Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/ga5l7Bwv4HXZfrwRXZNjicFl1E8.roa
File: ga5l7Bwv4HXZfrwRXZNjicFl1E8.roa (raw, json)
Hash identifier: H9+J/DAeeVODXZQj8lmM1MciM6oyPj+KsJ6z7VBoMjo=
Subject key identifier: 81:AE:65:EC:1C:2F:E0:75:D9:7E:BC:11:5D:93:63:89:C1:65:D4:4F
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01888FBC25855FB7E662BDB4997E70C35CA9
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/ga5l7Bwv4HXZfrwRXZNjicFl1E8.roa
Signing time: Tue 06 Jun 2023 08:04:12 +0000
ROA not before: Tue 06 Jun 2023 08:04:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.84.112.0/23 maxlen: 24
31.193.240.0/22 maxlen: 22
45.84.114.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 11:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:bc:25:85:5f:b7:e6:62:bd:b4:99:7e:70:c3:5c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jun 6 08:04:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81ae65ec1c2fe075d97ebc115d936389c165d44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:87:3d:74:46:20:83:a5:af:b2:81:76:de:
44:99:01:d1:53:20:98:db:8d:51:f5:ec:e1:cd:8b:
3b:98:e5:58:b2:db:22:b5:73:f6:e3:60:f2:cd:16:
de:9c:54:20:ba:cf:80:93:03:8a:09:f7:90:a6:99:
cb:27:5f:c1:b9:86:07:c0:a7:d1:86:36:90:e4:37:
9f:34:8a:b7:fa:75:12:6d:2f:c3:a2:cb:d2:fe:1a:
70:2f:dd:b8:95:80:e9:f9:6d:95:98:39:15:91:41:
75:7d:bf:33:eb:0f:bf:fd:00:df:b4:66:c9:d9:1d:
e8:3d:7c:a3:e2:e7:f9:75:22:cc:c9:d0:7c:14:a1:
b3:d4:dd:9c:b2:77:3d:98:8b:83:f2:5e:28:47:8c:
a5:a0:1c:21:c5:a4:5f:63:6d:fe:ab:3e:f2:ed:e3:
2a:26:62:7f:b2:13:52:38:f0:e3:3d:73:9d:3c:02:
01:54:fb:ed:8c:f0:24:28:90:64:83:76:c0:dc:86:
99:5f:77:19:d4:ed:6e:3b:5b:76:f0:18:47:65:88:
b9:e8:7d:d4:7a:63:2c:7e:02:11:97:bb:8c:61:8e:
a3:f6:a7:27:4b:32:8c:a0:77:ab:81:51:43:ef:f6:
d3:48:7a:ea:a4:90:ad:9c:53:a5:29:78:63:f7:18:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AE:65:EC:1C:2F:E0:75:D9:7E:BC:11:5D:93:63:89:C1:65:D4:4F
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/ga5l7Bwv4HXZfrwRXZNjicFl1E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.240.0/22
45.84.112.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:78:fc:2a:43:dc:52:15:94:3a:3e:77:b9:47:04:05:0b:90:
07:da:ae:30:cb:cc:ac:30:31:38:ff:e0:b1:89:42:7e:97:5d:
03:48:c9:32:ae:2c:d6:6b:f2:ed:dd:a5:86:4e:5a:46:c4:1c:
10:3d:3d:ac:9b:14:b2:6d:6a:08:4e:e4:97:14:0a:73:0d:68:
1d:23:b2:1c:22:e2:50:17:38:c2:84:07:56:f2:39:47:4b:5e:
d3:2b:df:d9:89:98:57:cf:50:93:5d:6c:19:e9:70:93:46:99:
0b:91:13:96:13:a1:c4:c2:42:c1:d7:2e:1f:57:da:d4:7b:36:
e0:b5:1b:15:a1:f9:e2:74:1c:70:68:95:6c:d9:59:ec:d2:ce:
e3:22:ca:51:1c:2f:6b:5b:4a:b0:da:2f:99:d2:c3:b4:5a:d2:
31:5b:1e:fa:90:f3:7c:ca:9f:f9:99:9e:87:a9:49:ed:98:ad:
21:df:09:80:79:98:3a:1d:11:db:8f:c7:b8:5d:b8:38:7d:3f:
73:04:12:27:0d:37:99:b1:4a:eb:2c:b4:40:d2:d6:4b:d9:55:
43:48:d3:99:e1:56:69:68:7d:00:b3:28:24:84:6a:26:be:ab:
7c:8b:8b:8f:f0:60:fc:dc:34:9d:6b:fe:a0:c7:3a:d1:cd:44:
f8:2a:7e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:26 2024 by rpki-client on console-ams.rpki-client.org