Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BnY81tKMJ_oVkfkWwk76WmwQtH8.roa
File: BnY81tKMJ_oVkfkWwk76WmwQtH8.roa (raw, json)
Hash identifier: efqDICRH0pefP6LQMwKwT/NwcokITNUpKOfbMM+uqYU=
Subject key identifier: 06:76:3C:D6:D2:8C:27:FA:15:91:F9:16:C2:4E:FA:5A:6C:10:B4:7F
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018E86D53C14ED120DDA7A80F9023E0D62F7
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BnY81tKMJ_oVkfkWwk76WmwQtH8.roa
Signing time: Thu 28 Mar 2024 20:51:45 +0000
ROA not before: Thu 28 Mar 2024 20:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.134.36.0/24 maxlen: 24
45.142.104.0/24 maxlen: 24
45.142.105.0/24 maxlen: 24
45.142.106.0/24 maxlen: 24
92.118.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 28 Mar 2024 21:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:d5:3c:14:ed:12:0d:da:7a:80:f9:02:3e:0d:62:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Mar 28 20:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06763cd6d28c27fa1591f916c24efa5a6c10b47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:c8:bd:6f:2c:37:99:7d:fd:60:96:8f:03:
d9:74:a0:ea:43:16:70:9d:2c:8f:03:4e:87:6e:dc:
09:45:aa:c6:f9:50:81:4c:83:f3:c3:46:09:03:76:
fa:8e:f7:af:62:6e:61:d4:4a:57:6b:7a:c7:eb:32:
7c:8e:35:6e:99:80:68:2f:53:af:a8:26:92:4c:4c:
e4:ac:38:09:52:23:dc:51:5d:df:46:00:0c:ee:23:
ee:48:d2:30:2a:24:f5:69:da:5d:2c:2b:59:0f:a9:
65:25:8b:88:50:66:d2:51:9e:cd:58:7d:81:4e:fa:
1b:2c:db:33:4a:13:c9:5f:15:d3:c0:5a:12:2c:73:
ab:0c:cc:f8:b2:c8:c8:31:bc:46:0b:ed:8f:fd:b5:
df:88:7c:29:5d:c0:a7:de:2c:cd:5c:1b:23:97:53:
f3:0d:86:b9:06:b8:68:0c:fc:e3:c3:c1:d6:51:e0:
18:88:1a:46:34:d0:6a:09:8f:d8:62:a6:d6:6b:e5:
60:8f:7b:0f:c8:e5:17:71:f0:d6:94:b9:f2:d4:1b:
04:c8:31:c0:a0:04:60:bc:8a:18:08:38:8c:08:bc:
5d:f1:9b:87:ab:b8:5a:18:52:20:33:d5:2b:70:85:
2b:e4:b7:6b:b8:f5:a5:e6:40:32:a2:e4:8a:a6:25:
e1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:76:3C:D6:D2:8C:27:FA:15:91:F9:16:C2:4E:FA:5A:6C:10:B4:7F
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BnY81tKMJ_oVkfkWwk76WmwQtH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.36.0/24
45.142.104.0-45.142.106.255
92.118.204.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:11:56:7e:83:ca:09:1f:a6:96:13:e6:6b:a5:ad:95:99:0c:
db:3a:b7:07:3c:fb:18:f2:7d:ab:dd:90:8e:6d:32:a8:b4:7b:
a2:75:64:10:1d:57:e0:ff:36:78:b9:d3:06:84:47:61:e5:01:
25:f7:c5:69:e4:6f:72:dc:12:d0:92:bb:8d:ab:e5:29:ad:d1:
81:7f:f6:c8:ec:a1:30:cb:d4:60:c6:42:69:44:04:1a:2e:61:
51:3d:42:f8:78:8f:a8:10:02:25:05:c2:1c:1a:9c:b0:80:a7:
8a:a2:d6:37:64:2a:5e:a5:4a:bf:47:39:c7:be:ad:40:1b:c8:
c7:db:74:5b:e7:63:fa:c7:09:bd:23:04:b5:2d:ca:f6:46:bb:
f6:de:22:ce:74:1a:8c:8d:b1:7a:22:b4:c5:0e:2a:da:47:d4:
67:9a:ab:b3:5e:cd:5d:f7:56:4b:eb:23:8a:d3:de:c7:37:f1:
db:4a:0d:fc:33:0c:d9:d4:fe:c8:a1:ea:bb:45:f1:f0:af:47:
c2:09:f5:94:a5:84:10:93:63:5e:a9:87:af:fc:28:a0:f4:97:
52:04:f7:42:32:d6:83:63:60:d6:d8:33:b1:21:f6:0e:9f:1d:
81:06:29:b1:35:b5:90:f1:69:83:67:b1:74:cb:8c:86:42:64:
f0:fe:b5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 23:10:49 2024 by rpki-client on console-ams.rpki-client.org