Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/gZdV_JTWKbY7GC_mL4r4gvp9HHA.roa
File: gZdV_JTWKbY7GC_mL4r4gvp9HHA.roa (raw, json)
Hash identifier: ENIHVvk62DuwxWiLpUiDJnaaKNp1yu7AHaRhoFRrUPg=
Subject key identifier: 81:97:55:FC:94:D6:29:B6:3B:18:2F:E6:2F:8A:F8:82:FA:7D:1C:70
Certificate issuer: /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial: 018572DA38570C79F9694E4A8FEF097DF0FB
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/gZdV_JTWKbY7GC_mL4r4gvp9HHA.roa
Signing time: Mon 02 Jan 2023 14:19:41 +0000
ROA not before: Mon 02 Jan 2023 14:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.91.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:da:38:57:0c:79:f9:69:4e:4a:8f:ef:09:7d:f0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Validity
Not Before: Jan 2 14:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=819755fc94d629b63b182fe62f8af882fa7d1c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:f9:28:b4:a2:df:5c:be:7b:13:a3:33:73:
2a:8b:1b:2d:9b:8f:89:76:d8:d3:33:01:03:97:78:
6b:e0:5d:9e:f2:fd:7c:3f:5e:f8:b2:9e:fc:34:a7:
85:78:b8:02:29:54:d4:5a:31:41:e6:03:00:92:01:
ac:e1:38:4d:df:3d:06:7d:72:94:08:3f:26:67:ee:
2c:ed:9f:52:21:46:aa:e0:02:aa:93:cc:6c:b0:5b:
da:13:64:13:25:7f:fd:a4:b7:d8:40:36:e9:91:8b:
a5:cf:2a:56:b9:98:ce:df:1a:24:17:c7:76:73:33:
01:45:a9:6d:23:a8:e4:bf:2f:70:3a:0c:96:a8:8d:
f5:2e:80:a8:83:40:40:bd:49:a0:a9:40:5a:0e:24:
65:cd:39:1c:02:48:c6:58:d6:9c:11:9c:d3:ee:ec:
25:2d:45:8e:52:8b:78:43:a7:c9:8f:16:e8:0b:30:
70:28:4e:76:3d:87:55:e0:4e:fe:45:96:d9:a1:6c:
cf:d4:78:19:59:3a:70:38:59:94:a5:3b:08:c9:1a:
ae:ca:a6:c4:10:64:5b:4c:7e:7b:7d:b0:58:69:35:
07:23:9d:96:5c:47:1e:e7:75:83:94:e9:2d:fc:ad:
0c:28:79:78:d3:a6:ae:d4:e3:d0:59:f7:1d:36:2d:
7e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:97:55:FC:94:D6:29:B6:3B:18:2F:E6:2F:8A:F8:82:FA:7D:1C:70
X509v3 Authority Key Identifier:
keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/gZdV_JTWKbY7GC_mL4r4gvp9HHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.78.0/24
Signature Algorithm: sha256WithRSAEncryption
97:23:42:8e:fd:fb:e3:a0:69:9c:8c:d9:b6:08:53:ec:01:3a:
7d:db:ae:0c:4d:0b:98:4d:67:fb:a2:aa:e2:d7:71:f1:f3:f8:
e0:f6:2c:3a:ac:94:1c:c8:75:13:69:0b:e5:51:95:63:2e:14:
c4:70:f1:fa:0e:a6:32:82:89:07:80:be:80:5f:6b:12:9c:e1:
79:d3:88:19:60:2a:01:a1:fe:51:a2:ef:7f:f6:52:2a:fa:e2:
1d:15:d4:3b:be:72:f9:0c:6e:c7:84:85:b9:63:c0:d1:d2:56:
21:fe:c8:7f:92:12:92:07:74:46:21:05:b8:a6:b6:d2:03:1a:
de:3a:37:e7:3a:9b:62:4e:59:c1:f7:49:53:43:47:86:7a:a9:
10:06:3f:22:ce:b1:66:7a:6d:0a:45:6b:bf:de:7c:2e:99:96:
90:ee:1e:9d:d4:0d:3d:dc:59:7c:fd:86:75:a7:93:05:66:95:
08:94:90:5e:a6:d4:9c:f0:ec:20:3d:22:32:9b:8d:02:ea:83:
f4:ea:60:43:a6:25:e5:f1:bc:6f:ac:7a:e5:94:7c:ed:e0:2c:
7e:f8:12:28:05:5d:b5:b1:fa:b0:ff:92:71:d6:47:e8:18:f9:
54:9c:c3:41:de:77:0a:0c:0d:ba:23:13:cb:00:4e:0b:99:de:
89:0d:02:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:52 2024 by rpki-client on console-fra.rpki-client.org