Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/GbxLAMdQlxH5pxkv0UJpl1lYckQ.roa
File: GbxLAMdQlxH5pxkv0UJpl1lYckQ.roa (raw, json)
Hash identifier: itNbx9ZrbMZXn+hGfDarFtmff0akwvWj59SGuQUd6O4=
Subject key identifier: 19:BC:4B:00:C7:50:97:11:F9:A7:19:2F:D1:42:69:97:59:58:72:44
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0187B50ED6E5A11B6B79CCBF3A5E56BED08D
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/GbxLAMdQlxH5pxkv0UJpl1lYckQ.roa
Signing time: Mon 24 Apr 2023 20:57:41 +0000
ROA not before: Mon 24 Apr 2023 20:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 45.149.92.0/23 maxlen: 24
80.246.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Aug 2023 08:23:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b5:0e:d6:e5:a1:1b:6b:79:cc:bf:3a:5e:56:be:d0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Apr 24 20:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19bc4b00c7509711f9a7192fd142699759587244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:32:35:d8:a5:ac:e8:ad:99:fb:ad:96:99:3e:
0b:af:d3:37:62:2a:0f:71:92:71:ac:e1:63:17:02:
39:c0:db:4e:41:7f:1f:01:4e:7e:f3:e9:43:dd:72:
5a:ec:5f:a3:bc:2b:de:97:e8:c3:14:e0:1e:05:48:
ba:46:df:be:fd:d2:36:a9:d6:0d:9b:b6:37:19:e6:
fa:87:b9:9a:b3:a6:b8:ef:63:9c:36:75:56:cd:64:
fb:63:e3:1f:45:b9:be:97:dd:48:4a:11:c1:ba:c1:
f0:62:ba:db:ff:e2:31:62:9e:7c:99:56:e0:84:76:
e5:10:8b:54:54:a2:c5:ea:62:43:2f:f8:c0:81:4e:
4e:f4:1e:02:9b:66:3c:58:c9:57:8c:b8:a1:3b:4e:
85:76:6c:ef:5f:3d:c8:02:08:a3:41:9b:90:3c:73:
1f:07:8d:ee:d1:45:17:b1:c9:57:c8:d8:3b:42:8f:
8e:35:32:ea:b5:a5:d9:62:9a:bf:8f:99:34:d9:0d:
c4:fd:ac:50:85:df:dc:59:00:86:1f:58:d2:2c:97:
ce:7c:78:fe:82:ef:cc:dd:ed:89:e9:53:1c:2d:19:
b0:d5:f4:49:fd:b3:75:42:25:ca:6e:18:cb:c4:60:
86:41:6a:92:61:9f:6c:cd:5d:63:d0:42:e3:cf:a8:
d7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BC:4B:00:C7:50:97:11:F9:A7:19:2F:D1:42:69:97:59:58:72:44
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/GbxLAMdQlxH5pxkv0UJpl1lYckQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0/23
80.246.228.0/24
Signature Algorithm: sha256WithRSAEncryption
44:3b:ed:78:a8:9f:da:82:87:19:ae:ac:2b:4c:5c:0c:c9:ec:
69:4e:f8:5a:48:d8:9d:31:3e:9b:2e:84:eb:f8:8d:a6:95:1d:
fe:c4:68:95:c8:d8:70:9c:06:77:54:59:93:76:fc:47:a2:5f:
4c:15:9e:2e:ca:1a:17:ad:b1:7e:90:97:38:f5:d5:7a:f8:f0:
ac:11:3f:e6:97:4c:fc:24:d2:04:91:b4:70:4a:36:a0:a9:e7:
07:09:0c:71:f1:86:c8:04:c3:86:65:1f:69:5a:13:81:9a:6c:
88:7f:d7:a5:6b:fc:7b:cd:35:24:c5:0e:51:91:27:c6:bf:3b:
9e:54:ef:7b:db:c9:ac:a5:e9:ee:46:09:79:c9:58:35:7e:e2:
6c:f0:dd:03:bc:56:78:36:23:5a:28:83:73:81:43:b8:b9:eb:
e1:c1:81:70:b0:15:db:0c:f2:67:36:24:56:ae:19:96:9e:38:
ca:79:3f:8f:8d:0c:5c:11:19:0b:37:f7:bc:c0:23:50:bc:5f:
2f:a4:ba:01:fb:75:d6:29:00:27:f7:5c:be:52:98:7c:06:49:
83:a2:98:21:64:00:b3:5b:b0:52:43:3e:b9:2c:a1:db:4c:d9:
a3:ba:27:1c:13:e7:74:0c:b7:f8:cf:21:c1:2f:1d:3e:a9:9d:
f3:75:91:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:31 2024 by rpki-client on console-ams.rpki-client.org