Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/G58Bgeg_zvTO8Mc8q32zIzZUrWA.roa
File: G58Bgeg_zvTO8Mc8q32zIzZUrWA.roa (raw, json)
Hash identifier: B/Al2IDgQ1sXydx0mObcJmNMgDI3Zh+IbHaMk4E7JO0=
Subject key identifier: 1B:9F:01:81:E8:3F:CE:F4:CE:F0:C7:3C:AB:7D:B3:23:36:54:AD:60
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018C39F96521F29B9729EC30C9D0D59B4338
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/G58Bgeg_zvTO8Mc8q32zIzZUrWA.roa
Signing time: Tue 05 Dec 2023 12:34:54 +0000
ROA not before: Tue 05 Dec 2023 12:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 45.134.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:f9:65:21:f2:9b:97:29:ec:30:c9:d0:d5:9b:43:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Dec 5 12:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b9f0181e83fcef4cef0c73cab7db3233654ad60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:92:b8:db:62:f2:3c:4f:53:50:ba:45:7d:
34:aa:e1:c2:ac:fe:22:5d:b4:d2:fd:93:64:df:3c:
c8:e3:cd:54:bb:48:c9:81:55:69:81:f7:a7:30:2a:
43:88:5f:f0:c6:97:33:b4:90:da:20:fe:e8:0c:84:
79:ec:6a:2a:ac:05:a9:99:d5:81:c0:f8:0c:a0:b2:
97:3e:ea:ef:7f:e2:72:a0:ee:cc:8b:ce:61:f5:b3:
81:64:f3:db:b1:07:ca:d8:13:cf:4f:c8:54:a7:b1:
59:d1:b9:9d:e4:77:06:bf:85:fc:f0:aa:d7:7b:69:
20:15:af:e3:8b:f5:57:1e:13:0d:f0:0a:5b:23:41:
3d:49:54:6c:b7:a8:f0:99:24:79:f6:29:ac:77:d7:
28:c3:28:6e:97:4e:a5:68:26:eb:cf:ad:a2:26:e0:
27:1e:3f:56:17:d6:49:37:e4:69:6f:ef:f7:13:ac:
04:8a:88:78:8b:5a:ba:53:6c:bd:24:15:84:59:70:
14:8d:68:74:6a:fb:6a:9e:cc:df:b4:06:92:36:e3:
fa:8f:51:3b:b7:04:21:e6:67:27:29:67:4d:c4:8a:
fc:4e:5a:ce:a6:eb:3a:48:5d:59:2d:ed:eb:ea:ad:
ea:86:76:62:f8:20:8f:f9:ad:e9:f6:77:8e:3b:86:
8a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9F:01:81:E8:3F:CE:F4:CE:F0:C7:3C:AB:7D:B3:23:36:54:AD:60
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/G58Bgeg_zvTO8Mc8q32zIzZUrWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d6:5d:98:32:3c:fa:1b:aa:83:d7:33:b1:bf:d2:ca:d6:44:
6e:92:57:18:7f:53:8b:1e:a3:5a:69:aa:99:e7:59:33:bb:63:
f6:42:43:9e:fb:7c:05:5f:0e:5b:00:7f:30:ff:c3:84:e9:6b:
cb:9a:18:f3:8e:3c:b8:7a:1a:23:53:ce:61:89:39:0d:eb:0d:
00:bc:9b:ab:d7:ab:1b:a2:f6:a0:89:43:5d:13:a9:1a:28:45:
5d:2f:eb:24:f5:cb:38:a3:92:03:8c:6f:c4:8b:d7:02:02:da:
27:79:0a:7c:6f:84:02:26:ec:4c:34:56:f8:a7:f1:05:49:ed:
4b:19:75:b8:fb:39:99:99:66:8f:ae:9b:9c:ff:91:84:3f:39:
bf:45:d1:18:e9:fe:8e:00:53:39:ad:15:b6:07:40:e8:f2:14:
20:27:85:73:c9:fa:84:32:22:36:dc:52:15:99:73:4f:5a:43:
43:9f:c7:6c:f6:b1:44:70:f8:b2:5e:61:50:0d:55:f2:1c:6f:
75:ad:4b:b8:bc:30:70:c9:24:74:43:4a:b4:5d:96:1d:9c:a6:
50:7f:8c:76:9d:3a:83:b0:49:19:db:1a:c2:af:c9:2d:32:0f:
d7:39:13:f2:09:14:fd:2c:e6:a5:59:0f:b9:7a:d8:61:42:55:
e3:c4:ac:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 09:22:38 2023 by rpki-client on console-fra.rpki-client.org