Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/GKfGbI98snEGlxjCl5AxAIi3IT8.roa
File: GKfGbI98snEGlxjCl5AxAIi3IT8.roa (raw, json)
Hash identifier: x8Tj9RtD/2eLmpxKa10YXEChjHDzboq6DdNitJZ94uY=
Subject key identifier: 18:A7:C6:6C:8F:7C:B2:71:06:97:18:C2:97:90:31:00:88:B7:21:3F
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 01888BDE746895DC07A2E9DCD6F6570C8977
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/GKfGbI98snEGlxjCl5AxAIi3IT8.roa
Signing time: Mon 05 Jun 2023 14:03:11 +0000
ROA not before: Mon 05 Jun 2023 14:03:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.37.0/24 maxlen: 24
45.149.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 22:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:de:74:68:95:dc:07:a2:e9:dc:d6:f6:57:0c:89:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Jun 5 14:03:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18a7c66c8f7cb271069718c29790310088b7213f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:87:f1:48:2d:53:a1:1b:ed:37:e9:ef:6c:
21:79:95:b6:61:b7:8e:95:2e:28:7f:a8:d3:d9:7a:
6c:bf:b2:60:2d:ae:b1:bb:9e:11:e2:2e:7f:f6:6f:
fe:5f:a7:55:13:07:62:9f:ae:6f:bb:ed:10:76:ff:
1f:10:e6:90:61:8e:c9:92:ec:09:18:89:1e:51:6b:
5c:78:6a:f6:26:72:4d:2a:1e:ab:5f:1d:1d:55:c9:
bb:50:58:f3:f8:54:e3:aa:85:a5:c0:30:a9:67:7b:
44:a7:c0:3a:0e:bc:d6:83:2e:6c:e3:12:4a:4c:41:
de:34:3f:bf:b8:95:ef:13:09:71:33:90:36:b4:f9:
af:2c:35:ca:1b:a4:bd:f8:6a:c1:0a:b3:6c:80:0c:
f1:d2:55:43:da:06:82:d6:85:09:5d:7f:46:f6:02:
35:fc:a0:a9:e6:c9:15:8c:aa:ed:46:22:d7:d1:c7:
db:0c:a1:c9:9e:12:fd:ac:fc:a2:ee:09:e2:fe:71:
44:fb:2a:72:2c:30:6f:d2:9f:32:10:ec:e1:e3:ae:
e8:0f:db:fa:e2:5f:0e:2f:47:16:6d:37:4f:8a:f0:
f3:42:3c:6b:c0:d0:f4:d5:e2:ac:12:2e:59:8f:9a:
b7:0d:b5:54:2d:47:86:04:86:2b:b0:bb:ce:d1:c2:
d2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A7:C6:6C:8F:7C:B2:71:06:97:18:C2:97:90:31:00:88:B7:21:3F
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/GKfGbI98snEGlxjCl5AxAIi3IT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.36.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:46:48:bd:f4:da:00:88:5e:7e:75:d7:27:1c:1d:b0:46:82:
5d:93:9e:df:ce:21:00:af:9c:85:0e:54:24:87:16:2f:52:e1:
c6:e9:28:06:8d:a4:d6:a4:89:73:1e:b1:86:70:67:10:7f:7f:
c2:00:5b:c7:4b:97:84:7c:3c:44:68:5f:c7:af:df:8a:eb:40:
5e:d6:41:2c:13:87:54:6c:5d:e5:73:36:31:bf:c8:29:a1:55:
1e:66:d3:88:92:44:70:e4:d9:a3:8b:7e:28:91:e6:3a:50:60:
78:05:93:07:c7:c8:1e:97:1e:9e:39:b2:fb:15:68:0d:53:c4:
d7:fd:76:8f:9e:3a:85:52:54:33:c2:c3:ba:d5:8f:54:2f:11:
b6:1c:62:e7:bb:24:fb:76:2e:15:20:e8:21:6a:2a:18:df:f1:
d3:0a:13:30:d9:32:b5:6f:27:e3:e5:ed:99:a0:8e:6b:4e:29:
8d:f3:ce:1d:bc:f8:db:8a:71:c0:8c:6e:bb:b2:6a:ec:ca:77:
89:98:70:f4:d0:24:de:45:8b:9a:0e:73:a1:2d:6e:50:aa:f0:
68:54:a6:70:80:d4:a3:74:e9:be:14:d1:f2:46:19:ac:24:4a:
92:13:94:88:a6:41:cd:13:ad:49:2a:67:a0:bc:62:0d:db:fe:
fa:c0:3c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-fra.rpki-client.org