Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/34vtNbXcH2QyPPI6opwQWUozW1Q.roa
File: 34vtNbXcH2QyPPI6opwQWUozW1Q.roa (raw, json)
Hash identifier: m1kkkiQFLiTrqg9D7rttgfr9hV/xUcPjRIjl9wUJu2U=
Subject key identifier: DF:8B:ED:35:B5:DC:1F:64:32:3C:F2:3A:A2:9C:10:59:4A:33:5B:54
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018C7D808F0C34C20AAB523EA0FFE82CABEA
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/34vtNbXcH2QyPPI6opwQWUozW1Q.roa
Signing time: Mon 18 Dec 2023 15:17:06 +0000
ROA not before: Mon 18 Dec 2023 15:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149020
IP address blocks: 45.142.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7d:80:8f:0c:34:c2:0a:ab:52:3e:a0:ff:e8:2c:ab:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Dec 18 15:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df8bed35b5dc1f64323cf23aa29c10594a335b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:77:14:35:ec:f5:ba:cb:ac:e3:cd:13:fd:
9f:16:39:12:a4:11:23:1d:e5:df:0a:37:b1:f4:6e:
89:6b:08:c6:4a:d1:29:36:61:95:4e:4a:af:80:d2:
b8:58:2d:5b:e2:fd:81:3d:6c:23:02:c3:f3:bc:8e:
3a:f8:50:b4:7c:5c:5d:de:1e:27:a6:bc:79:35:00:
05:63:e2:39:2b:3f:91:73:61:43:5c:85:8a:84:44:
1e:d5:74:1d:9f:5f:51:9d:26:6b:bc:b0:0c:41:90:
19:93:35:3b:f1:fc:f6:12:5e:6d:03:ec:68:7f:5c:
06:fa:fe:95:ea:fa:a3:3f:d5:7a:01:8f:40:d7:6c:
43:8d:47:e8:17:c5:5d:f3:c1:e1:19:15:e9:f8:33:
2d:df:04:62:fc:cd:69:46:60:8f:a6:b2:57:6a:5f:
7d:9c:8c:b4:36:b4:ab:99:c7:39:01:22:03:1a:bf:
78:ac:2a:d7:ed:29:f1:ea:69:25:e1:73:03:5f:59:
cc:0b:e5:54:ac:c4:74:78:75:38:ab:ef:d7:b8:3e:
70:5b:f4:5e:c0:53:7d:26:d5:e4:39:7e:88:72:95:
ed:70:dd:7e:bc:15:ad:c3:12:80:13:e8:d3:3a:37:
cb:5a:6f:75:e5:4c:ee:ad:9a:09:af:e2:d7:98:70:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8B:ED:35:B5:DC:1F:64:32:3C:F2:3A:A2:9C:10:59:4A:33:5B:54
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/34vtNbXcH2QyPPI6opwQWUozW1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:47:dd:48:2d:c8:6a:de:b6:ab:5f:98:98:38:37:47:23:c0:
ab:55:72:b9:7d:1f:ff:dd:dd:36:e6:77:b9:3a:95:e5:3d:7c:
f0:12:83:b8:aa:9a:2e:87:55:92:2d:79:68:4a:e8:af:cb:01:
89:86:8a:32:87:d6:29:8d:cb:2b:11:74:b9:17:c4:72:cf:4a:
87:e1:97:f7:8f:f3:78:77:ef:6f:3b:a1:2f:88:74:4b:4b:ec:
b3:1a:cb:e7:53:91:ac:39:d0:6c:ec:c7:42:95:f4:6d:e0:a8:
e2:99:7d:c9:09:9d:82:b7:12:88:24:58:ed:d7:ea:9f:ee:aa:
ed:a5:df:29:40:76:e5:5c:5c:72:8a:bb:52:31:a6:bc:f9:b0:
8c:73:ef:3a:cd:9d:25:3f:94:e3:5f:c6:70:61:06:83:9c:8d:
23:55:fc:cc:42:2b:12:85:8d:17:ef:42:ec:1d:c0:2f:bd:97:
4f:0e:5f:c1:81:8e:60:f4:95:ae:17:fb:7f:29:a1:82:96:a7:
df:0e:5a:00:b6:78:b9:2e:f9:6d:d4:6c:97:5b:e8:38:d4:c4:
ef:ba:48:74:ba:81:00:76:f5:b5:23:73:3e:73:e5:49:96:13:
1a:a3:b4:ce:96:d2:6b:e4:df:53:2a:d6:90:52:17:c7:a3:1a:
9c:11:60:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYx9gI8MNMIKq1I+oP/oLKvqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjMxMjE4MTUxNzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjhiZWQzNWI1ZGMxZjY0MzIzY2YyM2FhMjljMTA1OTRhMzM1YjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyl3FDXs9brLrOPNE/2fFjkSpBEj
HeXfCjex9G6JawjGStEpNmGVTkqvgNK4WC1b4v2BPWwjAsPzvI46+FC0fFxd3h4n
prx5NQAFY+I5Kz+Rc2FDXIWKhEQe1XQdn19RnSZrvLAMQZAZkzU78fz2El5tA+xo
f1wG+v6V6vqjP9V6AY9A12xDjUfoF8Vd88HhGRXp+DMt3wRi/M1pRmCPprJXal99
nIy0NrSrmcc5ASIDGr94rCrX7Snx6mkl4XMDX1nMC+VUrMR0eHU4q+/XuD5wW/Re
wFN9JtXkOX6IcpXtcN1+vBWtwxKAE+jTOjfLWm915UzurZoJr+LXmHA3iwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN+L7TW13B9kMjzyOqKcEFlKM1tUMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvMzR2dE5iWGNIMlF5UFBJNm9wd1FXVW96VzFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY5pMA0G
CSqGSIb3DQEBCwUAA4IBAQCiR91ILchq3rarX5iYODdHI8CrVXK5fR//3d025ne5
OpXlPXzwEoO4qpouh1WSLXloSuivywGJhooyh9YpjcsrEXS5F8Ryz0qH4Zf3j/N4
d+9vO6EviHRLS+yzGsvnU5GsOdBs7MdClfRt4KjimX3JCZ2CtxKIJFjt1+qf7qrt
pd8pQHblXFxyirtSMaa8+bCMc+86zZ0lP5TjX8ZwYQaDnI0jVfzMQisShY0X70Ls
HcAvvZdPDl/BgY5g9JWuF/t/KaGClqffDloAtni5Lvlt1GyXW+g41MTvukh0uoEA
dvW1I3M+c+VJlhMao7TOltJr5N9TKtaQUhfHoxqcEWC3
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:24 2024 by rpki-client on console-ams.rpki-client.org