Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/GTJ_7KJ3iXV-cgFNOHaXOe2_Ee4.roa
File: GTJ_7KJ3iXV-cgFNOHaXOe2_Ee4.roa (raw, json)
Hash identifier: o6IHP5nkqUYPGxZRHnC7OiDzF9UhXsLCVm5xiE9hCzE=
Subject key identifier: 19:32:7F:EC:A2:77:89:75:7E:72:01:4D:38:76:97:39:ED:BF:11:EE
Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial: 01856F301219862FEBA71B8BA28B1556B6CD
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/GTJ_7KJ3iXV-cgFNOHaXOe2_Ee4.roa
Signing time: Sun 01 Jan 2023 21:14:59 +0000
ROA not before: Sun 01 Jan 2023 21:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62142
IP address blocks: 45.9.192.0/24 maxlen: 26
2a0e:1106::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:12:19:86:2f:eb:a7:1b:8b:a2:8b:15:56:b6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Validity
Not Before: Jan 1 21:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19327feca27789757e72014d38769739edbf11ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:32:5d:70:e1:67:fd:a2:07:b4:86:10:19:
92:37:9e:dc:16:ae:5b:20:4f:fa:f1:dd:4c:47:91:
0c:04:89:01:48:58:e9:a0:2b:9f:f9:be:22:af:28:
5a:9a:f4:a0:24:a0:08:23:91:ac:1c:4c:d6:4f:1a:
e4:b6:8e:5d:b9:e5:4e:ae:6e:5c:bc:1d:12:6e:25:
7a:6d:b6:53:7d:73:0b:2b:51:f9:09:43:a7:1f:f7:
46:a1:7b:4f:4e:2d:d4:07:a4:5b:9b:ec:2c:60:2f:
b1:bf:bc:ca:49:0d:22:e0:e8:14:62:a9:56:30:b2:
70:c1:d9:e7:9b:53:0c:0b:91:e5:ea:f7:14:fa:49:
ff:a6:fd:d9:22:59:9d:24:e9:24:65:e5:57:65:e1:
77:81:a7:e2:b2:c5:3f:c1:5e:a2:3d:e9:6f:0c:40:
bc:d3:ae:39:3a:14:54:15:25:71:ab:35:0c:ae:9e:
6b:7f:c5:eb:4f:27:49:c1:48:40:49:f7:76:2f:5e:
f5:57:d7:fe:61:68:96:d5:38:16:99:cb:12:6c:de:
4d:a6:23:c9:d0:9e:60:4b:b8:3b:a4:98:57:bd:af:
b9:bf:1c:8b:b6:d5:8e:75:5a:53:45:8f:87:13:72:
b7:7c:04:0b:e4:a1:ba:40:8b:c6:11:df:ee:81:88:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:32:7F:EC:A2:77:89:75:7E:72:01:4D:38:76:97:39:ED:BF:11:EE
X509v3 Authority Key Identifier:
keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/GTJ_7KJ3iXV-cgFNOHaXOe2_Ee4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.192.0/24
IPv6:
2a0e:1106::/40
Signature Algorithm: sha256WithRSAEncryption
5e:3e:ec:fb:5a:0e:15:7a:30:3e:69:d0:1b:0c:1c:e6:08:6e:
44:53:60:92:f5:fa:97:12:3f:ae:31:16:fa:4b:1c:bc:c6:22:
72:c7:1e:76:a0:1f:f3:d1:11:0d:44:ff:08:9c:80:f0:0e:b6:
18:58:4e:69:b4:12:a2:59:f5:2b:db:43:6c:74:ad:b5:f2:ff:
68:b2:31:85:da:59:a2:0e:82:79:11:cd:c5:a5:9c:dc:81:83:
82:ee:b3:4c:38:c8:51:4c:36:bf:cb:08:63:67:f5:4f:08:f0:
ff:4a:65:fc:9b:8c:8d:66:49:88:0a:00:70:9b:3c:07:d7:58:
1a:64:99:0b:73:6a:82:51:4a:9a:9f:12:a2:82:f9:6b:2b:f6:
1b:6b:3a:25:be:b0:0a:b9:25:98:4d:5f:ef:c6:65:37:c4:76:
90:82:be:71:f0:7b:c1:95:32:e2:d3:7e:8b:41:03:80:3d:54:
9e:09:e7:e2:4b:ba:34:ea:6b:af:b8:6c:53:a2:eb:75:87:cc:
c4:bb:f9:23:87:89:1d:a5:3b:19:40:d0:27:cf:ac:bd:04:c7:
69:14:3f:25:aa:64:08:9c:ea:3d:ec:39:a8:5e:44:ca:6d:02:
ab:82:74:d2:a5:c2:a1:7b:ba:bc:4e:ba:bb:b1:7a:1b:7c:0a:
bd:4a:e0:ce
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYVvMBIZhi/rpxuLoosVVrbNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhY2E1MDg1OGExODU2ZmZhMDJlOTEzNTZmMTQyMzZlN2Mz
OGI4NWEwHhcNMjMwMTAxMjExNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTMyN2ZlY2EyNzc4OTc1N2U3MjAxNGQzODc2OTczOWVkYmYxMWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCAyXXDhZ/2iB7SGEBmSN57cFq5b
IE/68d1MR5EMBIkBSFjpoCuf+b4iryhamvSgJKAII5GsHEzWTxrkto5dueVOrm5c
vB0SbiV6bbZTfXMLK1H5CUOnH/dGoXtPTi3UB6Rbm+wsYC+xv7zKSQ0i4OgUYqlW
MLJwwdnnm1MMC5Hl6vcU+kn/pv3ZIlmdJOkkZeVXZeF3gafissU/wV6iPelvDEC8
0645OhRUFSVxqzUMrp5rf8XrTydJwUhASfd2L171V9f+YWiW1TgWmcsSbN5NpiPJ
0J5gS7g7pJhXva+5vxyLttWOdVpTRY+HE3K3fAQL5KG6QIvGEd/ugYiW5QIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFBkyf+yid4l1fnIBTTh2lzntvxHuMB8GA1UdIwQY
MBaAFDrKUIWKGFb/oC6RNW8UI258OLhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEt
MzMxZDdmYzc3YmQ0LzEvR1RKXzdLSjNpWFYtY2dGTk9IYVhPZTJfRWU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEtMzMxZDdmYzc3YmQ0
LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQALQnAMA4E
AgACMAgDBgAqDhEGADANBgkqhkiG9w0BAQsFAAOCAQEAXj7s+1oOFXowPmnQGwwc
5ghuRFNgkvX6lxI/rjEW+kscvMYicscedqAf89ERDUT/CJyA8A62GFhOabQSoln1
K9tDbHSttfL/aLIxhdpZog6CeRHNxaWc3IGDgu6zTDjIUUw2v8sIY2f1Twjw/0pl
/JuMjWZJiAoAcJs8B9dYGmSZC3NqglFKmp8SooL5ayv2G2s6Jb6wCrklmE1f78Zl
N8R2kIK+cfB7wZUy4tN+i0EDgD1Ungnn4ku6NOprr7hsU6LrdYfMxLv5I4eJHaU7
GUDQJ8+svQTHaRQ/JapkCJzqPew5qF5Eym0Cq4J00qXCoXu6vE66u7F6G3wKvUrg
zg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:37 2024 by rpki-client on console-ams.rpki-client.org