Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/GbbluwSDBh347hZtKhVg2rQFrMI.roa
File: GbbluwSDBh347hZtKhVg2rQFrMI.roa (raw, json)
Hash identifier: B2/zUQXSc04VFnUvI0qKzsdCKt343OI7Sx/n7NdrmN0=
Subject key identifier: 19:B6:E5:BB:04:83:06:1D:F8:EE:16:6D:2A:15:60:DA:B4:05:AC:C2
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01856EAA2B17F3D391AB2A5618D6DAD99658
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/GbbluwSDBh347hZtKhVg2rQFrMI.roa
Signing time: Sun 01 Jan 2023 18:48:44 +0000
ROA not before: Sun 01 Jan 2023 18:48:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 267950
IP address blocks: 45.139.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:aa:2b:17:f3:d3:91:ab:2a:56:18:d6:da:d9:96:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 1 18:48:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19b6e5bb0483061df8ee166d2a1560dab405acc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bc:f0:f2:92:29:93:e1:16:b2:a1:a3:fa:e3:
3a:94:ce:cf:76:e2:f6:83:18:9b:77:92:98:63:9b:
3c:06:4e:91:b6:73:82:4c:ce:34:58:d5:ad:e4:f6:
09:33:93:72:52:df:1e:7e:2f:5a:b6:c1:3a:e8:a6:
44:28:ff:db:13:65:2f:7f:a2:91:48:69:03:ca:1e:
02:5d:45:77:26:76:af:a0:72:f6:56:56:ed:9a:9b:
17:e8:33:b5:5c:3a:dd:60:37:d6:8a:20:a5:bf:b4:
06:bb:28:da:60:0a:16:02:8b:2e:1e:83:bc:c3:32:
c5:3f:6f:1d:e7:cd:95:08:e1:43:c5:5f:48:f0:e4:
ca:83:7c:46:cc:d8:ee:3a:58:49:c5:9c:0e:43:dd:
e8:67:29:0f:17:56:6c:b6:04:5e:15:83:1a:56:2a:
b9:53:49:21:4a:b7:4c:89:05:ca:eb:6b:e5:96:5a:
79:bf:e2:25:50:81:27:e2:cf:98:cc:66:03:77:73:
fd:03:53:d1:69:f5:ba:83:95:30:a6:35:85:91:8f:
b1:de:c0:17:f9:6e:a6:40:d5:9e:cd:41:a8:6b:b7:
38:06:a5:19:06:04:1a:44:b1:70:e1:7c:1b:55:42:
2e:fc:1c:08:e8:41:2f:37:5e:ed:42:22:a9:93:d6:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B6:E5:BB:04:83:06:1D:F8:EE:16:6D:2A:15:60:DA:B4:05:AC:C2
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/GbbluwSDBh347hZtKhVg2rQFrMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.197.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:bc:40:dd:b0:fb:2d:f8:cc:9a:45:b7:26:75:c0:ec:22:ba:
00:2a:29:b6:04:d5:cb:a6:1b:22:e5:c7:83:6b:1d:a7:73:ea:
4f:53:d8:bb:18:22:00:50:8e:75:61:fe:84:d5:7d:3a:66:63:
dd:d8:49:a6:59:2b:78:fe:2b:dd:df:3c:74:31:a4:dd:56:74:
d1:5a:c2:30:1c:f4:40:ce:57:bc:99:cd:16:67:68:a6:6a:8e:
d3:07:eb:df:14:c9:e6:8c:52:1c:7a:24:59:8d:f2:39:ea:aa:
6b:42:f2:67:c6:1c:d9:73:95:e7:0b:d8:fd:5d:5e:d9:00:91:
7b:65:8d:50:2f:73:ca:88:26:15:5f:ee:ff:d3:4e:7b:ad:b7:
df:c2:f9:ac:87:5e:02:19:b5:91:81:b9:5d:a1:83:a4:26:33:
47:7f:23:f8:a9:f4:08:06:0d:81:db:9d:38:89:bd:11:60:c0:
e7:fe:2e:01:60:31:33:ae:17:44:f7:41:5f:50:2d:17:57:ba:
2d:31:69:f5:f7:82:69:0f:0d:fd:d0:59:5b:b6:71:20:e3:2d:
5d:f0:37:f4:71:37:3c:52:b2:4a:88:06:d4:c5:e6:f9:72:c0:
5c:7d:35:23:1f:61:c1:b8:48:61:9b:6a:af:4c:e3:d0:58:32:
36:5d:f4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:03 2024 by rpki-client on console-fra.rpki-client.org