Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/GclxDbXdqzia_0pDmEN9I_rB0SU.roa
File: GclxDbXdqzia_0pDmEN9I_rB0SU.roa (raw, json)
Hash identifier: +vB7jDnM8xeiOF6HOBINwRQP4t+0WfncerflKQ8RXs8=
Subject key identifier: 19:C9:71:0D:B5:DD:AB:38:9A:FF:4A:43:98:43:7D:23:FA:C1:D1:25
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01856CAF056756FB018A57149FA3FFBD37B0
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/GclxDbXdqzia_0pDmEN9I_rB0SU.roa
Signing time: Sun 01 Jan 2023 09:34:47 +0000
ROA not before: Sun 01 Jan 2023 09:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 45.84.240.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:05:67:56:fb:01:8a:57:14:9f:a3:ff:bd:37:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 1 09:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19c9710db5ddab389aff4a4398437d23fac1d125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:4e:74:57:b3:4b:16:4f:a2:2a:e5:08:62:
8e:6b:ee:51:80:a9:49:2b:7a:f4:13:f6:65:65:4f:
ed:50:ac:22:0e:b8:ec:2d:25:22:69:ae:7a:15:3a:
9a:8e:32:9a:65:40:84:1e:ea:76:77:c1:77:d2:a0:
83:95:c2:7f:2c:f8:e1:85:d9:e3:15:2e:69:a4:01:
bf:78:fc:42:db:39:23:94:9d:23:7a:9a:40:2a:4c:
fe:b0:d0:2a:6d:1c:78:1f:b3:84:b6:b2:4c:38:4c:
a8:1c:52:42:80:b8:59:02:a5:75:25:2e:c3:6a:bb:
e6:df:f0:e7:fa:a0:ad:62:66:fd:bb:cd:77:c0:d4:
ea:0f:f9:8c:ee:62:fd:f4:78:fa:91:27:23:d0:fe:
36:88:02:ec:41:b0:90:c1:cb:f4:32:bd:fa:c8:88:
a5:7e:31:e8:c6:95:8c:f5:e5:cc:bf:81:a3:ed:44:
b5:0b:98:7a:9b:86:a8:8a:65:78:76:53:08:ff:ec:
cc:12:79:78:c0:72:5f:0a:9a:3e:fc:eb:0a:c6:b3:
74:c3:45:6f:21:b6:78:d5:88:d1:ca:38:24:33:19:
4a:eb:76:7d:ec:78:08:1c:2c:a3:6f:96:a3:2b:f7:
16:f9:59:b6:ab:fb:e0:1c:2f:ba:25:b7:84:2c:65:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C9:71:0D:B5:DD:AB:38:9A:FF:4A:43:98:43:7D:23:FA:C1:D1:25
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/GclxDbXdqzia_0pDmEN9I_rB0SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.240.0/23
Signature Algorithm: sha256WithRSAEncryption
31:26:8b:d4:93:89:a3:63:b9:13:73:f8:a2:9f:ce:8c:a3:8d:
a2:e5:72:c0:08:e1:63:06:1d:04:4d:6d:b8:75:63:a4:a4:1a:
0b:2b:a7:a5:56:e7:09:0c:80:bf:b6:2e:ba:e2:ff:79:c0:18:
4b:84:f8:89:66:c0:9f:2f:a2:39:b4:0e:08:17:1b:77:95:33:
f6:a2:1a:8e:a5:28:e3:0a:45:df:62:3f:99:1e:85:a1:f6:9e:
61:31:ae:ed:66:0b:bb:71:58:1a:fe:82:f3:8b:a1:a4:1e:2a:
27:3a:af:a1:e4:f8:d4:0c:de:53:c9:a9:5a:91:d3:6f:bd:59:
ad:bb:54:ad:9b:9e:59:cb:57:58:c9:48:e9:50:1d:e8:a9:0d:
45:86:2d:33:93:2f:5d:d5:92:d9:7c:85:33:fa:78:8e:e4:1f:
d6:0b:47:2a:ac:ff:11:22:97:1a:cc:39:81:85:73:57:7d:70:
d9:19:11:f1:1d:82:e5:53:a7:21:be:20:44:c4:9e:6d:75:15:
f7:54:59:28:53:2a:a4:6b:27:2c:48:48:5b:ee:3c:32:1c:7f:
77:04:19:bf:7b:9d:80:cd:55:3f:e6:2d:f9:7d:1a:65:cd:32:
d8:e8:e7:d0:4b:f7:cc:b6:10:9c:8b:8f:01:2a:ed:cf:83:97:
70:b4:b3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:36 2024 by rpki-client on console-ams.rpki-client.org