Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/Gk96cyKQvDoBGEM4DtHmFF1HKGw.roa
File: Gk96cyKQvDoBGEM4DtHmFF1HKGw.roa (raw, json)
Hash identifier: ps6iy/RJbJAXATtvpYg8BDueAKSZjPGKnUG950rMWxk=
Subject key identifier: 1A:4F:7A:73:22:90:BC:3A:01:18:43:38:0E:D1:E6:14:5D:47:28:6C
Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial: 018973030F86C20B3BC633B1E516A9564AC3
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/Gk96cyKQvDoBGEM4DtHmFF1HKGw.roa
Signing time: Thu 20 Jul 2023 11:15:27 +0000
ROA not before: Thu 20 Jul 2023 11:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 145.46.168.0/24 maxlen: 24
145.46.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 10:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:73:03:0f:86:c2:0b:3b:c6:33:b1:e5:16:a9:56:4a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
Validity
Not Before: Jul 20 11:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a4f7a732290bc3a011843380ed1e6145d47286c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:3f:db:7d:e1:04:03:45:2d:66:b4:2c:62:
84:7a:2d:7d:59:f7:78:d8:e1:22:9e:b4:6d:03:6d:
6c:78:c4:5e:9c:0b:ce:26:a6:c7:ca:b4:03:40:ac:
11:f6:e3:ff:76:9b:8f:08:3d:e3:77:5a:2f:23:1f:
4c:f6:e1:c0:28:8a:40:b6:ec:1c:b0:e4:1c:2b:5e:
eb:c3:ac:a0:db:02:97:e9:21:aa:dc:71:94:57:28:
d6:12:c4:d8:07:d1:75:b9:69:70:e6:7d:90:e7:b0:
02:3e:98:33:1f:2c:51:94:75:67:92:7c:c1:a0:b2:
9a:ee:6e:74:9c:8d:c1:87:38:05:bc:46:d9:e3:d5:
5d:04:8a:b8:cc:5a:87:53:d8:b1:a9:7c:28:8c:79:
df:e0:f6:3c:1f:49:08:64:cc:f8:e3:93:ec:f0:04:
fd:06:22:2c:7a:10:8b:b9:5d:93:f5:d8:00:71:a4:
17:57:4b:13:f7:57:f3:cf:3d:1a:7c:11:af:c1:e2:
6c:77:19:99:98:01:2d:9c:b6:0b:8c:01:0a:1c:be:
d6:1f:50:4c:0d:0b:98:31:79:3d:97:38:7f:b8:29:
5a:ef:36:20:fe:3f:0a:8a:24:2b:8a:96:96:76:7e:
c9:b6:1f:46:4e:a0:38:1c:ac:a2:b3:7a:48:67:dd:
47:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4F:7A:73:22:90:BC:3A:01:18:43:38:0E:D1:E6:14:5D:47:28:6C
X509v3 Authority Key Identifier:
keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/Gk96cyKQvDoBGEM4DtHmFF1HKGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.46.168.0/23
Signature Algorithm: sha256WithRSAEncryption
18:59:3b:42:fd:68:fd:70:ec:1c:93:19:19:f0:10:ea:17:a7:
d9:27:5d:a9:fe:0d:be:5e:14:ab:8e:01:d7:83:71:f5:fd:1a:
c5:54:fe:f2:3e:d9:89:c6:64:32:8e:66:d0:3b:6d:ed:d4:21:
ab:82:e1:5f:03:b3:6e:1f:0e:37:60:50:dc:58:bd:68:97:53:
91:42:de:51:bf:0e:b7:5b:da:60:c2:3a:51:7c:95:78:ff:c4:
5f:65:c8:8b:58:b2:b8:44:c4:e7:01:a6:82:1c:23:b2:f5:21:
6d:cb:3d:96:e2:b8:d3:b5:7a:a6:47:9c:e3:fd:b6:8c:86:f0:
a7:0a:e6:a5:77:90:22:a6:a8:ca:35:9d:0a:5d:a4:9e:4a:2e:
a8:a2:0e:26:bc:cb:ac:2e:af:b7:ba:6b:de:8e:52:c6:c9:0d:
8a:86:c6:c4:6e:8b:24:c8:64:9a:98:f3:07:d1:72:7c:ee:0b:
dc:77:d1:30:13:28:7d:5f:00:e5:e2:06:00:7a:8a:c1:2a:88:
e7:cf:78:26:92:8e:81:da:b9:fb:ba:69:cd:92:ec:f5:4d:5f:
9c:12:a9:09:ca:51:88:6e:e2:e4:9c:11:3c:9e:77:50:0a:cf:
fe:a2:d0:c0:67:a0:2b:3f:a7:36:46:90:43:4f:6a:ac:f8:67:
69:65:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:20 2024 by rpki-client on console-ams.rpki-client.org