Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/gJURN6F_oD_VnuX9TixwTrhQq_g.roa
File: gJURN6F_oD_VnuX9TixwTrhQq_g.roa (raw, json)
Hash identifier: 98m4DrBLzymZDojKLXRowxr5BlUO37mMk5758owHvmQ=
Subject key identifier: 80:95:11:37:A1:7F:A0:3F:D5:9E:E5:FD:4E:2C:70:4E:B8:50:AB:F8
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 018C00F84BC1A17A9572322E398E81113165
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/gJURN6F_oD_VnuX9TixwTrhQq_g.roa
Signing time: Fri 24 Nov 2023 10:55:21 +0000
ROA not before: Fri 24 Nov 2023 10:55:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:00:f8:4b:c1:a1:7a:95:72:32:2e:39:8e:81:11:31:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Nov 24 10:55:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80951137a17fa03fd59ee5fd4e2c704eb850abf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f5:a9:98:c1:c3:d8:be:4a:c6:db:9e:35:6e:
68:8a:35:6c:f3:9c:90:0f:a9:7c:7f:90:79:6a:52:
cd:5f:cf:8b:8f:f9:ea:72:72:39:4b:b3:9d:fa:9a:
af:0a:16:fb:cf:03:95:47:95:27:05:ab:0f:8d:c6:
1e:90:a7:3c:52:1a:23:2a:6c:1b:f4:3c:be:9c:7f:
5a:80:54:c4:da:dd:58:a6:cc:56:62:d6:e2:b7:06:
ca:57:1f:5e:07:11:68:89:03:51:78:93:f3:a9:61:
9a:89:4b:2f:9f:f9:f3:89:02:34:89:48:54:5c:03:
f8:77:09:62:9e:b4:54:87:63:ec:02:d1:df:16:47:
49:dd:bf:d3:29:0f:0f:2d:50:74:72:5f:e0:4c:d2:
26:5c:90:9c:f2:35:de:e5:2b:85:3f:46:8c:3d:86:
91:a5:ea:fe:af:c8:1d:d3:15:4d:6f:95:8d:2f:42:
7e:4c:52:a0:ce:c5:68:72:cc:7c:68:d1:e8:a5:2b:
3b:bd:16:96:66:ac:98:66:e4:3b:06:4c:2a:4c:fd:
e0:20:20:d3:44:c5:51:5b:73:1a:c9:c3:ff:db:01:
c7:16:6d:54:27:ae:99:e1:28:84:bf:52:ec:df:99:
9e:20:54:4e:19:8d:71:5d:03:a4:a1:fc:f8:b7:cc:
79:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:95:11:37:A1:7F:A0:3F:D5:9E:E5:FD:4E:2C:70:4E:B8:50:AB:F8
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/gJURN6F_oD_VnuX9TixwTrhQq_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.36.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c5:9f:7d:1c:90:64:f4:3c:40:4f:fe:b7:bd:3d:e2:fc:5e:
79:ef:30:46:b5:a3:9e:67:31:41:2c:54:33:ee:5f:3b:f7:0e:
0c:c4:0c:2e:94:b6:97:74:3c:57:af:a8:06:ea:cf:74:59:70:
e6:48:22:02:5b:01:52:01:9c:97:6f:9c:e5:5d:a7:ee:d1:96:
f7:0b:79:33:48:42:ea:a3:10:3d:ec:0a:21:20:be:ff:e0:73:
4d:48:f8:b3:5f:db:e5:23:45:0b:5f:0d:ee:f1:e2:82:ec:67:
81:72:d0:64:12:9f:81:50:c5:0c:63:1e:fc:27:88:76:81:fc:
6f:70:f5:7d:47:17:ad:e9:14:af:55:19:de:9e:47:f8:f8:86:
00:86:ed:7a:02:f7:33:76:70:ad:7c:19:17:95:08:67:b0:5b:
5b:bf:04:56:2a:9e:c1:bb:aa:b4:2b:30:52:d3:f3:9a:49:83:
04:f1:b7:43:18:df:ef:a4:c3:65:47:d3:6d:b7:ca:41:95:69:
43:41:4f:cc:47:92:a9:6f:3f:9c:ab:68:b0:fb:d0:bf:e4:67:
c8:44:ed:16:6d:01:7b:a4:ae:d5:49:ac:f6:48:10:13:56:10:
10:a3:5f:e3:14:38:bf:af:5b:36:a8:20:13:95:29:eb:55:bf:
2a:b9:5e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-fra.rpki-client.org