Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/gHqYQyHpNonmm1Nvo5ojV1u9gSE.roa
File: gHqYQyHpNonmm1Nvo5ojV1u9gSE.roa (raw, json)
Hash identifier: yogzVq8sGJw4syRIoMNvK7BfAG2fO3lCadHddVI/Opg=
Subject key identifier: 80:7A:98:43:21:E9:36:89:E6:9B:53:6F:A3:9A:23:57:5B:BD:81:21
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01880E8B9EE266FA34EF42E56A3149F6109A
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/gHqYQyHpNonmm1Nvo5ojV1u9gSE.roa
Signing time: Fri 12 May 2023 06:00:11 +0000
ROA not before: Fri 12 May 2023 06:00:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212335
IP address blocks: 45.150.197.0/24 maxlen: 24
45.83.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:8b:9e:e2:66:fa:34:ef:42:e5:6a:31:49:f6:10:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: May 12 06:00:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=807a984321e93689e69b536fa39a23575bbd8121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:30:16:e7:2c:9b:f7:cb:5e:33:32:0a:12:
9e:16:38:69:70:c6:8f:49:2d:32:64:3b:2d:4b:2a:
89:35:90:da:cd:6d:bd:e7:aa:f0:a1:3d:46:83:a5:
a6:05:76:88:96:b9:03:dc:41:a2:32:7f:15:68:4a:
3e:61:67:31:35:3e:2b:4a:ec:24:27:32:47:e3:00:
1c:44:60:af:50:7c:26:10:4c:62:9e:db:10:80:6a:
69:ed:c4:54:ef:3b:cd:81:4c:69:23:fd:4b:c1:1c:
e8:6a:04:df:e8:b5:ad:d9:bd:4d:ff:49:d5:cc:da:
66:58:0f:b4:aa:85:b7:02:03:06:af:3b:c7:fe:70:
fd:48:de:38:60:47:72:e1:99:42:bc:4d:c4:55:9b:
1b:04:b2:aa:c1:6f:c8:e8:47:7b:1a:f4:61:f3:84:
18:32:fd:c0:cc:27:67:7d:a6:e6:82:4d:9c:23:28:
c3:7b:4d:bb:c5:90:0e:1d:b9:af:f3:e2:cf:07:10:
39:3c:d9:77:fd:e9:de:90:31:11:00:fc:0d:4d:3f:
e2:35:ce:37:ad:0b:c3:7a:56:fa:38:fb:9c:61:8a:
e2:f0:46:2c:38:6e:ee:7e:55:b5:b0:86:cd:ef:6d:
28:df:9a:a2:84:e4:2a:53:c0:d4:5b:52:2a:10:2b:
fe:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7A:98:43:21:E9:36:89:E6:9B:53:6F:A3:9A:23:57:5B:BD:81:21
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/gHqYQyHpNonmm1Nvo5ojV1u9gSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.239.0/24
45.150.197.0/24
Signature Algorithm: sha256WithRSAEncryption
00:df:ca:84:5c:77:ce:e0:8f:ef:91:b3:61:4a:bc:8e:77:2c:
90:45:c6:17:bd:b7:b9:24:3b:4e:33:9b:de:ff:28:6a:9c:1b:
ee:97:db:73:5d:13:4e:d7:9a:b7:08:d7:90:54:e7:ce:2f:2d:
aa:62:7c:64:ec:b7:6c:ae:0d:10:df:3c:79:76:fa:17:a1:de:
fb:c8:89:4c:11:a7:c1:41:ab:11:34:38:14:32:65:b0:11:89:
da:7f:57:2a:44:41:c5:61:15:c1:c3:d2:80:80:18:52:0f:31:
b9:8c:b7:f3:3c:df:32:02:e6:c9:4e:83:3d:13:d2:e0:62:1a:
e4:b6:1f:c3:0b:6a:89:a7:c0:b4:4f:1b:e7:61:d5:35:43:65:
49:33:81:5d:9f:67:7d:00:58:60:77:52:df:88:9b:ce:31:31:
71:42:c5:7f:b2:46:90:09:24:20:40:2d:14:1a:6f:ba:6b:df:
44:e3:ae:87:60:e7:37:40:c7:7c:eb:af:40:33:41:95:f9:02:
ca:e1:f4:3d:2b:f2:71:ba:6a:b9:1f:59:82:6b:6d:aa:5c:2b:
44:53:1c:e7:92:bc:c4:74:5d:1b:fb:3f:58:bd:4e:81:58:b5:
27:0f:1c:33:a1:6b:dc:d2:b3:c5:9b:0b:7d:19:cf:f8:83:95:
d4:41:49:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:04 2024 by rpki-client on console-fra.rpki-client.org