Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/gGKUZMtRKcE47CRFxbz9LBH5F3s.roa
File: gGKUZMtRKcE47CRFxbz9LBH5F3s.roa (raw, json)
Hash identifier: t9NmkiNTpr31kDQo6xsRQDeMtwYzqXHfQAsZEHKsIR8=
Subject key identifier: 80:62:94:64:CB:51:29:C1:38:EC:24:45:C5:BC:FD:2C:11:F9:17:7B
Certificate issuer: /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Certificate serial: 0187061F980335691B5475AD0ECC9D6D5C1D
Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/gGKUZMtRKcE47CRFxbz9LBH5F3s.roa
Signing time: Tue 21 Mar 2023 21:42:26 +0000
ROA not before: Tue 21 Mar 2023 21:42:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61970
IP address blocks: 45.93.90.0/24 maxlen: 24
45.93.91.0/24 maxlen: 24
185.48.145.0/24 maxlen: 24
185.48.144.0/24 maxlen: 24
185.48.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:06:1f:98:03:35:69:1b:54:75:ad:0e:cc:9d:6d:5c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Validity
Not Before: Mar 21 21:42:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80629464cb5129c138ec2445c5bcfd2c11f9177b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:67:f1:6d:6d:7b:ba:ae:11:99:15:12:fe:
ee:c1:7f:7f:8a:5a:92:05:71:e6:3e:ed:5b:34:5b:
fe:75:e7:bf:21:a6:1f:67:1a:bb:f8:06:d2:b6:43:
d8:98:a7:e8:04:43:b8:c5:e7:47:d4:e9:14:09:5d:
be:b5:46:5b:13:7d:b5:f1:a9:5a:65:f5:46:42:be:
0a:18:a1:57:07:23:7f:e5:6d:a5:51:a9:6a:58:b1:
2b:75:73:10:97:f0:ce:ce:ab:3a:11:c1:df:fa:47:
c8:bb:b3:3a:49:d2:5b:9e:c2:0f:88:0f:0a:70:d1:
24:b8:96:90:bd:89:bb:c8:47:f5:c4:fc:dc:57:3d:
7c:2b:6c:e1:47:c5:f6:a2:5c:f3:17:24:26:2f:07:
ac:3c:09:9c:6a:14:e3:b5:84:32:70:6a:df:ee:91:
87:27:eb:63:27:e6:a2:e6:a2:a0:82:72:29:31:36:
47:94:f4:e1:a6:4f:0c:af:d7:10:e9:25:37:fe:54:
54:ed:77:00:b5:fa:e1:ca:08:73:b2:8f:85:18:aa:
a0:bc:4d:00:ab:86:eb:90:04:12:7e:d4:7a:ac:c0:
50:df:bd:e7:9b:48:b6:8f:73:cd:74:eb:3b:bf:a7:
1a:dd:47:67:b9:b6:df:90:51:b8:4d:5f:4e:54:d1:
00:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:62:94:64:CB:51:29:C1:38:EC:24:45:C5:BC:FD:2C:11:F9:17:7B
X509v3 Authority Key Identifier:
keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/gGKUZMtRKcE47CRFxbz9LBH5F3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.90.0/23
185.48.144.0-185.48.146.255
Signature Algorithm: sha256WithRSAEncryption
9e:5a:74:ed:54:bd:16:e3:fe:43:2f:a5:93:10:a3:f8:45:9c:
6c:66:2e:ea:46:1e:c3:a4:9f:a4:00:af:5b:d0:b9:46:04:ee:
54:a1:76:3c:06:34:37:10:06:40:a5:bb:7e:4d:e9:00:65:21:
b4:30:ff:a3:78:f9:fd:2f:ac:38:9b:af:40:3a:8e:68:d8:9e:
ff:09:ca:bf:24:de:57:93:73:13:4b:e6:50:12:f3:10:63:33:
41:14:aa:11:e6:36:c7:d4:db:86:cf:f7:d8:e9:17:75:48:53:
64:a4:2d:24:34:fa:1e:7c:0a:78:f2:72:79:36:8b:34:94:55:
6a:4c:98:df:1f:7f:62:3e:7c:14:8a:70:18:62:44:6b:b4:d8:
f1:b6:54:c0:6e:31:0a:33:32:42:f2:93:3e:26:db:80:a0:bd:
79:b9:b5:3c:36:fe:c5:35:08:cc:17:b5:4d:33:88:9d:24:6b:
e3:5e:68:de:52:a3:50:df:54:6f:cb:a9:0e:c4:ea:3e:c2:b2:
7c:8e:7d:89:9c:ae:25:52:c0:b8:ea:1e:d0:62:db:d9:a9:50:
a9:28:ab:07:43:5f:b2:b1:a2:97:88:d1:88:ac:84:c7:71:99:
91:45:e9:10:b2:a7:b5:4e:3a:79:a6:70:27:02:bf:7d:cd:63:
07:cf:f4:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 4 13:05:49 2023 by rpki-client on console-ams.rpki-client.org