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZeMMA0G
CSqGSIb3DQEBCwUAA4IBAQCV7ffMM9S5ERZBhcKOgq9ecVTjFyGQKahuEp3lcMJx
g/dDewS3sAt/c4VPFpLoOs7/RjBAo2fCa9xLa2+VcQHmzdYXHgXKR2/mLbtPD50A
cY3AS7mqNOrPfxYBXIXotcKOZSssiB6j+5jmPkbSlLsPrOg7pheinJlw5Beni9Nx
im6QiIt7s9+1Iu9hqCkGAGdEXjYR8Wv259dEgz3u6SwC/KrO2dolRoS9AW1jQXor
tU5lwruGoWJ0f8MAI+teIShGSuQnRA0vpCNXGn23l9RHHphzc3uQors5R+vunJfP
/jU2ldZ+PiLlfdQPfBNHhNS/qGMU4nZz3EKtfgGem6FX
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:03 2024 by rpki-client on console-ams.rpki-client.org