Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/g374C0_LgGKTynjwq1YqbTwQWy4.roa
File: g374C0_LgGKTynjwq1YqbTwQWy4.roa (raw, json)
Hash identifier: vFCLsw3r2HOmbHx72mevH0m6FPry03vZAYUKC1eX4+s=
Subject key identifier: 83:7E:F8:0B:4F:CB:80:62:93:CA:78:F0:AB:56:2A:6D:3C:10:5B:2E
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018C8DCF3DD9973150FE463683A4E6831110
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/g374C0_LgGKTynjwq1YqbTwQWy4.roa
Signing time: Thu 21 Dec 2023 19:16:58 +0000
ROA not before: Thu 21 Dec 2023 19:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 45.15.209.0/24 maxlen: 24
45.86.190.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8d:cf:3d:d9:97:31:50:fe:46:36:83:a4:e6:83:11:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Dec 21 19:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=837ef80b4fcb806293ca78f0ab562a6d3c105b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1c:0a:e5:1b:9b:fc:df:b0:9c:0f:7b:07:3a:
f7:23:d7:20:8f:03:6a:32:39:61:44:b1:b1:89:0d:
ee:cf:c4:c1:91:02:fa:b2:09:12:ad:83:e9:21:66:
38:71:3b:b2:60:d1:d8:c1:39:51:6a:87:3b:6a:9f:
a6:cd:7f:cf:7b:18:fb:f4:e6:ac:bc:13:6c:68:6e:
6b:e0:59:9d:e2:a4:ab:27:93:bc:ae:da:fb:bb:49:
19:5c:4a:a0:84:d5:9c:28:60:88:3e:33:e1:9e:e5:
fa:83:b9:c5:7e:74:e7:e2:3d:ca:c3:05:84:cf:68:
e8:73:a4:8a:bd:6f:e4:a5:58:96:ec:5a:e2:f9:53:
ab:41:26:9d:c9:37:c5:76:0e:00:cc:b8:cf:20:a9:
38:7c:78:ae:db:58:74:63:92:8b:7f:9e:81:ac:97:
02:bd:98:5f:73:4c:00:e6:87:e6:24:8d:0e:55:a0:
c2:ea:47:26:0b:a0:b6:cd:2b:6f:04:1c:71:0a:51:
84:2d:14:25:25:e9:20:13:29:1b:39:ef:4e:7c:3e:
ac:1b:29:d9:e4:eb:4b:4d:19:f3:63:c5:7d:38:02:
7e:29:08:6b:76:37:df:6a:37:05:e6:5f:22:9a:33:
ff:85:10:bd:57:91:37:7c:94:e4:fd:e9:59:de:ad:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7E:F8:0B:4F:CB:80:62:93:CA:78:F0:AB:56:2A:6D:3C:10:5B:2E
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/g374C0_LgGKTynjwq1YqbTwQWy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.209.0/24
45.86.190.0/23
Signature Algorithm: sha256WithRSAEncryption
37:df:be:df:6a:99:69:54:4f:69:b7:78:6c:45:b9:47:d5:71:
59:f4:cc:26:a8:e1:b2:37:25:16:b7:cd:75:49:9e:37:99:8d:
f8:1c:23:81:78:fe:58:8a:02:f1:a7:08:3d:59:5b:5e:38:74:
58:8d:ec:c0:eb:44:98:64:43:18:a4:4e:42:8b:56:14:a8:4f:
90:05:79:e3:73:3f:50:e5:a2:82:5a:2a:56:95:4c:80:17:69:
0a:ee:92:93:a8:25:88:f0:34:39:e0:06:84:68:e8:5b:69:e3:
df:3a:c7:85:0c:ee:cf:50:c1:aa:e0:fc:79:a0:75:f7:41:87:
1f:49:b1:34:c8:67:65:7a:e5:d8:25:70:95:a6:0c:b2:f6:14:
00:9d:3d:9f:e2:93:1c:62:fc:23:9d:6a:2b:88:19:2b:62:97:
b6:6f:f5:a6:8c:41:ab:47:b6:d8:12:ff:61:2a:01:85:46:29:
58:66:f7:c8:5e:52:f4:51:aa:b7:f5:2d:d2:60:17:f5:65:62:
b5:65:fa:83:27:0b:52:91:5e:4b:9e:3a:c5:64:93:41:09:d7:
3c:d4:8d:7e:d2:12:75:11:a3:65:84:c3:5e:b7:76:56:78:04:
5d:29:0c:d1:73:a5:47:e5:18:3f:65:11:74:a4:b5:f1:3b:21:
3b:57:a4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:55 2024 by rpki-client on console-fra.rpki-client.org