Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Vpj7HcmpNGTM0HuvzWZ_Wn09Kv4.roa
File: Vpj7HcmpNGTM0HuvzWZ_Wn09Kv4.roa (raw, json)
Hash identifier: kQRlkOqot311+edtvoDqZHXEADPAUtyZW59TW6Eu7c8=
Subject key identifier: 56:98:FB:1D:C9:A9:34:64:CC:D0:7B:AF:CD:66:7F:5A:7D:3D:2A:FE
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE628018AC58F834B570AC1DF2B37FA
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Vpj7HcmpNGTM0HuvzWZ_Wn09Kv4.roa
Signing time: Sun 01 Jan 2023 10:35:00 +0000
ROA not before: Sun 01 Jan 2023 10:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210851
IP address blocks: 45.137.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:28:01:8a:c5:8f:83:4b:57:0a:c1:df:2b:37:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5698fb1dc9a93464ccd07bafcd667f5a7d3d2afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:a0:dc:4e:4a:ba:80:98:01:0f:48:1d:79:
e0:1a:e2:28:f4:ae:a5:f6:6c:57:a3:25:af:55:6f:
4f:9a:7f:e2:e9:26:b1:1a:3a:f4:38:7e:27:1c:66:
91:ee:3a:e8:92:1e:be:91:cc:00:37:3d:a6:85:af:
8a:8d:15:38:4f:cd:f2:dc:a8:39:ff:b7:e2:f5:a9:
88:06:77:89:25:ad:65:7f:9d:b7:c7:df:9d:3f:65:
25:94:05:00:cd:e5:ff:00:4b:8e:c8:79:f8:f6:f8:
55:74:3b:c7:af:34:0f:cf:85:52:81:35:92:72:47:
07:30:80:c6:4d:27:d3:ce:38:3f:f4:2a:2e:53:60:
95:b2:fd:86:be:77:07:ab:8e:f6:7e:65:cc:f0:05:
00:c2:ae:18:eb:69:89:7b:c1:b7:45:fa:4b:d1:c9:
ec:0a:74:9c:75:78:36:3d:9e:a6:e2:4e:59:24:0a:
e3:68:4c:a6:a3:ab:d2:6c:92:4a:0f:71:1b:ac:ef:
df:db:76:30:59:1e:64:39:ce:ef:33:05:89:a7:76:
8d:a8:26:8f:61:46:b7:6d:4c:ac:1d:a4:ab:2e:9d:
34:2a:04:4b:6d:91:01:5e:86:e1:e4:bc:72:93:55:
93:80:e7:17:c6:5a:6b:07:a5:04:aa:5e:3a:38:04:
e9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:98:FB:1D:C9:A9:34:64:CC:D0:7B:AF:CD:66:7F:5A:7D:3D:2A:FE
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Vpj7HcmpNGTM0HuvzWZ_Wn09Kv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.200.0/24
Signature Algorithm: sha256WithRSAEncryption
74:15:f3:7d:72:51:2b:02:87:b8:60:a7:9d:5d:f7:b1:40:da:
bb:e2:76:e9:c4:31:60:df:53:c9:64:e7:6c:6e:55:bc:28:41:
c7:b3:c0:10:c7:86:55:8b:f5:d6:60:29:68:8b:73:79:99:ca:
3e:14:f9:49:5c:75:7a:2c:26:9d:b9:79:94:7e:05:40:ba:4e:
14:f7:30:a0:ed:5f:a9:79:29:b2:0b:a1:b9:e7:e9:22:90:60:
0a:49:ca:62:18:75:ae:fe:3f:5b:8a:f9:c5:93:8c:0e:c3:7e:
f9:59:51:61:90:2c:b0:fa:3c:4a:62:39:20:48:e4:cd:1a:18:
60:7a:e5:e7:02:d0:2a:0a:82:e8:f9:3a:d3:60:4f:43:e3:f1:
b4:55:e7:ae:16:18:cf:61:2e:8c:0e:a1:64:42:02:f9:dc:71:
c8:ba:b5:78:70:e8:bc:c8:67:19:53:aa:f1:bd:e1:fc:4e:e4:
e2:1f:99:21:04:4f:88:fb:38:f4:80:11:54:51:9b:14:66:76:
01:08:c5:1a:db:3d:2b:c5:fb:24:67:ce:69:9c:be:a2:b5:5a:
17:f3:c4:b0:ea:a3:4b:89:7c:2c:e4:39:4e:fd:62:a5:d2:45:
c4:7c:d5:9c:20:f1:1b:7b:69:4e:20:e3:a7:de:7a:56:c5:d3:
ef:18:f8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:13 2024 by rpki-client on console-fra.rpki-client.org