Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/gbXUQrzbjKxepGRXgKFDOCJyZP8.roa
File: gbXUQrzbjKxepGRXgKFDOCJyZP8.roa (raw, json)
Hash identifier: QKImrtCToS8c2+smN+81AKZHZ0jGyOcH0qPMB2koazo=
Subject key identifier: 81:B5:D4:42:BC:DB:8C:AC:5E:A4:64:57:80:A1:43:38:22:72:64:FF
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 0186175BFAEC45E944ECA7DF4815AB573AA2
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/gbXUQrzbjKxepGRXgKFDOCJyZP8.roa
Signing time: Fri 03 Feb 2023 12:59:09 +0000
ROA not before: Fri 03 Feb 2023 12:59:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 45.251.60.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:5b:fa:ec:45:e9:44:ec:a7:df:48:15:ab:57:3a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Feb 3 12:59:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81b5d442bcdb8cac5ea4645780a14338227264ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:4e:3a:b6:17:c0:13:9f:26:ef:29:7a:7d:
46:d8:7b:80:29:f6:11:ee:70:05:40:8d:73:14:84:
10:7b:85:62:b3:e6:f3:df:5d:52:97:f2:0a:de:b3:
92:1c:73:b1:5e:ab:fb:14:30:f2:0e:ec:d1:15:aa:
55:30:0a:8a:4b:9b:f7:cd:1a:92:7d:1b:34:f7:ec:
7b:ec:ee:21:b5:12:02:fd:b9:64:41:8b:fe:40:cf:
86:f6:38:3a:a3:ce:47:ff:f7:c8:87:fb:c3:a4:63:
17:a6:9a:9d:a9:97:bc:80:60:7f:14:80:c2:42:c8:
cd:e9:3d:68:63:21:54:a6:2c:f5:1a:a3:c5:9e:aa:
f3:cf:9f:c1:46:6c:92:8b:c5:12:8c:29:f0:93:69:
33:1a:49:1b:dd:39:1c:69:c8:1c:6c:09:11:16:c9:
37:7b:2c:78:94:0f:63:ff:99:66:55:2f:f6:ca:0b:
78:3d:81:b3:4a:95:78:f0:dd:8d:44:34:0d:35:be:
44:79:18:ff:a3:84:7d:5b:63:25:ec:8c:e6:f9:6b:
65:d1:c3:c7:90:46:8a:73:2c:17:2f:36:7d:a0:31:
c1:63:7c:4f:e4:d7:17:ec:3c:5d:3d:a3:f4:cf:cf:
eb:a5:d2:8e:ce:4a:aa:f4:96:e8:e8:9e:f8:f8:6f:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B5:D4:42:BC:DB:8C:AC:5E:A4:64:57:80:A1:43:38:22:72:64:FF
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/gbXUQrzbjKxepGRXgKFDOCJyZP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.60.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:7f:e8:52:19:ca:c1:93:39:c2:ec:13:3c:0f:04:03:93:f5:
b9:d5:49:04:4f:65:2a:b4:95:13:5c:c7:28:9a:4b:97:bd:dd:
81:ef:c1:f3:0f:30:24:9d:dc:64:ae:37:5b:cc:6b:5d:7a:b3:
96:04:92:9b:83:13:61:b1:bf:ca:11:24:f0:58:1f:04:17:8c:
78:fa:3a:6e:d7:4a:7c:9e:9a:ca:1c:36:bc:e6:9f:84:b8:00:
cc:77:0c:52:ee:5e:1c:22:6f:41:2d:19:66:6f:9b:20:36:2e:
08:63:ce:09:a2:1b:df:b1:e4:73:4e:52:5f:b4:8f:95:b5:94:
73:ef:f2:84:13:57:34:fd:2d:66:b3:64:be:c8:7c:49:1f:52:
3d:0c:4c:43:c6:e9:00:a4:e6:b9:58:1a:2a:0c:26:08:67:65:
f6:36:43:2f:df:ce:fe:d7:e7:46:cd:cf:4a:97:fc:3a:37:5c:
f8:90:b4:bc:08:dd:96:7f:dd:76:f0:5c:55:5d:b0:ad:8e:c6:
38:46:3a:34:f9:be:6a:f8:3a:5b:66:0d:12:da:82:6d:f6:3d:
44:85:ea:73:15:9c:22:f4:24:43:a5:12:ba:dd:b2:5c:a6:42:
dc:2f:50:dc:15:df:15:ed:94:48:7b:df:6a:ce:5e:40:e9:0c:
78:80:4c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:28 2024 by rpki-client on console-fra.rpki-client.org