Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/GMv_38ZXKgvg-2vYJuLY6r7GAhY.roa
File: GMv_38ZXKgvg-2vYJuLY6r7GAhY.roa (raw, json)
Hash identifier: 429H797Wp2xwB29gsfQvMYfqr3SsXpu7H4IalpaqxiI=
Subject key identifier: 18:CB:FF:DF:C6:57:2A:0B:E0:FB:6B:D8:26:E2:D8:EA:BE:C6:02:16
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 018CC9AD2BDB2780B4E3CFCD6FE39B13EFFB
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/GMv_38ZXKgvg-2vYJuLY6r7GAhY.roa
Signing time: Tue 02 Jan 2024 10:16:58 +0000
ROA not before: Tue 02 Jan 2024 10:16:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397373
IP address blocks: 45.158.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 03 Apr 2024 18:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ad:2b:db:27:80:b4:e3:cf:cd:6f:e3:9b:13:ef:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jan 2 10:16:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18cbffdfc6572a0be0fb6bd826e2d8eabec60216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c2:53:df:fa:b5:05:ba:56:bb:3e:08:a9:38:
fa:3e:9b:27:e9:d9:4e:30:63:de:f6:ea:bc:8c:50:
44:04:f8:d2:84:44:b4:cf:bb:4f:74:ea:61:d7:f3:
7a:fd:55:45:ed:07:e1:fc:32:97:7d:81:49:29:f1:
75:83:82:94:aa:4d:0c:bd:8c:67:8c:c0:73:64:30:
4c:d9:e8:1d:71:d8:13:26:22:ae:9b:58:86:58:b4:
bb:92:b8:af:b1:ef:b0:4e:d4:d2:41:c2:4d:c9:7f:
26:ff:c6:de:f4:d4:c0:f6:c8:6c:55:aa:eb:56:b2:
14:12:fb:55:86:55:63:0f:6a:33:a6:63:42:f5:b9:
09:b5:3f:29:01:39:fc:ee:c7:5d:83:89:0b:0c:a9:
79:db:b5:e6:45:23:a1:65:38:ae:c9:ef:20:81:e5:
34:bd:11:c3:a7:1a:c6:0f:c6:06:81:85:57:e1:fe:
0a:37:d3:a5:d1:b3:e5:bb:90:4b:ef:5d:4a:3f:71:
0e:ea:c2:53:c0:fc:54:9f:d8:66:88:89:eb:3b:cb:
06:a8:35:73:1d:5b:5d:02:8e:ae:17:11:89:92:be:
54:8b:04:f6:92:26:8a:0f:c2:b2:d4:6b:0b:ea:31:
f1:4c:41:a3:52:73:2e:67:d5:bf:9a:8d:b7:a3:96:
4f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CB:FF:DF:C6:57:2A:0B:E0:FB:6B:D8:26:E2:D8:EA:BE:C6:02:16
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/GMv_38ZXKgvg-2vYJuLY6r7GAhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.88.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:cd:57:ca:6a:53:dc:d3:93:be:b3:29:f6:8e:38:5e:81:f2:
9f:0c:ad:92:5d:78:6b:5b:c4:d7:b5:09:0c:d8:da:e5:80:70:
b9:49:48:c4:a7:73:90:3d:15:f9:42:8f:21:ee:0a:37:05:82:
86:b7:15:99:58:b2:09:51:88:73:2b:ca:ee:d1:db:87:07:f1:
04:10:0d:b7:e3:27:39:a2:8e:55:8f:b8:0e:85:50:17:eb:91:
09:95:8d:2f:11:c5:8d:32:98:af:40:2c:21:5f:f8:e1:74:13:
1b:7b:b5:51:73:6a:7a:90:84:d0:3c:bc:70:62:d3:c6:2b:d3:
3c:df:6b:d5:f0:61:10:0c:49:40:44:b3:30:b0:01:1f:7d:19:
2a:84:58:9b:a6:fe:86:74:80:8f:0d:48:f6:91:5a:e8:14:a8:
02:e7:b9:e5:69:b8:e7:26:00:1a:a4:a8:59:93:c9:cf:0c:d5:
2d:de:a5:e4:f2:c7:47:ff:c0:57:f7:9b:a3:2c:7d:a1:1a:26:
1b:05:ab:61:7b:ff:24:18:e3:28:42:ce:04:c0:36:96:e6:d7:
eb:fd:15:54:25:b4:44:7e:c7:13:a7:64:43:55:30:f3:90:c6:
5f:2d:57:17:17:d3:20:bc:fb:41:5f:b4:24:2c:58:8a:3f:9d:
1d:05:78:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 22:21:55 2024 by rpki-client on console-ams.rpki-client.org