Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/gWgZqjm_dj6eZKyioODMK4e6484.roa
File: gWgZqjm_dj6eZKyioODMK4e6484.roa (raw, json)
Hash identifier: Tyuu7WiknbMSd04mNgEgfwjSPiNrLl5ebj92bc7ADKg=
Subject key identifier: 81:68:19:AA:39:BF:76:3E:9E:64:AC:A2:A0:E0:CC:2B:87:BA:E3:CE
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018CC600EC398259575D80A798169F30F0C3
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/gWgZqjm_dj6eZKyioODMK4e6484.roa
Signing time: Mon 01 Jan 2024 17:09:58 +0000
ROA not before: Mon 01 Jan 2024 17:09:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.209.140.0/22 maxlen: 24
45.65.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:00:ec:39:82:59:57:5d:80:a7:98:16:9f:30:f0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 17:09:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=816819aa39bf763e9e64aca2a0e0cc2b87bae3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:af:61:39:af:3d:68:04:74:2d:68:49:f7:50:
a8:1a:e0:63:71:71:45:04:1b:fd:8a:6a:43:e0:68:
6b:b6:76:a5:b4:49:ef:84:9c:2c:70:e3:71:a8:c0:
01:02:15:b9:7b:8d:c9:1c:39:ae:0c:64:32:62:01:
ca:7f:a4:46:e3:98:d5:3a:b3:16:ee:0f:c1:74:75:
06:73:e0:ab:82:f4:f6:75:27:85:37:7a:56:40:bb:
90:35:a3:c9:bb:8a:12:4f:b5:d5:23:b1:5a:ac:15:
85:9f:99:88:3d:31:97:29:7b:0e:1d:41:09:a0:c0:
87:81:5d:c5:5f:df:8d:2c:62:2b:34:15:06:08:43:
e0:a7:19:85:85:d0:e8:2a:88:cd:01:47:6b:ef:65:
b1:33:0f:9b:2e:f5:14:e1:f9:8e:35:04:6c:f5:d7:
0a:a8:7f:a9:1f:eb:a0:69:ac:14:c9:e9:5f:63:cd:
bd:c7:93:86:1a:08:df:b7:a6:98:ab:4b:8b:9f:69:
ec:af:d1:a8:57:cc:e8:36:00:10:45:48:8d:5b:98:
d1:7a:e6:05:05:a5:b8:4d:31:74:5c:e0:87:b2:2b:
b4:fb:f1:eb:86:90:e9:af:e7:03:b6:ee:4d:6a:1c:
ef:11:6b:79:4a:62:51:af:09:64:11:34:78:6a:88:
4f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:68:19:AA:39:BF:76:3E:9E:64:AC:A2:A0:E0:CC:2B:87:BA:E3:CE
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/gWgZqjm_dj6eZKyioODMK4e6484.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0/24
188.209.140.0/22
Signature Algorithm: sha256WithRSAEncryption
63:90:d2:be:27:36:3e:fa:17:75:48:45:85:11:97:6e:2f:dd:
65:28:b3:2d:89:e4:a2:56:ea:8d:35:d4:55:ed:99:24:9b:f7:
cb:c3:6e:6e:ba:b1:42:99:16:01:76:d8:fc:0b:b9:39:ab:ea:
37:27:eb:e5:99:62:56:99:12:0b:e4:46:64:db:9e:86:9d:6d:
b3:0e:00:f8:d8:df:02:f6:d2:e8:6f:ef:dc:2d:aa:61:be:60:
a8:5a:12:39:58:49:61:c6:74:ba:8d:f0:29:13:9c:02:f5:24:
04:0f:66:0c:5b:30:ee:88:ed:22:46:74:81:b8:77:71:41:7b:
08:44:2b:dd:8c:30:d3:90:a3:80:57:27:6a:c8:5b:a5:50:24:
67:4e:6a:cf:62:40:f7:ce:16:2a:5a:3a:ea:89:79:39:78:a7:
3f:45:7b:e3:96:35:d3:07:72:6a:dc:2d:33:ed:bf:b3:a6:ab:
4a:0f:16:c6:99:74:b8:53:84:42:df:3a:ff:ce:d8:40:85:fd:
b5:ef:c8:32:ad:94:bb:e3:3b:14:18:0c:42:74:16:4c:13:ef:
8d:93:cc:71:7e:83:dc:ce:28:3c:ef:27:b1:7d:b4:cc:f5:ce:
bb:ba:2c:35:a3:52:b2:b7:45:da:60:16:93:d6:f3:bb:75:2c:
9e:e0:c1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 23:53:05 2024 by rpki-client on console-ams.rpki-client.org