Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/GB0aklPDTqwaHvWsCs_hSUwqDgg.roa
File: GB0aklPDTqwaHvWsCs_hSUwqDgg.roa (raw, json)
Hash identifier: 3K5FPrCbFi2OmVUzPCm9UpcXsrvcFPEZFTZJvganqsY=
Subject key identifier: 18:1D:1A:92:53:C3:4E:AC:1A:1E:F5:AC:0A:CF:E1:49:4C:2A:0E:08
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0193BAF9553E935802EBB835556490F65663
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/GB0aklPDTqwaHvWsCs_hSUwqDgg.roa
Signing time: Thu 12 Dec 2024 13:05:22 +0000
ROA not before: Thu 12 Dec 2024 13:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 45.157.158.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:f9:55:3e:93:58:02:eb:b8:35:55:64:90:f6:56:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Dec 12 13:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=181d1a9253c34eac1a1ef5ac0acfe1494c2a0e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:ba:0a:2e:9c:fe:d6:80:34:88:18:e2:c5:
73:71:f6:86:e2:2a:55:19:7b:48:32:40:4f:08:7d:
23:8c:92:73:14:7f:ac:eb:60:17:38:e4:41:73:f4:
70:99:43:05:22:46:6d:ec:d3:41:89:d1:f6:ff:60:
12:51:e7:91:56:5a:7b:10:cf:15:4b:d8:be:0a:ab:
bd:4d:a5:7a:c3:11:8c:05:ee:de:1f:df:cb:4c:11:
50:ac:ab:96:5d:f3:09:6d:a8:8e:51:2b:24:27:6e:
39:12:85:1f:da:e6:89:9d:a2:7c:f5:fe:38:9b:c0:
7b:3c:7b:10:be:45:ff:4e:9d:a0:00:69:a2:55:57:
01:8b:e9:31:a3:2d:10:50:09:e7:2a:66:bb:d7:45:
2d:f8:38:60:0d:37:8c:78:68:65:18:fa:2b:34:34:
49:0f:0a:a3:a3:49:4e:1c:f9:e8:66:a4:b0:ac:70:
e9:db:1a:5e:0b:fd:d0:a1:4c:1b:d7:17:be:81:a8:
07:78:53:65:33:ba:51:7e:e7:a3:d3:95:84:1c:e5:
92:52:f9:af:c7:b6:b3:36:fb:70:b8:9e:cd:36:3a:
22:b2:53:24:97:24:4f:d6:e3:fc:71:4e:ba:49:f7:
e0:69:ce:63:e2:94:f3:a4:84:95:db:6c:29:71:75:
0e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1D:1A:92:53:C3:4E:AC:1A:1E:F5:AC:0A:CF:E1:49:4C:2A:0E:08
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/GB0aklPDTqwaHvWsCs_hSUwqDgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.158.0/23
Signature Algorithm: sha256WithRSAEncryption
35:42:a5:40:c1:8e:ae:d7:59:5d:ac:15:a8:73:8f:c2:c4:6b:
b4:fc:b6:bb:52:f6:8d:14:dc:16:25:d2:e4:78:05:a4:9c:94:
0b:32:d8:b1:aa:5d:d8:fc:48:1a:48:34:b3:ce:c4:08:0c:91:
03:50:ac:e6:25:6c:08:db:5e:9e:e0:89:38:19:c0:42:de:fa:
42:d1:07:2c:d0:a3:f6:95:3d:37:97:76:92:94:e0:28:0d:64:
5c:80:5f:39:bb:06:1c:f2:06:ed:41:b5:37:ed:c0:03:0e:7e:
67:0e:32:96:58:c8:cc:1c:03:c4:15:6c:41:57:d1:bd:b7:85:
0b:14:d8:3b:73:d9:36:bf:c1:40:a3:1d:05:da:67:a3:e4:8a:
ba:5f:b4:1b:65:3e:ac:8f:eb:cd:18:0e:39:8e:0d:00:d6:e8:
bf:96:58:88:85:b2:0a:30:54:7a:df:51:75:c6:22:4d:e2:5f:
7c:e9:04:77:b1:5c:92:0e:7a:95:ac:84:24:eb:2f:c1:c4:93:
77:c1:48:3f:5e:10:80:97:10:44:72:3b:be:12:b0:25:56:3c:
56:d7:37:ce:fb:64:4a:12:89:db:a3:a0:1b:36:ec:c1:6b:91:
a4:29:00:e9:67:60:39:4c:10:8c:26:ed:5b:75:a2:8e:93:36:
06:10:a9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:36:03 2025 by rpki-client