Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BMOCwdFZZBuwvaJiMNKjYYYKAKg.roa
File: BMOCwdFZZBuwvaJiMNKjYYYKAKg.roa (raw, json)
Hash identifier: IjOi0aFP+ZTdZJYxC66m6+TB4NMKnxfs41KN1Y5k5Ek=
Subject key identifier: 04:C3:82:C1:D1:59:64:1B:B0:BD:A2:62:30:D2:A3:61:86:0A:00:A8
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018B0087D61D4DA7A1D17B84F63EE3610FCA
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BMOCwdFZZBuwvaJiMNKjYYYKAKg.roa
Signing time: Thu 05 Oct 2023 15:49:44 +0000
ROA not before: Thu 05 Oct 2023 15:49:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204769
IP address blocks: 45.134.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:87:d6:1d:4d:a7:a1:d1:7b:84:f6:3e:e3:61:0f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Oct 5 15:49:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04c382c1d159641bb0bda26230d2a361860a00a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:21:ae:88:33:23:07:93:8d:96:93:92:2b:
13:08:db:f3:26:f3:7b:90:c9:42:ce:a1:37:01:29:
a1:61:95:c8:e3:69:fa:b2:95:6a:dc:c3:7c:a6:59:
c2:dd:74:83:26:68:c8:2f:2e:b7:b9:df:59:a2:38:
26:44:a6:bc:34:a1:60:b3:c5:38:86:c1:18:ad:07:
38:63:bb:1f:32:1b:0b:96:78:b4:af:a6:56:4a:77:
cd:b4:0e:a6:3e:c7:a8:d4:a4:b4:6a:35:f3:ba:be:
b8:b3:a3:59:0d:90:6c:de:d7:49:76:69:34:2e:eb:
f1:42:2c:36:c1:e7:5b:7b:44:70:98:55:b9:e5:68:
99:f4:a0:60:62:39:6d:88:03:2a:f9:e6:e8:3e:8d:
12:4f:67:53:25:32:fa:05:fd:b1:11:b1:41:ee:fc:
e9:2d:c5:51:23:3e:30:41:72:b2:69:f4:cc:82:11:
89:b1:02:6d:3a:bf:ae:01:d7:d5:a5:5a:c1:48:8c:
e1:3c:f3:58:65:d8:0f:6a:77:fd:cc:af:a1:5b:33:
bc:e3:3b:43:eb:c7:ad:15:b3:9b:9b:9b:cf:0f:5f:
78:ea:f6:9c:ab:eb:dd:bc:e5:ee:01:9c:81:dd:1e:
39:13:81:b8:3e:ad:19:34:cb:1e:2d:d9:83:c6:15:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C3:82:C1:D1:59:64:1B:B0:BD:A2:62:30:D2:A3:61:86:0A:00:A8
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BMOCwdFZZBuwvaJiMNKjYYYKAKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.36.0/24
Signature Algorithm: sha256WithRSAEncryption
20:3a:2d:bc:6b:76:26:ba:06:48:b3:8b:a7:27:ed:4e:e0:c8:
83:f2:f4:69:e0:bf:55:9e:ca:bc:8f:79:8e:51:9b:fc:9f:96:
fe:d4:e0:c1:a2:1e:82:4e:26:69:a7:05:b1:e9:11:3f:cf:f2:
42:b9:bb:91:38:0e:a3:cd:21:0b:c4:e0:9b:9a:b8:d3:a2:5d:
15:22:93:c5:1c:de:dc:4d:20:bc:a4:82:83:91:fb:26:a2:df:
47:e6:c6:6c:02:a3:d4:c9:44:37:4f:94:ea:4a:27:13:ce:c9:
0b:b6:ef:82:1a:8d:e9:06:97:d3:80:75:9d:86:d2:51:4a:4f:
f2:83:b9:8c:5e:1c:52:8a:59:63:b3:b2:df:ee:db:48:4e:4b:
e4:66:bd:48:6d:c2:a0:2f:44:23:ab:6b:68:96:7f:9a:5f:cc:
d9:dc:c4:0b:01:f3:6e:0a:2c:90:d0:db:95:20:06:25:cf:fc:
16:39:3e:56:a1:28:68:cb:d6:7d:8c:00:74:b1:28:28:6b:e0:
35:05:6f:e6:8e:0f:d8:c6:d6:37:18:08:b4:82:58:0d:be:e6:
b8:66:b5:2b:7c:2c:12:46:2d:08:ac:48:04:55:27:1d:3a:fc:
0f:39:fd:41:2a:66:ed:c8:fd:b1:40:51:63:7f:32:e5:f2:fe:
b4:3a:ca:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 13:26:57 2023 by rpki-client on console-ams.rpki-client.org