Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/g772wiLM_4-JuEx0_jTR_SaZptY.roa
File: g772wiLM_4-JuEx0_jTR_SaZptY.roa (raw, json)
Hash identifier: As1N82Ci7JOud71NpoJcLAlLRrR7xurP/8txRmLjN0M=
Subject key identifier: 83:BE:F6:C2:22:CC:FF:8F:89:B8:4C:74:FE:34:D1:FD:26:99:A6:D6
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 018B50BA1CADBC013519338A096225AC461D
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/g772wiLM_4-JuEx0_jTR_SaZptY.roa
Signing time: Sat 21 Oct 2023 05:34:16 +0000
ROA not before: Sat 21 Oct 2023 05:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31122
IP address blocks: 45.94.112.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:50:ba:1c:ad:bc:01:35:19:33:8a:09:62:25:ac:46:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Oct 21 05:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83bef6c222ccff8f89b84c74fe34d1fd2699a6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:61:16:37:28:f9:8d:14:a7:88:13:47:2d:
e4:f1:59:c5:90:79:46:dc:89:5b:3b:81:8b:8a:e5:
3e:37:01:f8:18:2f:1f:35:ba:98:24:12:0f:fc:22:
e1:e1:c2:e3:b9:f9:ad:a6:27:50:d0:cc:a0:52:9c:
39:37:b6:65:14:74:6d:ec:f9:68:9e:93:c1:6b:05:
eb:a2:e1:f5:0a:39:14:3c:55:3e:ce:ec:80:b6:c3:
13:f2:53:65:6b:c7:7d:73:31:eb:74:8e:c8:c3:fd:
42:99:0d:84:e9:db:97:b5:0a:34:8f:f2:08:21:ba:
51:32:91:87:7a:40:4c:93:ad:d4:5b:44:50:92:db:
21:6c:28:96:e2:97:80:bc:38:d7:82:a7:27:81:7a:
3e:08:d8:f7:79:c2:ef:c9:86:e9:29:4e:6d:c4:7c:
c4:ee:8a:3f:53:ff:a0:52:4b:88:a0:e6:d6:91:86:
20:90:0b:2f:db:42:79:86:23:50:f3:5b:61:ff:95:
6f:f4:9d:f8:7f:0a:53:2d:5c:7e:c8:87:24:5e:eb:
68:18:47:c9:ff:51:87:fb:73:09:6c:be:a7:66:7c:
4e:eb:12:5b:ac:33:10:dc:06:4f:84:12:e7:97:3a:
a4:d1:d3:df:f1:9a:30:e0:2e:f8:4e:76:f0:29:90:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BE:F6:C2:22:CC:FF:8F:89:B8:4C:74:FE:34:D1:FD:26:99:A6:D6
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/g772wiLM_4-JuEx0_jTR_SaZptY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.112.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:bd:71:85:19:63:a6:0c:09:9f:0b:3c:ae:1f:16:c6:bb:09:
75:f0:27:e4:01:84:9a:e2:f7:eb:6b:38:94:b0:e2:e4:1c:cc:
84:4b:2d:93:ee:46:da:fc:c0:a9:2c:26:b9:05:63:6a:1d:ff:
2b:81:9a:72:10:8b:61:ee:70:7f:f3:32:8d:56:e6:2a:88:85:
26:41:0f:29:92:8a:90:61:cb:f6:a0:2a:c4:fe:0d:a3:23:e2:
f7:75:13:a3:af:53:bd:00:aa:e9:14:0a:fe:be:dc:bf:4e:05:
ba:d1:e5:5a:57:89:19:4d:ac:0d:77:30:62:f4:fa:87:a6:fe:
72:be:c0:51:2d:96:15:4e:94:dd:c0:97:9e:24:2a:53:eb:6a:
e0:ec:4b:00:71:08:3f:11:0a:f2:5d:14:09:9e:5f:eb:97:22:
5e:f2:64:43:d7:a0:e2:bf:eb:ae:27:f4:98:71:ab:3c:1e:52:
f8:25:11:3a:fa:54:21:55:d7:73:f3:ed:7f:15:16:7e:96:92:
b6:6c:73:18:d3:6d:4c:fb:78:37:9e:76:a5:ca:38:5c:b2:f1:
ac:66:20:db:15:27:6d:2a:65:54:46:42:3c:24:21:66:ff:55:
07:11:9c:2b:c3:b7:30:12:3a:a3:49:14:f2:6b:9b:03:1e:d4:
0b:1b:74:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:28 2024 by rpki-client on console-ams.rpki-client.org