Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/gnLW55HCOGscNriusqxkmzbTtXQ.roa
File: gnLW55HCOGscNriusqxkmzbTtXQ.roa (raw, json)
Hash identifier: hCsxH9tduOgbka26P4goALDEd6mm1+cM46I/pcz/2uk=
Subject key identifier: 82:72:D6:E7:91:C2:38:6B:1C:36:B8:AE:B2:AC:64:9B:36:D3:B5:74
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0185A85A8C399B18BEFF0CEAD68CFB959A17
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/gnLW55HCOGscNriusqxkmzbTtXQ.roa
Signing time: Thu 12 Jan 2023 23:39:44 +0000
ROA not before: Thu 12 Jan 2023 23:39:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206757
IP address blocks: 5.154.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a8:5a:8c:39:9b:18:be:ff:0c:ea:d6:8c:fb:95:9a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 12 23:39:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8272d6e791c2386b1c36b8aeb2ac649b36d3b574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:c2:93:b9:04:19:a0:cc:70:50:20:49:d4:
62:ee:88:86:f3:65:5d:80:45:fa:12:8d:d1:f2:93:
de:82:88:d3:33:b7:ee:79:a4:a2:c7:fa:38:35:a8:
8c:05:a4:24:69:c5:59:9b:fd:3d:c3:27:78:6b:95:
7a:bb:9f:71:53:c1:ca:ae:64:9c:1a:fa:a8:3c:62:
d1:dc:72:11:20:5c:ea:41:62:ce:88:cb:ac:ae:9f:
4b:56:7f:29:fe:0c:4d:0a:19:5e:36:00:f8:ac:d0:
ff:93:d7:1b:21:6b:80:da:54:32:eb:58:30:87:8d:
e9:ae:8b:9f:a5:5e:1f:2e:16:ac:da:b2:cf:98:27:
6d:b1:13:77:67:f3:20:0f:59:b9:8e:b7:8c:d1:a8:
9c:14:85:a2:17:d0:a0:1c:07:dc:c6:f8:db:c7:ed:
e2:77:5a:17:bd:4a:47:d4:1c:d4:75:87:04:a9:30:
41:a2:de:e0:e9:f4:65:02:3a:6b:ab:6d:7e:a7:70:
d2:d1:83:58:65:2b:05:b5:62:58:10:5a:40:05:0f:
20:b8:2b:9a:bf:63:b2:5c:c9:2f:ca:f8:bc:26:c9:
1d:e3:47:05:d9:d5:64:52:07:d3:26:2a:8e:7d:a0:
85:58:e1:86:d7:16:20:cd:62:6a:d5:fb:92:b0:91:
f3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:72:D6:E7:91:C2:38:6B:1C:36:B8:AE:B2:AC:64:9B:36:D3:B5:74
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/gnLW55HCOGscNriusqxkmzbTtXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.37.0/24
Signature Algorithm: sha256WithRSAEncryption
50:8d:88:31:b2:96:b2:4f:3f:0d:8a:f1:2e:8c:16:d5:a0:a7:
34:3f:1a:bb:98:ce:13:5c:6a:a0:fe:be:01:10:49:07:1f:21:
cb:96:03:4c:16:c0:c5:68:46:bc:a9:7f:d4:38:b5:08:a0:bd:
0d:32:7c:6f:6d:7d:24:ea:0b:9b:68:3c:d5:06:28:e8:13:a6:
18:29:92:cb:11:15:49:af:d0:b3:5a:59:7e:33:f0:ee:0d:ec:
5c:ac:a7:6d:6e:5e:bf:51:78:88:1a:31:73:73:01:6b:69:73:
86:d9:4d:a6:dc:b7:dc:07:dd:63:33:16:54:ef:4c:6b:a0:65:
26:ed:ec:c8:04:5f:54:a1:ae:46:2e:b5:72:51:e3:06:25:91:
18:e6:c7:d6:69:2c:1e:85:09:2e:b0:e0:46:4d:e4:54:ab:1d:
76:e0:09:3b:20:1e:2a:fb:61:3c:88:b9:01:75:c8:58:3e:77:
a1:fb:65:53:f6:bc:c0:d8:7d:30:b3:84:5a:d0:ec:f9:e1:c6:
1b:d7:1c:d4:96:e0:69:67:ec:f9:dc:84:9b:61:1f:29:5b:70:
38:22:85:b5:85:a3:15:20:75:2f:c3:dc:45:29:19:7d:a5:24:
b4:d0:c5:66:fd:d9:d8:18:df:d7:77:56:d1:13:3b:18:3a:33:
11:e4:ab:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:02 2023 by rpki-client on console-ams.rpki-client.org