Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/gblWuwRmE56i84LTzAiShSJj_HI.roa
File: gblWuwRmE56i84LTzAiShSJj_HI.roa (raw, json)
Hash identifier: /wCV6k09k8Sa+usdx5vbZJHPtk3PDZM+YXkaEHOuSUk=
Subject key identifier: 81:B9:56:BB:04:66:13:9E:A2:F3:82:D3:CC:08:92:85:22:63:FC:72
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 018FC5476A6281A2FA6EA1BE867745FB74D8
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/gblWuwRmE56i84LTzAiShSJj_HI.roa
Signing time: Wed 29 May 2024 16:55:42 +0000
ROA not before: Wed 29 May 2024 16:55:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 5.181.200.0/24 maxlen: 24
5.181.201.0/24 maxlen: 24
45.158.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 05:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c5:47:6a:62:81:a2:fa:6e:a1:be:86:77:45:fb:74:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: May 29 16:55:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81b956bb0466139ea2f382d3cc0892852263fc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:a3:f9:0f:6b:ea:9d:39:86:ce:94:80:ac:
d5:b6:bd:16:fb:21:4d:88:cc:65:cf:44:d7:e9:f4:
7a:f8:7d:24:b9:65:5b:f5:8f:62:13:e6:0b:cf:c8:
2d:a9:a7:6f:aa:25:2f:79:ff:aa:15:d8:84:67:a6:
bd:a6:b5:56:17:0d:ae:06:d5:17:b0:f7:71:9e:ce:
0f:18:d7:9e:17:52:fa:d2:85:15:5c:6d:48:b8:a6:
57:b5:2d:d7:3c:d3:96:22:41:91:a7:10:2e:0b:88:
f0:8d:61:06:d2:34:33:5d:51:39:11:7e:44:49:cf:
0a:cc:b5:26:53:e3:28:8f:b8:9d:e3:1a:9e:28:6d:
e2:96:29:21:b6:ca:2f:31:16:99:b9:83:f1:ca:93:
cb:99:df:0b:c9:39:58:9b:89:c4:98:b5:26:f2:82:
cb:95:7b:55:ae:22:6c:71:99:82:3d:3e:cb:0d:7b:
09:dd:6a:d4:8d:2f:ce:c8:8c:a6:3a:b3:92:b8:47:
8b:48:0c:e9:c1:84:cb:5f:27:59:4b:92:20:83:65:
9f:ed:ca:7f:86:d9:39:5c:c0:74:6e:6f:08:ab:87:
a1:39:0c:77:9e:9b:70:32:17:73:5c:aa:c3:e1:59:
8b:fc:d6:0e:88:bc:9a:b0:cf:43:bb:ec:47:f4:08:
f9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B9:56:BB:04:66:13:9E:A2:F3:82:D3:CC:08:92:85:22:63:FC:72
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/gblWuwRmE56i84LTzAiShSJj_HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.200.0/23
45.158.83.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f4:1c:90:f0:cd:f8:ba:e5:9d:c4:b7:52:36:89:9f:83:e0:
de:d5:ed:ca:7d:64:41:b9:3a:f1:e4:12:50:fb:60:a1:e4:dd:
92:19:a0:46:b7:67:7c:d4:15:20:38:1d:33:46:95:40:05:de:
46:5f:08:5d:01:45:12:70:8a:e0:51:49:c7:00:e9:62:6d:46:
67:98:33:6f:42:14:3b:2f:6d:ef:a7:23:bb:e5:69:4d:08:04:
d9:b1:4d:91:d8:b4:38:35:3e:cb:1a:bb:ae:c7:f4:60:b1:92:
59:0a:fa:a7:3d:4e:29:27:01:64:de:d0:e7:01:60:08:e5:b7:
ca:f9:71:c2:5c:93:a6:aa:a6:09:06:50:ba:8b:c2:4d:0d:b5:
84:3a:4a:a3:ae:82:7e:77:a9:e6:00:c8:b2:ea:e9:00:dc:5a:
f6:0b:19:f9:3f:fe:7d:08:29:72:c4:d8:d7:80:13:2d:e8:48:
c4:92:5b:a5:ef:ab:44:ec:b9:30:4f:af:a2:94:07:05:a5:39:
ad:f4:46:2a:32:36:f3:02:0d:a5:d6:dc:0f:34:02:76:d0:72:
fd:1a:71:1d:48:be:22:a3:ce:56:0a:18:15:a9:df:d0:55:0a:
50:79:53:4b:67:ce:24:bd:99:f7:6f:21:89:4c:a8:2d:7f:c4:
65:c8:fe:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 07:23:12 2024 by rpki-client on console-ams.rpki-client.org