Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/p2be1mJc9rcz1jKSzN-eV2FxCRc.roa
File: p2be1mJc9rcz1jKSzN-eV2FxCRc.roa (raw, json)
Hash identifier: Z8XGc7+TjBlR+kx+8559eUshN1AqWHjrEHB/cuqgGSs=
Subject key identifier: A7:66:DE:D6:62:5C:F6:B7:33:D6:32:92:CC:DF:9E:57:61:71:09:17
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0189D3EE53A2C66B395E4837A8E8E6D53297
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/p2be1mJc9rcz1jKSzN-eV2FxCRc.roa
Signing time: Tue 08 Aug 2023 06:55:58 +0000
ROA not before: Tue 08 Aug 2023 06:55:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205663
IP address blocks: 45.146.234.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 05 Sep 2023 06:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:ee:53:a2:c6:6b:39:5e:48:37:a8:e8:e6:d5:32:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Aug 8 06:55:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a766ded6625cf6b733d63292ccdf9e5761710917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:db:25:72:a5:75:8c:22:fa:d4:39:d7:d4:
6d:c9:2e:22:83:ea:14:9b:ce:cf:78:98:61:4b:76:
60:94:5a:d8:c9:3e:3e:ff:10:e0:b4:51:e0:de:7b:
03:92:9e:d2:ca:67:67:c5:72:8e:cc:50:32:84:34:
a1:7c:58:1a:7d:2e:14:22:4a:3e:ca:e3:50:fd:54:
88:8d:5e:16:c0:0f:4c:29:6f:31:d4:86:2e:f3:95:
23:b1:cc:89:0a:5e:e9:95:75:59:25:75:cb:32:e5:
a8:ff:43:8e:07:44:f6:9f:4c:05:ab:d8:e9:8f:fb:
1f:69:bd:b7:68:19:a6:0e:f8:d4:dd:c5:03:96:89:
b2:5a:80:93:55:43:b5:8b:1b:ae:56:5a:ff:ce:fc:
92:2b:54:18:6b:34:18:c0:7f:86:85:f2:a7:b5:fb:
f8:c5:5a:b9:e5:85:de:3a:e3:c4:7d:0d:0e:fb:60:
9e:9d:26:3c:9f:b3:0a:e5:4b:18:78:32:8f:ce:6b:
3a:f4:29:fe:9b:43:fd:ef:28:f3:d6:70:4a:53:de:
c2:ab:8d:6e:d4:39:f8:bd:f7:67:33:12:ef:ae:61:
0a:68:73:cb:d0:04:f6:ba:a1:41:4a:8b:4b:17:1c:
08:ed:6e:6f:d6:14:20:97:5e:0a:3e:88:8f:7f:65:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:66:DE:D6:62:5C:F6:B7:33:D6:32:92:CC:DF:9E:57:61:71:09:17
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/p2be1mJc9rcz1jKSzN-eV2FxCRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.234.0/23
Signature Algorithm: sha256WithRSAEncryption
10:1a:0f:61:24:8f:37:0e:2c:92:88:d9:3b:10:3f:b5:39:02:
e7:45:0c:77:53:49:b4:93:e7:5d:7c:7c:8b:39:f2:0f:49:c4:
47:02:a9:f3:de:d8:70:b5:d4:23:d2:3c:df:d5:d5:0b:ef:93:
db:98:d6:25:d4:a1:f9:2b:95:63:b7:15:f7:65:ea:ca:c0:c3:
2b:4c:cf:a8:f3:eb:a4:6d:98:cf:06:c1:d2:49:69:53:b5:c0:
4b:da:cf:97:1a:fb:0a:cd:c2:0c:d5:ba:d3:7a:88:a2:f3:b3:
ce:5e:fd:77:d0:b9:58:eb:a3:ed:39:fe:42:a6:5c:2a:0d:7d:
70:e9:38:9b:e5:7e:1a:f8:cb:48:1d:a3:d3:a1:49:85:d7:35:
ac:9f:04:b6:fc:4c:61:54:b8:04:eb:f1:ce:1f:8a:40:22:4f:
a2:9c:0d:25:ef:76:25:ac:39:d6:7a:51:ce:93:e9:a5:73:e0:
48:b0:ce:d7:a3:97:8f:96:65:99:90:8d:28:87:0b:f0:0f:c2:
0d:9e:97:55:c0:3c:5b:44:41:00:19:b2:78:cf:32:e0:d4:ef:
83:68:fc:43:47:92:27:31:be:bb:82:41:a1:18:b6:e9:f0:d4:
30:9f:dc:e7:4f:0f:93:89:8f:d4:a9:a3:69:a8:39:1b:8c:5a:
56:31:17:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org