Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/BgG422hyMc7HA2ULEC-ZSJ3O7zo.roa
File: BgG422hyMc7HA2ULEC-ZSJ3O7zo.roa (raw, json)
Hash identifier: 6Rllfk+tn4xKpOSTtQYNuiPxSAo78NR1qcdoUce0BKA=
Subject key identifier: 06:01:B8:DB:68:72:31:CE:C7:03:65:0B:10:2F:99:48:9D:CE:EF:3A
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01856F66F5002AF53A84796ADA25A4D896BA
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/BgG422hyMc7HA2ULEC-ZSJ3O7zo.roa
Signing time: Sun 01 Jan 2023 22:14:56 +0000
ROA not before: Sun 01 Jan 2023 22:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207746
IP address blocks: 45.146.232.0/22 maxlen: 22
45.141.168.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 Jun 2023 11:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:f5:00:2a:f5:3a:84:79:6a:da:25:a4:d8:96:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 22:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0601b8db687231cec703650b102f99489dceef3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:a8:7b:ca:31:82:60:13:a5:8c:89:a1:5b:
26:74:ce:87:be:e4:ad:38:87:d0:4c:78:f4:cf:13:
c3:27:fe:b4:7f:97:ec:de:5a:a1:31:7d:3d:3d:c1:
1c:29:06:64:59:8d:f6:53:6b:3e:d4:8e:e8:10:f1:
ea:63:64:4c:93:0a:87:7c:a1:3c:57:a8:dc:98:69:
8a:e0:85:0c:11:fc:79:20:e5:ba:a2:8d:3b:64:42:
30:70:e7:19:b1:8a:13:81:e2:65:22:e5:17:fa:57:
b1:ac:e0:7e:d6:ce:df:6a:32:5a:4a:ab:cf:f6:d3:
f6:96:c8:c0:b3:36:fb:b1:99:b4:1e:1d:b3:dd:6f:
21:32:01:f7:06:8a:ad:cb:16:06:d2:b2:22:05:22:
99:7f:d3:85:2a:e4:88:78:0a:fc:84:4e:03:1b:10:
db:74:e9:c5:13:f3:77:50:ef:39:11:f9:f8:0c:f3:
65:9a:21:df:97:a7:70:31:c3:87:a3:a6:97:c3:db:
ee:f5:ca:d0:c4:e2:95:04:dd:e4:17:af:98:7d:c7:
3f:2f:c2:e7:b0:d5:b0:24:ab:50:d7:9e:a0:8e:66:
e9:c6:60:7e:b0:3a:3d:e9:1e:78:9b:c3:5b:93:a0:
f4:f0:ac:4a:4a:51:17:dc:e8:32:7c:f2:1f:f4:c0:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:01:B8:DB:68:72:31:CE:C7:03:65:0B:10:2F:99:48:9D:CE:EF:3A
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/BgG422hyMc7HA2ULEC-ZSJ3O7zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.168.0/22
45.146.232.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:5a:d2:42:e5:82:61:f6:fe:eb:9a:e9:92:23:16:a5:06:cc:
78:5b:bf:4d:08:fd:ea:53:af:3a:ae:f6:2d:26:6e:5e:62:3b:
80:4d:ba:8a:4a:db:b6:28:5a:7d:74:de:7c:d4:0a:ef:37:ea:
86:56:c8:79:4b:99:7c:c0:04:f0:63:98:df:aa:a4:a3:ea:f5:
18:bc:46:41:3e:2e:98:33:5a:48:cd:f9:94:ee:8a:6d:3c:4b:
32:7e:02:f9:b7:3c:a4:87:a8:4c:a8:1b:82:8a:d7:a6:83:95:
44:be:ac:5a:c2:cc:27:16:1e:ec:07:c6:40:4f:11:67:fe:c6:
57:5a:0c:27:75:4e:fd:b5:d2:28:91:31:c5:02:40:8e:5b:b2:
e4:e4:ca:45:9a:1c:eb:ef:1f:33:fc:9c:e6:1a:b8:df:35:bc:
75:bf:8c:d3:6b:09:d6:78:7e:89:96:55:e6:f6:3b:1a:de:fb:
cd:0a:83:1c:37:37:7d:cc:8e:97:00:da:b6:77:a7:16:89:05:
c5:ce:93:2f:e6:02:70:37:ff:ad:c0:c9:26:a9:b8:bb:3e:49:
43:9e:4f:9a:6c:19:a1:b8:1a:48:8f:e2:62:bc:ec:71:a9:ae:
9f:c6:c3:25:d4:11:06:8e:a0:97:0f:2e:7c:6f:c1:63:2d:09:
21:69:fb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:38 2024 by rpki-client on console-ams.rpki-client.org