Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/GCYVadVuXXolSSmSXcJi9uGxDr4.roa
File: GCYVadVuXXolSSmSXcJi9uGxDr4.roa (raw, json)
Hash identifier: feJyRcI2ECwN4YSpRD3BsDerhLPnhadrv0zRaZiqODk=
Subject key identifier: 18:26:15:69:D5:6E:5D:7A:25:49:29:92:5D:C2:62:F6:E1:B1:0E:BE
Certificate issuer: /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial: 0185719E723773FD69EFDA3B265B5AB5978F
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/GCYVadVuXXolSSmSXcJi9uGxDr4.roa
Signing time: Mon 02 Jan 2023 08:34:47 +0000
ROA not before: Mon 02 Jan 2023 08:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 45.95.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:72:37:73:fd:69:ef:da:3b:26:5b:5a:b5:97:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Validity
Not Before: Jan 2 08:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18261569d56e5d7a254929925dc262f6e1b10ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:ae:55:76:6a:09:fd:90:25:20:9e:17:b3:
d7:4e:a9:04:ac:03:55:f5:2d:bf:f4:c6:e3:35:57:
e5:f2:bc:d1:79:7a:65:46:cc:27:3d:44:2c:0e:35:
ff:e4:10:42:f1:bc:05:f8:74:fd:1b:20:b1:db:b4:
ef:10:fa:5d:af:a8:c8:7e:dd:8e:73:29:02:a3:39:
cf:11:6b:ce:85:0d:bf:09:9b:34:62:2b:94:b5:b0:
15:4a:3a:69:bd:0d:23:70:4e:0f:d0:87:6e:e8:7c:
e7:1b:37:58:69:9a:79:39:4a:f8:df:51:45:c1:6a:
0c:63:02:13:c1:e0:44:ea:7b:77:6b:57:74:52:c5:
83:fd:66:3e:db:87:a9:c6:ee:c4:e6:2d:23:71:29:
ee:71:80:49:12:d6:c2:df:f4:4a:4c:ab:3b:55:eb:
2b:4f:19:c4:60:3a:a8:4b:ed:6b:03:58:1a:bb:9e:
0c:64:2c:a8:5d:69:5d:d6:6c:cb:ac:6c:5a:c0:90:
40:82:cc:7e:35:1d:bf:0a:19:0a:8b:03:fa:4b:e2:
d9:42:a9:58:e4:e3:78:6c:1d:42:82:f9:a3:ea:37:
ee:70:7b:f9:d6:81:d8:c1:e9:65:b1:df:dd:1b:71:
64:8d:22:4e:5c:e4:ba:0c:d1:55:3e:c0:fb:ba:03:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:26:15:69:D5:6E:5D:7A:25:49:29:92:5D:C2:62:F6:E1:B1:0E:BE
X509v3 Authority Key Identifier:
keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/GCYVadVuXXolSSmSXcJi9uGxDr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.94.0/24
Signature Algorithm: sha256WithRSAEncryption
73:b5:74:d3:7f:70:48:ef:f7:52:16:90:27:2b:d2:58:6e:85:
72:f5:e5:62:69:40:1d:9a:f3:b2:1e:89:93:0b:af:4d:c9:f3:
a4:2a:b4:94:b7:4d:31:2f:f9:be:19:e3:12:40:e6:e8:cb:d5:
4d:0b:be:60:da:b1:49:e1:1b:d2:d5:bd:d1:53:19:ea:d0:fa:
f8:ce:dc:1b:cd:cb:09:5d:64:b3:b6:1b:d8:d8:cd:6b:8d:16:
52:b4:89:36:13:b3:8e:10:48:96:cc:4b:48:25:fd:a3:c7:57:
ff:86:0c:62:41:32:3a:1c:2e:f2:b6:57:49:1c:80:b2:c9:f8:
aa:31:37:8f:ac:79:13:e6:0a:3f:3f:87:27:9e:69:03:20:b2:
03:71:d9:92:5b:47:6f:13:d4:67:5e:c4:63:39:11:95:80:6a:
d2:88:44:11:56:0b:b8:26:62:fc:d2:36:a2:4c:05:7a:90:85:
ab:be:ea:a3:a6:ab:84:86:78:0a:10:ce:43:ee:4e:52:10:eb:
8e:ef:8d:62:25:b5:ae:5f:c9:f4:48:18:6b:df:45:7b:9f:f1:
08:57:c2:e8:4c:8b:07:63:bb:fe:3f:9e:74:59:e3:f5:a6:9d:
01:77:6c:43:20:e5:7d:5f:57:d6:e3:b2:3e:4b:1a:66:ef:ae:
e1:28:64:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:09 2024 by rpki-client on console-ams.rpki-client.org