Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/gJ-1ORjMZLlG0bJlm_28TOGdBUM.roa
File: gJ-1ORjMZLlG0bJlm_28TOGdBUM.roa (raw, json)
Hash identifier: jTzjYNoJ7f9RAXCIm/TWro6ccWvqIxG+mOx36k7/Bzg=
Subject key identifier: 80:9F:B5:39:18:CC:64:B9:46:D1:B2:65:9B:FD:BC:4C:E1:9D:05:43
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 01856D4ABF5C2D113D8B0AAAC7A18C0128C8
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/gJ-1ORjMZLlG0bJlm_28TOGdBUM.roa
Signing time: Sun 01 Jan 2023 12:24:53 +0000
ROA not before: Sun 01 Jan 2023 12:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198867
IP address blocks: 5.45.191.0/24 maxlen: 24
5.45.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:bf:5c:2d:11:3d:8b:0a:aa:c7:a1:8c:01:28:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Jan 1 12:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=809fb53918cc64b946d1b2659bfdbc4ce19d0543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:e7:e7:f3:2b:6f:ad:68:32:4e:00:aa:d2:
b9:bd:1c:f5:da:b7:01:bd:d5:6d:ea:60:ca:7d:19:
c2:40:12:15:66:5c:67:78:7d:81:10:86:4f:a1:5f:
65:26:7c:45:04:a3:69:20:08:27:c3:7b:94:a9:e5:
96:fe:4e:f4:b5:46:06:b1:d6:f1:00:86:37:ef:4f:
40:ac:c3:a4:d1:8a:2f:de:7c:74:37:1a:f8:f3:59:
69:43:c3:0c:81:74:ef:78:72:4a:d6:d6:a2:94:a1:
13:25:04:09:ca:d7:a6:b1:7c:0b:8b:77:ed:d9:ff:
8a:e7:3a:35:f2:16:f1:16:fb:a8:14:e7:ef:6d:a1:
2d:1e:52:8a:c8:fe:dd:e4:e0:7a:79:c5:24:de:25:
85:33:4d:d5:0f:9e:90:f2:ad:db:66:ab:02:36:8c:
ac:ea:ff:75:3f:ca:9e:22:b2:9a:d1:2c:db:6e:7e:
48:b5:77:23:1b:ca:70:a0:e7:82:04:79:9b:41:a0:
6d:b9:b8:1b:79:e4:7b:75:70:7f:b2:d2:be:ef:99:
74:b2:e6:55:21:91:ce:39:72:40:61:13:a4:f9:9b:
82:c4:fd:67:9c:fa:59:89:bd:76:6f:87:14:af:cf:
be:45:2b:17:36:58:85:55:e2:e0:e4:b0:2b:2c:33:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9F:B5:39:18:CC:64:B9:46:D1:B2:65:9B:FD:BC:4C:E1:9D:05:43
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/gJ-1ORjMZLlG0bJlm_28TOGdBUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.190.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:6c:b5:2b:91:e3:b5:e3:f8:57:5b:74:7c:49:cf:b0:94:78:
25:5e:39:99:b1:96:e6:b7:0c:7d:89:49:cf:ad:04:2a:91:26:
84:5a:ce:12:3e:b1:a0:e4:5f:be:f6:61:44:a2:9c:dc:38:37:
2e:9e:0d:13:d9:f3:a8:e4:63:a6:31:17:3a:e9:c3:eb:3f:62:
a6:83:ee:dc:43:ea:0f:84:82:a9:3a:45:77:2b:63:70:45:66:
14:17:70:9c:25:51:47:7e:74:29:4b:56:5f:c8:eb:0f:bd:a8:
f0:7f:15:c6:14:06:0b:8d:db:f9:11:98:ff:29:35:4d:b1:17:
ca:81:b2:cb:57:f0:48:5d:bf:ad:cb:ef:ae:f4:de:cc:9c:4b:
53:d9:17:74:79:82:01:eb:36:b7:91:02:49:41:a8:65:e1:d0:
06:ca:bb:06:d9:4e:e8:b3:74:0f:91:5d:6a:5a:46:ee:88:65:
e7:c0:6a:f7:93:22:28:69:51:64:65:9d:13:96:c4:cc:0c:f9:
77:1b:bb:a5:2d:e6:f6:24:01:5f:4b:9b:06:99:3e:27:96:31:
0a:f2:e1:ee:0c:e5:bd:16:b8:10:1b:4e:8a:39:31:8f:2e:12:
2e:23:ba:63:d0:8a:36:6b:fb:07:b7:56:1f:4c:f8:e3:36:27:
5c:0f:5f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:39 2024 by rpki-client on console-fra.rpki-client.org