Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5gdGCG7pNoXCOWmwafcFsru1v4g.roa
File: 5gdGCG7pNoXCOWmwafcFsru1v4g.roa (raw, json)
Hash identifier: +p+NGlbGJqpgn9aiiAwBJzR5WnRbNxBqW1/9dnRpc4w=
Subject key identifier: E6:07:46:08:6E:E9:36:85:C2:39:69:B0:69:F7:05:B2:BB:B5:BF:88
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53F52E4B902AC6FA92B552A1E58263
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5gdGCG7pNoXCOWmwafcFsru1v4g.roa
Signing time: Sun 01 Jan 2023 07:55:19 +0000
ROA not before: Sun 01 Jan 2023 07:55:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46261
IP address blocks: 45.138.210.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f5:2e:4b:90:2a:c6:fa:92:b5:52:a1:e5:82:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e60746086ee93685c23969b069f705b2bbb5bf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:76:ae:95:35:ee:ea:e1:42:dd:5e:a2:c4:cb:
c7:02:70:97:ac:a3:67:6a:f6:f5:c5:f0:43:76:2e:
53:fe:5f:0f:6d:e5:33:b7:6b:24:04:29:bf:1f:57:
0f:83:13:d8:88:b6:2f:bb:fc:7f:62:74:f5:18:bc:
36:77:7f:47:1e:a8:a8:5c:f4:8f:47:cb:d4:a8:50:
94:9c:09:36:3f:f1:51:87:6d:97:30:7e:e3:21:de:
8b:94:42:43:1d:d4:a5:91:fc:d2:f0:0f:1b:da:41:
65:cc:14:a9:d4:c6:83:93:2b:c7:71:3f:b8:79:9b:
d7:6c:bc:13:3b:d1:b8:c7:e4:29:06:81:db:fc:b0:
d8:fc:a3:de:23:a5:d8:b9:ad:c0:23:2b:f8:2d:f5:
7e:ef:2b:2f:f8:0c:e2:ee:a2:2d:4b:18:89:a8:0c:
ac:2c:ab:57:05:f6:5f:fc:2d:f0:85:78:f0:31:1e:
1c:5d:d0:ff:50:a3:cb:09:6b:66:cb:b4:31:c6:07:
23:4a:0e:32:c7:8c:4a:ff:76:a6:ee:0f:45:02:2f:
1f:81:d7:ae:fd:2e:9e:88:09:16:d9:ec:76:e4:3d:
15:c7:23:b0:5f:ba:11:b3:88:83:bb:0f:14:dc:64:
27:2b:2f:e3:03:5a:98:90:c4:85:79:85:31:ed:dc:
d2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:07:46:08:6E:E9:36:85:C2:39:69:B0:69:F7:05:B2:BB:B5:BF:88
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5gdGCG7pNoXCOWmwafcFsru1v4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.210.0/23
Signature Algorithm: sha256WithRSAEncryption
27:04:67:f5:c1:61:9d:af:c2:fe:d5:19:90:de:0b:09:ef:2e:
ab:d2:07:31:e3:4f:c5:ad:31:d6:78:42:00:f2:2f:ee:67:9c:
18:d6:bb:43:50:6f:82:68:c5:41:90:f3:0e:a7:3c:28:cf:c8:
0f:49:50:1e:83:1f:80:83:bf:36:aa:e9:10:a5:d3:75:ee:1d:
40:30:3c:3f:4d:de:82:c3:9f:00:bf:e9:bb:c0:d0:cb:fb:a4:
07:08:0a:52:d4:b4:11:cd:5e:9e:ed:c8:7b:1f:9e:20:13:ee:
64:18:e0:9e:f5:1b:bb:bc:5a:f0:c5:88:25:ed:f2:9f:7a:fe:
fa:20:ab:de:ad:f9:45:7a:63:17:94:f1:57:0e:c3:9b:4c:89:
d7:9d:6d:f0:38:bf:e8:9b:2b:f9:16:77:51:d5:75:47:46:cd:
30:78:63:79:5b:74:8e:fc:b0:2c:0c:93:49:c5:2d:be:b7:ad:
64:dc:97:33:fb:7c:6e:2d:e1:da:26:87:e6:7e:f6:ab:42:ba:
86:d5:0a:7c:4e:83:91:e1:79:32:e2:03:9d:c0:b2:45:f2:46:
ed:cf:52:b2:94:9a:ec:70:43:8e:15:89:54:d8:59:60:6d:15:
e9:25:0c:fc:c6:51:2c:d9:53:e0:c1:8f:98:43:b1:f1:45:8d:
88:7f:4e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:55 2024 by rpki-client on console-fra.rpki-client.org