Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/gOqAC6h3fQTVay6086MZvF5HGCs.roa
File: gOqAC6h3fQTVay6086MZvF5HGCs.roa (raw, json)
Hash identifier: Okk/wZInx0EtF24NOGO6PGuiMFQF8CK5BM2XNmPnU/s=
Subject key identifier: 80:EA:80:0B:A8:77:7D:04:D5:6B:2E:B4:F3:A3:19:BC:5E:47:18:2B
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FD5C95CA021A1062C1A9C3719D766
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/gOqAC6h3fQTVay6086MZvF5HGCs.roa
Signing time: Sun 01 Jan 2023 21:14:43 +0000
ROA not before: Sun 01 Jan 2023 21:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4842
IP address blocks: 45.9.11.0/24 maxlen: 24
2a0e:aa06::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:d5:c9:5c:a0:21:a1:06:2c:1a:9c:37:19:d7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80ea800ba8777d04d56b2eb4f3a319bc5e47182b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:d5:64:f2:1f:5c:97:7c:e9:91:10:80:20:
17:ef:26:69:2c:52:fc:de:0e:b3:40:1b:aa:79:4f:
0e:c5:52:f0:3f:f9:34:5f:e5:72:20:f6:30:4c:2c:
ac:8c:2e:64:b3:c9:56:95:63:a3:69:5c:6a:b9:4a:
d2:7e:d2:0a:e5:52:18:be:f3:cf:71:da:7b:a9:59:
e1:f4:ae:f2:e0:32:59:93:cf:3a:d8:f7:e5:8c:64:
d4:cc:a3:b6:b7:7b:f9:3c:03:8c:7f:c3:59:be:a8:
58:da:69:8f:4b:49:d6:25:20:9c:a6:9c:eb:20:00:
70:19:6e:65:31:90:5d:85:87:ca:67:e4:64:1d:8e:
11:1c:2e:68:a9:41:02:83:5a:5b:e9:3b:75:49:45:
d9:51:59:96:ea:f7:a7:43:8d:2a:06:23:51:42:69:
5a:71:50:e2:79:46:7d:14:bd:df:dd:58:9e:92:68:
9c:0d:5b:45:2a:56:d4:e0:36:3e:c6:fe:d0:21:36:
0d:1f:53:4a:40:6a:32:42:66:e5:1a:24:33:cb:31:
14:22:81:70:21:35:37:aa:ec:e4:02:fe:49:13:1c:
0b:3f:01:77:e3:a6:85:a7:1c:2a:e7:f0:0e:b3:8c:
18:7c:8b:83:3a:2c:7c:2d:ac:14:08:69:26:95:c4:
fe:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EA:80:0B:A8:77:7D:04:D5:6B:2E:B4:F3:A3:19:BC:5E:47:18:2B
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/gOqAC6h3fQTVay6086MZvF5HGCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.11.0/24
IPv6:
2a0e:aa06::/40
Signature Algorithm: sha256WithRSAEncryption
2f:5f:a9:53:61:61:3d:7c:d4:6f:ed:1e:99:fb:b6:e3:0d:4f:
1c:0d:28:98:64:e4:e8:c3:bc:89:7b:02:9a:91:f0:cb:4a:84:
9e:77:80:2a:95:5c:73:70:6b:56:a5:00:a7:b7:2c:f9:66:b5:
d5:9a:d1:66:e3:75:cd:d4:87:73:24:6a:71:1a:dc:b1:95:db:
12:d9:16:44:89:91:8f:71:e2:9c:57:78:52:74:f8:4f:05:c1:
21:da:f5:87:72:e9:16:50:fc:1e:b4:7c:86:80:6e:98:05:c2:
85:ef:c2:6e:3d:cd:65:b8:03:5a:60:25:5a:20:98:9b:8d:5b:
ce:e5:0c:e6:35:ca:d4:da:1e:9d:80:71:31:fd:6c:79:22:5a:
2b:25:1d:52:ab:97:a9:66:08:b0:dd:97:59:7d:5b:16:8b:0b:
0a:6f:d0:1c:af:ca:a0:ac:ed:9e:4f:2c:fe:81:a5:9b:e3:7b:
04:80:c5:a2:af:19:98:08:fb:1b:74:5c:80:20:5d:0b:36:3b:
e6:57:66:11:3f:cf:cc:b2:4a:3c:ec:7f:9b:76:05:ba:34:b6:
32:ef:c1:62:85:cf:43:31:bb:39:79:99:9f:57:1e:b8:5a:4c:
29:c1:72:67:5a:d5:a7:98:3f:e1:01:a3:e2:fa:8c:f6:c5:02:
e0:19:58:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org