Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/gvmN8-ewhM8vborMQHmlU3YOZes.roa
File: gvmN8-ewhM8vborMQHmlU3YOZes.roa (raw, json)
Hash identifier: mQQf/zy2o1jNfongKbUqbaYvQ93c22O5YDV621KbD28=
Subject key identifier: 82:F9:8D:F3:E7:B0:84:CF:2F:6E:8A:CC:40:79:A5:53:76:0E:65:EB
Certificate issuer: /CN=9eee4669fc08a4d4337509110613862b314f1ac7
Certificate serial: 018571D7CB43B5EDA14DD68C90D6C314BAFF
Authority key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/gvmN8-ewhM8vborMQHmlU3YOZes.roa
Signing time: Mon 02 Jan 2023 09:37:25 +0000
ROA not before: Mon 02 Jan 2023 09:37:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60475
IP address blocks: 45.10.84.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:cb:43:b5:ed:a1:4d:d6:8c:90:d6:c3:14:ba:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eee4669fc08a4d4337509110613862b314f1ac7
Validity
Not Before: Jan 2 09:37:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82f98df3e7b084cf2f6e8acc4079a553760e65eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ce:29:ac:76:39:6b:51:9e:18:26:c6:88:61:
9d:2d:1c:85:c5:c8:91:03:b1:53:d3:82:fd:eb:ce:
c0:5c:d3:61:b6:26:0d:08:5b:a8:18:76:7d:ed:55:
67:4a:5e:0c:5c:04:6d:1b:f8:c9:5b:2a:df:e1:f8:
b1:5e:f8:68:1e:a8:ab:a7:53:f6:1f:8d:49:5c:4e:
95:0f:94:a9:ad:72:bb:11:74:0d:ec:83:eb:1d:e5:
c7:85:e5:18:99:47:a1:bf:5a:c3:40:5c:f9:c8:e9:
3d:b1:28:83:d8:7f:c3:f7:de:38:f3:5b:0d:7b:51:
eb:7e:b2:28:99:4e:d5:b6:da:22:e5:8c:23:a2:a1:
ea:80:8b:c7:f4:8a:ab:85:dd:96:f9:7a:c9:96:6c:
0f:ea:fa:99:09:86:1a:2b:76:fb:bc:0f:6a:66:b9:
57:e0:bf:d3:64:b6:6b:78:29:b7:c2:78:09:fd:ec:
14:e4:2a:fa:85:8f:8e:07:25:59:3a:d7:b7:61:0b:
94:62:be:a6:4e:41:a4:10:a7:f3:ed:bb:aa:42:93:
43:8c:fb:5e:89:1b:42:59:a7:4f:6d:00:e8:d1:a8:
78:2b:fb:46:99:f3:f2:d7:18:fc:0f:19:26:a9:7c:
4c:74:0d:d7:d7:bd:ed:ad:c1:7c:ac:ef:72:34:3e:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F9:8D:F3:E7:B0:84:CF:2F:6E:8A:CC:40:79:A5:53:76:0E:65:EB
X509v3 Authority Key Identifier:
keyid:9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/gvmN8-ewhM8vborMQHmlU3YOZes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.84.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:a5:76:cb:07:99:e0:3b:80:09:44:38:11:15:ad:78:64:24:
2f:f5:85:13:81:8b:0a:38:f3:e7:12:20:35:3a:e4:39:bb:fe:
6e:c2:ee:3e:45:af:db:c0:3e:6b:00:d5:87:77:ac:9c:35:f2:
66:9f:5e:8b:f7:ce:dd:2a:40:e8:50:88:80:c6:4c:cf:82:06:
ba:a5:f2:75:9f:01:52:26:a9:4f:5b:e9:f7:f5:ac:0d:0a:ba:
75:41:e7:5f:22:a3:d6:0e:17:00:53:11:8e:70:df:f0:32:69:
b1:2d:05:96:95:18:62:ce:41:0a:a7:84:ea:a7:29:d0:04:df:
c0:7f:01:b6:32:a2:af:7e:68:0c:27:85:98:e2:4a:cd:a9:2c:
1e:ab:6e:6c:28:fd:ca:80:45:27:92:eb:9d:5f:4a:01:60:75:
81:1d:dc:d5:62:28:d2:6e:10:73:73:66:22:2e:06:d9:23:31:
d4:aa:50:42:b4:d8:8c:0a:be:58:27:05:de:f1:48:6c:b2:cd:
e1:27:53:06:b4:db:97:f4:bc:3e:20:38:e1:a2:05:68:4d:dd:
39:bf:e5:29:21:d3:7b:3b:6a:d1:0d:62:14:98:e1:da:f0:e5:
4c:8f:4c:22:c3:9f:ef:9e:71:3a:bd:13:60:3e:db:e2:e1:50:
86:11:81:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:02 2024 by rpki-client on console-ams.rpki-client.org