Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/gG7lfjHAkphokq0LV-s6-NNP-ss.roa
File: gG7lfjHAkphokq0LV-s6-NNP-ss.roa (raw, json)
Hash identifier: Y6LiYFbDv9aWqMFhCz7fo4jrYcGtV+IW48UAoYMC3aY=
Subject key identifier: 80:6E:E5:7E:31:C0:92:98:68:92:AD:0B:57:EB:3A:F8:D3:4F:FA:CB
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 0187E586FCFBD7E3B43D080B87B8621ADE90
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/gG7lfjHAkphokq0LV-s6-NNP-ss.roa
Signing time: Thu 04 May 2023 06:50:41 +0000
ROA not before: Thu 04 May 2023 06:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.140.211.0/24 maxlen: 24
45.140.210.0/24 maxlen: 24
45.140.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e5:86:fc:fb:d7:e3:b4:3d:08:0b:87:b8:62:1a:de:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: May 4 06:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=806ee57e31c092986892ad0b57eb3af8d34ffacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:8d:b7:7f:b3:61:52:85:00:9e:7d:7e:5b:
f8:2b:b8:b1:d8:9a:c0:b8:10:dd:34:d4:f0:49:a4:
46:a1:79:58:01:df:f1:a6:f8:bd:d7:53:56:61:74:
b0:52:14:36:4d:1a:a3:e1:20:cf:cf:e3:d6:8a:53:
dc:7a:4c:d4:10:e6:f5:0d:1a:84:4e:61:ca:57:ef:
80:77:45:db:3b:70:cf:2c:3d:68:a8:19:27:01:12:
58:32:f6:63:e6:08:2d:dc:49:5e:c4:b8:cb:29:75:
df:14:91:97:22:e9:46:cd:2d:c9:d8:2f:34:60:4f:
7c:3c:e0:26:3d:47:16:39:7e:cc:56:3e:7e:52:e6:
87:bf:84:7e:43:a0:01:38:da:49:4c:f6:cd:94:f0:
e5:c8:13:49:48:fc:5b:9c:ed:13:12:3a:ae:fb:ae:
9d:d4:36:4b:42:b8:ba:96:5d:39:b7:f5:52:bc:57:
13:8f:d4:d2:a7:69:2d:2e:44:96:ea:9e:78:6e:3b:
63:50:01:3d:7b:71:28:1a:82:25:84:bd:97:e2:17:
2a:f2:bc:68:dd:6c:37:1a:73:7e:e5:1b:a6:9a:95:
b8:df:a4:89:37:dd:4d:4f:f1:0a:3d:ad:6c:33:c7:
69:de:0e:c7:b5:98:f2:f1:46:7c:29:ff:a1:82:92:
ed:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6E:E5:7E:31:C0:92:98:68:92:AD:0B:57:EB:3A:F8:D3:4F:FA:CB
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/gG7lfjHAkphokq0LV-s6-NNP-ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.209.0-45.140.211.255
Signature Algorithm: sha256WithRSAEncryption
7f:76:77:0d:93:30:76:9d:fc:15:3b:8a:6d:b2:ab:9a:09:e0:
96:40:cf:5d:b5:1a:1e:6b:d5:03:77:05:9b:a3:45:61:51:b8:
13:84:d7:b7:7b:00:37:ff:bb:aa:f5:e8:e5:20:98:d1:3b:fb:
c9:cc:0c:42:61:0c:b6:10:69:36:13:11:83:3d:34:c9:2d:0d:
54:e1:38:9f:c7:39:b6:fe:a1:d1:a1:08:1e:f9:f2:c9:a8:ed:
14:20:89:b3:07:4e:5f:f2:43:0a:af:18:98:33:1e:2d:59:df:
6e:9c:e8:e5:6a:94:d7:87:79:13:6b:db:31:74:37:9b:d3:43:
65:bb:f8:8c:59:eb:de:23:69:b3:b5:0a:78:18:37:2b:0d:19:
90:0e:87:cd:c2:e5:31:c9:38:40:1f:eb:5b:fc:34:e1:03:f3:
c1:08:e3:28:36:41:8a:cb:24:83:e4:14:aa:b1:f9:76:3f:1b:
1e:c6:a1:1d:20:7c:da:8c:a2:94:40:44:42:44:10:c5:16:cb:
c9:c0:2e:f5:40:62:8d:9e:74:3c:6f:1c:ab:1b:17:db:10:d1:
38:6d:4a:4a:ef:e8:20:4d:f7:49:d2:b3:3b:18:ad:41:47:14:
12:ac:38:34:84:9e:c2:56:ed:7e:23:bd:f9:68:51:56:43:9d:
c3:15:08:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:23 2024 by rpki-client on console-fra.rpki-client.org