Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/gXusBC1bCZB_5l67ABdZlvHtuB4.roa
File: gXusBC1bCZB_5l67ABdZlvHtuB4.roa (raw, json)
Hash identifier: Il2b21yUw6ka99swzujY7LlpcJsJ8GHlVHS7yGqanw4=
Subject key identifier: 81:7B:AC:04:2D:5B:09:90:7F:E6:5E:BB:00:17:59:96:F1:ED:B8:1E
Certificate issuer: /CN=4c468f181265b4d96ca2835a3e570c2679035dff
Certificate serial: 018571A7BB3BB59286595B3285DF5AC83419
Authority key identifier: 4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/gXusBC1bCZB_5l67ABdZlvHtuB4.roa
Signing time: Mon 02 Jan 2023 08:44:55 +0000
ROA not before: Mon 02 Jan 2023 08:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208708
IP address blocks: 45.87.112.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:bb:3b:b5:92:86:59:5b:32:85:df:5a:c8:34:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c468f181265b4d96ca2835a3e570c2679035dff
Validity
Not Before: Jan 2 08:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=817bac042d5b09907fe65ebb00175996f1edb81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:e8:c6:b4:d8:fe:57:23:94:15:26:9a:66:
fb:aa:1e:3e:5e:42:51:e9:73:c6:7f:0b:df:87:8f:
0b:92:d4:6c:18:03:dd:06:b7:78:a3:9e:7d:7b:95:
ab:5d:91:10:41:9d:c5:2b:52:6f:73:b7:7f:c5:78:
03:6c:04:2a:c0:cf:bf:e2:77:85:1c:c5:e2:24:61:
a5:9c:05:09:5b:fb:6c:31:3b:7b:a2:e5:25:4a:4b:
86:1e:ba:ea:57:ba:3b:a1:87:c9:64:b0:2b:77:79:
cb:06:46:60:73:32:15:dc:67:9b:06:21:0d:49:10:
62:7e:69:9d:65:49:2a:90:5b:33:85:f5:7c:ca:42:
82:7d:81:8e:c9:1f:47:43:03:e1:22:1f:4f:3e:94:
c5:b8:fa:39:69:42:8f:ef:d0:84:79:62:b4:df:55:
35:cc:60:b9:1b:49:64:5f:41:8c:ba:59:6e:2c:a0:
83:5c:15:31:bf:8b:64:6a:5d:92:29:fb:42:35:18:
64:32:57:06:33:65:05:07:69:26:4a:b4:aa:a7:b2:
23:dd:26:1f:f0:bb:9f:3e:49:e5:e3:6b:8e:64:a9:
e5:c6:1a:c2:0a:2b:1d:04:6e:42:92:3b:6a:35:ba:
c6:e3:ab:7c:22:06:d3:78:d7:d4:a0:5b:e3:13:8b:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7B:AC:04:2D:5B:09:90:7F:E6:5E:BB:00:17:59:96:F1:ED:B8:1E
X509v3 Authority Key Identifier:
keyid:4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/gXusBC1bCZB_5l67ABdZlvHtuB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.112.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:b1:ca:1f:f7:10:24:33:18:11:09:08:ba:4a:e1:dc:f8:39:
2e:19:29:56:a8:d0:00:9e:89:21:c1:03:d9:cf:ab:ae:2c:8c:
ad:05:36:b6:0f:b6:18:df:74:d1:5f:93:17:7f:16:45:73:45:
de:67:98:61:3b:ac:48:e1:01:15:f0:5f:71:b9:32:aa:c7:99:
00:5f:e1:b8:f6:ab:0a:7e:1c:aa:ea:9e:e0:51:14:99:0e:f0:
05:eb:a8:20:b9:0d:6d:b5:ac:f3:2f:dc:e9:e1:c7:cf:8f:df:
7e:a7:4e:c2:6e:9c:1f:7e:f1:44:81:0d:2a:8d:a4:5f:b4:19:
1c:e9:c1:46:36:5c:09:11:28:cb:72:7c:ed:f2:47:a2:23:97:
79:e2:f7:7e:75:a7:77:5f:c9:8d:d3:56:f1:8c:9d:28:8a:02:
96:b2:08:d8:85:5f:e8:1a:21:bb:6a:b0:45:b3:ca:d9:6d:a7:
e6:61:34:e7:6f:0e:a7:0f:74:b0:c3:ab:60:f1:31:3e:55:5f:
39:c9:d0:6f:8f:c0:cf:c2:8e:1b:a6:3a:58:67:0e:fb:6c:91:
65:5d:7e:5a:fc:de:5c:1e:13:70:96:6c:d7:b7:19:f4:1c:94:
16:25:2a:30:1c:7c:89:57:eb:90:5e:ee:31:6c:81:24:86:de:
11:31:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:21 2024 by rpki-client on console-fra.rpki-client.org