Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/gSZieenPqOBH1H7ObOpY46PTwsI.roa
File: gSZieenPqOBH1H7ObOpY46PTwsI.roa (raw, json)
Hash identifier: yqCz3o5VcuzA00izYIUnLhA2EL6xKlnHmpF3AF8ssmk=
Subject key identifier: 81:26:62:79:E9:CF:A8:E0:47:D4:7E:CE:6C:EA:58:E3:A3:D3:C2:C2
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C5416109917D6F8E2CCB18071BB4C95
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/gSZieenPqOBH1H7ObOpY46PTwsI.roa
Signing time: Sun 01 Jan 2023 07:55:27 +0000
ROA not before: Sun 01 Jan 2023 07:55:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 45.138.210.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:16:10:99:17:d6:f8:e2:cc:b1:80:71:bb:4c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81266279e9cfa8e047d47ece6cea58e3a3d3c2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:da:ac:e9:14:01:ef:f1:70:e1:ca:10:6c:
e2:f1:60:3f:d5:c1:b5:9c:e1:fe:fa:fa:50:0e:58:
7f:2d:78:05:9e:70:c2:a9:9d:a4:90:dd:9b:68:d1:
40:f6:e4:2f:1c:0c:44:9b:7e:09:89:56:49:59:2b:
4f:db:be:c6:02:b8:05:86:65:f3:7d:08:c7:8e:f0:
1a:b2:87:94:90:f1:4a:29:cf:9e:62:2b:d5:69:64:
05:b8:60:ac:a1:15:98:af:d0:c4:6b:a9:f6:1d:42:
f0:09:57:a9:5c:ae:8d:f9:08:bb:7c:21:e5:d2:db:
9f:b9:35:84:9f:8e:f9:6c:bc:78:29:7b:a4:23:c8:
82:fe:c6:3c:40:cd:3e:4c:b0:e6:47:28:50:31:b7:
da:14:79:79:38:4f:6a:07:51:da:63:ac:c9:7c:20:
eb:60:68:94:17:30:24:0e:63:e4:77:fd:c8:56:b2:
81:a0:cb:66:b4:83:3e:42:63:86:de:ef:26:20:a0:
02:6e:52:07:bb:3e:ab:d7:23:b7:1b:f2:6b:99:60:
7a:fd:bf:be:7d:da:0f:f9:fd:78:c7:4b:fa:78:30:
1f:cd:aa:a1:4a:04:b7:91:69:34:48:7d:41:e4:71:
ac:f6:8d:02:5e:2b:66:0c:1d:5a:64:a0:c6:1c:e4:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:26:62:79:E9:CF:A8:E0:47:D4:7E:CE:6C:EA:58:E3:A3:D3:C2:C2
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/gSZieenPqOBH1H7ObOpY46PTwsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c7:7a:4a:99:50:b2:0c:a5:88:c6:38:1a:0d:a6:c5:f7:74:
d9:7d:33:e4:c5:8a:03:63:a2:09:f6:95:ce:fa:e1:3a:44:bb:
38:20:96:1d:8c:96:c8:eb:37:19:06:ca:7e:c3:d3:55:e0:24:
70:54:ec:d2:e7:01:6e:a8:07:7b:02:b6:22:3a:d9:50:c5:02:
ba:38:d7:fe:f7:96:b6:a2:04:22:12:5d:3a:fc:3c:7f:66:60:
83:98:e0:03:c5:08:dd:2a:d5:12:a1:ea:b7:1f:df:6a:1a:d6:
90:57:6d:e1:58:09:d3:1e:1b:6c:65:2e:f1:df:6f:29:a6:3b:
3e:2f:8f:0e:b9:23:fb:df:fa:44:e9:ef:48:2c:3a:e3:a1:c1:
23:b0:55:71:f7:55:2d:c3:64:d1:d2:5b:17:a1:b7:52:ac:b3:
cb:9f:fa:98:b0:05:38:b1:74:98:d4:dc:c2:86:f4:b5:d2:94:
2a:bd:0c:66:c0:5f:7a:26:92:f4:aa:5a:d5:8b:6c:63:63:30:
8b:27:d5:66:05:36:69:22:8e:16:e7:36:4d:46:d9:7f:b7:86:
6e:51:23:28:79:b5:b8:9f:44:4e:95:b8:b1:be:20:4e:b0:14:
96:2a:af:38:dd:a6:7e:f5:12:a8:ec:78:15:f8:7a:81:9d:c6:
30:eb:34:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:00 2024 by rpki-client on console-ams.rpki-client.org