Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gaGzoBmSMpr5Ck0GkgHZwX2pPGk.roa
File: gaGzoBmSMpr5Ck0GkgHZwX2pPGk.roa (raw, json)
Hash identifier: 2uQ7dHmc8G3b6KOZ3kqZLca+GlxOYQsqK4/3Ses5gWo=
Subject key identifier: 81:A1:B3:A0:19:92:32:9A:F9:0A:4D:06:92:01:D9:C1:7D:A9:3C:69
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0186372443EDBAC538666767DB3A54BB5628
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gaGzoBmSMpr5Ck0GkgHZwX2pPGk.roa
Signing time: Thu 09 Feb 2023 17:06:08 +0000
ROA not before: Thu 09 Feb 2023 17:06:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.131.184.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:37:24:43:ed:ba:c5:38:66:67:67:db:3a:54:bb:56:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 9 17:06:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81a1b3a01992329af90a4d069201d9c17da93c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:f5:bb:bc:8f:4b:12:9f:30:10:81:5f:88:
84:12:a8:4c:fe:0e:d9:92:99:38:f6:28:2a:80:4a:
6a:89:e3:98:81:d5:9a:ce:bb:2d:4b:ca:eb:b4:8c:
fa:64:9a:ae:4c:c7:98:b0:27:ee:2a:cb:8e:82:f9:
bb:9f:32:18:ba:81:a4:ea:26:c6:5f:09:c2:69:49:
7d:47:8f:15:9b:a1:fb:ca:9a:6a:e0:0f:b1:70:1f:
f8:f5:8a:70:2f:f8:3c:b2:12:02:69:12:df:31:24:
41:13:19:86:53:af:d8:cb:2d:42:4a:21:3a:e7:c6:
93:34:8e:2d:c1:aa:19:a3:af:b2:e6:31:d5:1f:90:
19:04:86:3f:80:2e:a4:42:1b:de:46:30:8f:33:23:
3b:f2:5f:71:56:e2:44:97:fc:88:e6:78:c2:86:32:
b9:b6:08:e4:df:e0:00:24:c3:0f:d2:60:43:48:fe:
e2:16:5f:01:e7:b3:93:5d:6f:82:bf:5b:a7:f8:ee:
b0:96:0a:11:04:83:ee:d7:e8:91:9d:a5:ab:dc:f3:
f2:b0:54:81:47:f9:ec:06:11:ba:14:f0:06:ec:47:
e5:84:4b:34:05:ec:25:24:e8:8f:8e:0d:18:53:f5:
8f:b0:99:37:18:e7:b9:f6:f7:5d:95:6c:82:5e:a4:
cc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A1:B3:A0:19:92:32:9A:F9:0A:4D:06:92:01:D9:C1:7D:A9:3C:69
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gaGzoBmSMpr5Ck0GkgHZwX2pPGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.184.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:40:d9:b1:16:7d:cc:af:55:cc:f1:7f:06:f7:20:ed:a6:b2:
d1:f3:3e:7a:44:ae:c5:9c:05:c5:3f:ab:01:c8:02:e9:3a:c4:
39:51:ac:74:9a:c5:76:98:f9:c2:4e:b8:7f:3e:4d:18:6e:be:
d8:ea:ba:5b:b4:60:29:a5:7f:98:8e:c8:50:35:61:b9:58:85:
c8:e6:cf:39:50:4e:ae:a4:29:55:af:db:5e:4f:d2:1c:ef:e5:
ed:0e:55:0f:76:49:8d:a3:2c:e5:7f:28:f9:94:47:d5:23:9f:
bb:e1:e0:83:fb:69:b3:41:ee:42:9e:59:5d:66:d6:f0:63:f5:
b0:c2:1e:ce:ad:20:08:cd:66:7c:7a:5e:82:24:91:b6:90:f9:
d7:70:52:7a:57:c6:51:34:ef:c6:39:75:08:95:10:f7:a8:1b:
c9:f3:cc:4e:73:34:f6:79:00:43:bd:9e:e7:8c:83:c9:92:d8:
f7:4f:97:2a:69:c5:4d:c3:b9:b8:c7:32:95:b0:1f:df:f8:8c:
9c:d9:1c:89:72:d7:52:1d:2a:bc:f4:c7:50:6c:67:68:99:55:
56:31:57:12:f7:a2:fc:69:a3:d7:db:84:33:3a:c6:bc:2b:aa:
b5:16:e6:5b:a1:af:ad:99:98:2b:d4:2a:2e:80:f4:ef:20:43:
50:f8:71:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:18 2023 by rpki-client on console-fra.rpki-client.org