Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/k-GDX1d6jib400Rv9igoMModoc4.roa
File: k-GDX1d6jib400Rv9igoMModoc4.roa (raw, json)
Hash identifier: H4HbH0hQnZkhS1qBjwpHOHwsMjXh6daeKFeT6ika6AU=
Subject key identifier: 93:E1:83:5F:57:7A:8E:26:F8:D3:44:6F:F6:28:28:30:CA:1D:A1:CE
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01856DAF6CEA4BB52069E54AE9A061114407
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/k-GDX1d6jib400Rv9igoMModoc4.roa
Signing time: Sun 01 Jan 2023 14:14:51 +0000
ROA not before: Sun 01 Jan 2023 14:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206238
IP address blocks: 45.80.168.0/22 maxlen: 22
45.95.236.0/22 maxlen: 22
45.83.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 21 Dec 2023 19:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:6c:ea:4b:b5:20:69:e5:4a:e9:a0:61:11:44:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 14:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93e1835f577a8e26f8d3446ff6282830ca1da1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:a5:11:c8:91:e0:4a:ef:d5:4d:dc:4d:6e:
0c:ee:39:cd:6f:f6:eb:85:79:fc:3e:ce:91:11:3b:
aa:1b:c1:23:e4:cf:f1:a4:1a:da:29:30:fd:71:34:
3e:c6:76:6b:ec:36:7b:7f:f1:85:13:f3:92:7c:a5:
c9:04:9c:f4:91:07:c3:c4:95:ea:33:26:5a:ec:54:
ef:3b:80:71:f8:77:9d:8a:6d:65:6a:ad:92:e1:0f:
3a:50:57:38:d2:af:64:2b:73:10:18:56:9b:b2:e3:
68:70:b4:12:c6:58:2f:cc:73:ac:b0:7d:24:8d:7b:
f6:3d:c3:98:2e:dc:98:1b:dd:da:27:0d:d3:55:16:
11:33:c2:e5:33:ad:02:f0:75:7c:48:cf:ee:d6:9c:
79:a2:b8:a6:cd:6b:df:dd:57:42:fd:56:fc:84:db:
38:23:fa:3a:89:cd:81:a5:4c:df:62:70:b7:03:e1:
83:03:e4:50:a8:06:15:e7:f5:6f:a6:74:46:4f:e2:
be:21:db:f9:d3:ca:16:b1:1c:c2:f8:e6:9e:bf:1e:
72:47:8d:7b:e3:5e:36:77:34:ca:ae:c5:9b:71:74:
c5:9e:6c:c7:05:b3:03:bd:14:27:02:41:f8:72:9c:
44:4b:f8:ea:6a:50:a8:14:1c:fd:eb:aa:7f:2b:6f:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E1:83:5F:57:7A:8E:26:F8:D3:44:6F:F6:28:28:30:CA:1D:A1:CE
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/k-GDX1d6jib400Rv9igoMModoc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.168.0/22
45.83.4.0/22
45.95.236.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:5d:85:7f:b2:6e:14:5a:fb:ec:f6:53:2a:7f:db:c5:db:e9:
d2:49:15:68:bc:20:06:94:20:91:f7:65:49:f7:e8:95:df:92:
e4:14:f7:46:fe:8e:68:b8:a0:56:35:52:eb:b7:ea:f4:39:36:
07:98:40:04:65:2b:35:0b:37:e2:eb:33:22:c2:47:05:6a:04:
fb:62:34:0f:1c:d9:5c:a5:1e:df:b9:7c:81:49:d7:f1:c9:63:
f9:41:ce:45:27:af:b7:15:24:a5:aa:6b:11:2b:00:9f:92:ef:
56:c5:49:9d:7b:a6:0b:49:c5:29:2d:9d:f1:f8:f0:c5:f6:ad:
28:22:05:64:c5:a9:71:f3:cb:d1:b9:c7:32:00:87:bb:d6:92:
82:f7:72:d9:b5:20:0d:e1:8a:e5:18:a2:51:4a:7c:77:c9:05:
ed:e3:0e:99:d6:31:7b:06:0e:0b:1c:3f:26:69:9e:c5:27:5f:
56:9f:0d:9d:3d:98:85:bf:7d:e2:f0:61:38:93:75:47:67:b1:
66:e3:3c:c8:9a:88:f2:88:93:fa:dc:65:d0:ae:02:25:11:06:
76:ac:ea:9d:be:dd:a1:ff:b6:eb:d9:29:45:b6:f4:f1:57:91:
1e:f1:86:4c:62:72:16:5f:58:ef:0d:37:24:c2:26:23:07:04:
8e:31:f7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:37 2024 by rpki-client on console-ams.rpki-client.org