Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/gXOOE4cm6EyCjZIgh5NNCuxHnHc.roa
File: gXOOE4cm6EyCjZIgh5NNCuxHnHc.roa (raw, json)
Hash identifier: 12bmtyYtxDp5AaGaMn7zcj8DKfou+Xov8pxrtNJ8KeY=
Subject key identifier: 81:73:8E:13:87:26:E8:4C:82:8D:92:20:87:93:4D:0A:EC:47:9C:77
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018571956AB8452320692AA873A8614ADE3B
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/gXOOE4cm6EyCjZIgh5NNCuxHnHc.roa
Signing time: Mon 02 Jan 2023 08:24:55 +0000
ROA not before: Mon 02 Jan 2023 08:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21286
IP address blocks: 145.15.96.0/22 maxlen: 22
145.15.92.0/22 maxlen: 22
145.15.0.0/22 maxlen: 22
145.15.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:6a:b8:45:23:20:69:2a:a8:73:a8:61:4a:de:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 08:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81738e138726e84c828d922087934d0aec479c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:b3:b3:8a:81:6e:43:20:f1:07:46:a9:b5:
3e:f5:29:b4:7f:e5:62:60:3b:b7:38:fa:17:01:0e:
89:ef:4c:97:b3:dd:45:37:8e:c7:c5:e0:2d:a8:68:
5b:41:b0:88:b5:f4:dd:c2:96:2e:e6:44:db:6b:7d:
57:68:7c:07:5a:50:86:6f:9f:7e:9f:2c:d6:38:81:
ee:56:bd:70:ad:4a:c7:3e:87:e0:fe:25:e6:00:3e:
cb:62:bc:5c:9c:c1:c2:f2:84:76:de:05:ca:0f:c5:
db:85:74:8b:1d:ef:ce:c7:2d:c9:4c:e6:a7:63:d4:
66:08:f0:70:51:5a:b7:4a:2f:98:dd:5d:fa:a4:57:
b1:bb:25:5f:2c:ab:ef:51:db:88:61:a4:92:2f:6e:
64:a4:9e:4f:e1:c3:3a:8e:59:6e:29:b1:a6:62:82:
93:04:85:4e:30:4b:d4:a1:35:9a:08:e3:18:97:27:
1d:38:33:6e:6e:ad:50:c4:f5:e3:bc:b8:0f:ef:4e:
21:e7:b4:b3:e2:4c:22:4d:77:ea:9e:f5:a6:44:5e:
12:59:14:c9:05:50:40:1d:37:02:0e:d1:fa:5d:25:
98:2a:b4:69:5f:d7:16:d8:fe:c4:fe:3a:6e:75:d5:
77:75:35:0f:94:53:b2:a1:b3:f5:3f:91:63:05:fc:
01:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:73:8E:13:87:26:E8:4C:82:8D:92:20:87:93:4D:0A:EC:47:9C:77
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/gXOOE4cm6EyCjZIgh5NNCuxHnHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.15.0.0/22
145.15.90.0/24
145.15.92.0-145.15.99.255
Signature Algorithm: sha256WithRSAEncryption
12:c1:a0:75:6d:45:61:b9:cf:5b:e9:2c:40:5d:07:66:51:6c:
d7:0a:8c:3e:e1:10:65:cc:f9:a6:d1:90:6a:7f:dd:fb:4e:b6:
7e:bf:b8:30:4c:42:ad:7b:dd:71:77:2e:23:76:ec:a0:87:f2:
ba:b8:67:5b:f3:10:21:01:e9:c6:01:05:11:13:ae:ce:79:b9:
49:46:9c:ae:2f:9b:3c:10:07:c1:89:42:54:3c:66:dc:c2:fc:
b5:4a:62:3d:f4:48:6d:bb:1e:9f:56:fa:c9:60:cc:24:72:93:
0d:b2:37:ff:fc:50:d9:e7:33:94:d8:80:fb:4b:ba:34:5a:f9:
b0:23:1b:28:69:1e:6a:db:92:80:b4:b0:b7:b3:98:82:a7:11:
b9:7b:32:3c:43:72:e9:2e:e5:2b:34:78:94:0a:a0:07:98:41:
44:32:c4:d8:6b:ee:fd:62:23:3c:32:8f:4b:0a:ab:f3:52:80:
31:76:39:1a:2c:5a:4b:bd:e5:40:76:90:85:92:13:a2:28:d2:
b2:35:9b:be:e8:ac:05:46:84:ca:26:1b:4c:ce:14:f9:f3:4a:
c4:65:ab:63:24:53:4b:5f:36:77:06:d3:38:c0:33:b6:5e:9b:
fe:fc:0a:4c:1f:db:ae:51:13:e8:67:dd:e7:d4:e0:80:e0:e7:
be:5b:dc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org