Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/gdFuWFrVB5fj9J6nzNTFljhi79o.roa
File: gdFuWFrVB5fj9J6nzNTFljhi79o.roa (raw, json)
Hash identifier: xxhwWA1BiRWr6xFcL3ta+jNZvKIVu01QEwoTQVY3Db0=
Subject key identifier: 81:D1:6E:58:5A:D5:07:97:E3:F4:9E:A7:CC:D4:C5:96:38:62:EF:DA
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 018570E7547E87E256A8EF2A4D31FA07333E
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/gdFuWFrVB5fj9J6nzNTFljhi79o.roa
Signing time: Mon 02 Jan 2023 05:14:46 +0000
ROA not before: Mon 02 Jan 2023 05:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202272
IP address blocks: 45.152.68.0/24 maxlen: 24
2a0f:4900::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:54:7e:87:e2:56:a8:ef:2a:4d:31:fa:07:33:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Jan 2 05:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81d16e585ad50797e3f49ea7ccd4c5963862efda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:de:82:f4:b5:e6:08:af:e3:59:68:82:37:
cb:6b:ca:9b:05:e6:82:c5:49:e1:12:11:e7:61:15:
1c:bc:77:aa:f7:24:4b:de:50:e9:27:f7:dc:b0:fb:
9b:bd:73:5c:a1:f5:37:d1:81:08:04:c2:01:56:18:
b2:60:21:72:f7:63:68:ce:4b:c1:ab:a3:2b:64:72:
f8:7a:c7:29:8b:3f:bd:ce:26:e4:a0:c0:3d:27:56:
d2:ee:90:51:0f:86:85:2e:81:ff:6a:55:df:01:66:
35:07:ef:64:de:bc:6c:ac:c7:ec:15:61:45:fa:d9:
ff:7a:41:d1:af:e4:2a:94:61:c2:9f:d7:9e:c3:7c:
de:7f:5c:5b:9f:e1:21:35:58:80:e4:40:d2:2d:1c:
48:3c:c9:3e:c4:48:ae:3a:a0:35:69:5a:44:3a:c9:
0d:c4:84:d1:a9:f3:83:c4:a7:d5:71:14:37:13:96:
5c:c3:e9:05:b3:37:ca:0f:a8:1a:5a:d8:df:6d:48:
76:0a:e9:6a:b4:62:09:52:46:61:ec:ab:cb:3a:a0:
e6:06:de:a1:77:9f:00:6f:df:67:c9:1c:b6:97:53:
05:07:60:a8:d7:00:e0:95:fc:c3:30:54:ec:a0:b8:
6a:fb:c5:40:45:b1:9d:f5:b1:e7:fe:7d:bc:b2:f4:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D1:6E:58:5A:D5:07:97:E3:F4:9E:A7:CC:D4:C5:96:38:62:EF:DA
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/gdFuWFrVB5fj9J6nzNTFljhi79o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.68.0/24
IPv6:
2a0f:4900::/44
Signature Algorithm: sha256WithRSAEncryption
12:67:30:c8:b0:6f:0e:08:ba:ee:21:47:0a:ae:f6:93:ca:10:
cc:5f:a5:ae:f3:94:78:e1:b0:1a:62:42:c4:39:98:f1:f2:e6:
5b:51:ac:7c:0d:63:7b:76:e2:ec:62:f6:56:7a:bb:ca:b8:b3:
f7:5e:8d:5c:2c:40:cf:de:33:38:93:a2:68:0c:03:ea:0d:e8:
85:75:2a:40:00:1a:bb:65:05:29:1d:df:c8:d4:48:be:67:cb:
b3:3f:3f:22:1f:ca:24:1a:86:62:c7:3b:55:d8:6b:d6:83:09:
9e:eb:4a:64:a6:09:c0:0f:70:4c:5b:84:8a:3f:36:6d:4b:62:
1d:bb:ec:72:c4:14:40:e6:a6:1b:f1:ea:a1:4f:95:6e:71:2f:
a6:2a:9e:f2:2b:23:53:93:54:b1:35:8f:10:04:ed:f9:1d:ed:
0c:04:b3:bd:6b:c4:40:52:07:ea:0d:63:be:76:77:95:9b:3e:
d9:f3:05:35:69:7e:2f:d6:51:fb:b2:a5:a5:ca:dd:6f:3e:22:
dd:ce:c1:1b:00:5c:7c:4b:63:8f:88:80:9c:c2:18:95:40:21:
00:95:35:2a:f4:82:f2:c7:a9:c2:a7:96:c4:a6:b3:d3:6b:8b:
51:cd:9d:d5:55:63:b1:eb:5b:a9:59:90:05:d9:98:dc:91:35:
47:90:ad:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:14 2024 by rpki-client on console-ams.rpki-client.org