Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/i8wauU2Mg80igN13_xJj9rfKnp0.roa
File: i8wauU2Mg80igN13_xJj9rfKnp0.roa (raw, json)
Hash identifier: LnrzT2nllhscpru2oIa5Xg/rxWsz40NYVXwWhfHKNBw=
Subject key identifier: 8B:CC:1A:B9:4D:8C:83:CD:22:80:DD:77:FF:12:63:F6:B7:CA:9E:9D
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E3BF4E041B84DB6FF5D2B33985286
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/i8wauU2Mg80igN13_xJj9rfKnp0.roa
Signing time: Tue 02 Jan 2024 08:33:16 +0000
ROA not before: Tue 02 Jan 2024 08:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198231
IP address blocks: 45.134.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 20:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:3b:f4:e0:41:b8:4d:b6:ff:5d:2b:33:98:52:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bcc1ab94d8c83cd2280dd77ff1263f6b7ca9e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:05:d2:d2:08:b0:a8:57:80:00:90:9e:45:94:
ae:fc:10:5c:64:ba:d2:da:0a:b2:7e:e9:f8:df:42:
42:c3:51:cb:b6:82:04:79:b6:a2:48:33:3e:f9:94:
0a:45:03:22:68:90:f7:0a:a9:73:39:81:e4:e8:6f:
86:70:6b:af:c1:a2:df:f9:55:70:22:71:7c:e5:65:
4a:0b:ae:e2:ce:c5:e9:4c:2c:c9:8b:22:bf:9c:21:
d2:c0:2a:17:23:c4:01:38:8e:4e:b6:ad:a4:26:da:
bf:5d:42:9b:13:14:53:c4:e3:8b:bc:22:9e:10:b4:
3a:9f:71:e3:43:f2:8f:07:0f:54:c5:f6:c1:f5:71:
25:ff:b4:cd:fd:02:41:42:20:16:7e:76:9f:f1:1a:
07:a2:47:6c:c4:56:98:be:be:f1:57:1a:1c:e2:aa:
c1:3f:c9:a8:7f:00:b0:d1:0b:0f:9f:1e:5b:64:07:
6b:7e:fe:7e:b0:a4:18:24:be:54:26:91:00:ce:02:
36:ab:be:f1:28:d7:2c:22:73:5d:62:a9:a4:69:e3:
92:aa:5d:ce:dc:b8:4c:0c:a3:e4:11:35:02:ae:4f:
1a:6b:fa:3c:65:e2:21:2c:b6:f0:bd:98:53:71:f5:
b7:04:fb:e7:78:f3:9c:b2:0e:71:4b:d3:06:40:5c:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CC:1A:B9:4D:8C:83:CD:22:80:DD:77:FF:12:63:F6:B7:CA:9E:9D
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/i8wauU2Mg80igN13_xJj9rfKnp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.36.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:bc:94:f5:fe:09:ca:20:ce:88:8c:dc:6a:b8:98:30:0b:9d:
19:61:90:38:0f:a2:d7:02:ec:e1:39:13:24:83:cb:6f:ba:3d:
c0:6e:bf:2e:52:0b:6f:86:a7:80:62:e6:ba:30:d1:ca:d4:18:
f7:ec:87:92:5e:74:d6:7e:3c:08:99:cb:a9:3e:2b:e2:d6:c7:
cc:c1:2c:7f:37:29:4f:c1:22:b3:b3:73:4a:1d:ef:b2:7a:0d:
4d:03:d6:dd:d1:ae:0f:06:7e:9e:bb:fa:6b:ba:ed:49:e3:09:
cf:fe:f5:08:cd:21:9c:65:98:24:fa:1b:b9:f8:0d:5d:ac:c7:
18:1d:37:8e:20:3b:8a:8a:a3:0b:0e:c3:2e:b3:0b:b2:42:7b:
fa:7c:02:b5:9f:ee:e5:be:68:1a:66:41:dc:e5:0f:ef:55:f6:
0a:a2:53:e0:47:3b:2a:12:f5:3b:82:77:87:c0:48:25:43:08:
66:45:32:63:4a:99:23:5b:f2:03:ca:b0:92:ba:dd:e6:ef:d4:
e6:db:6e:29:15:1f:66:45:15:12:ed:1e:67:06:89:93:f6:a4:
87:59:8b:b8:d7:52:61:96:31:ef:52:d9:32:3e:52:98:30:a4:
e4:cf:e6:26:32:80:fe:13:46:d0:f0:11:d3:32:31:16:f6:8d:
bc:50:27:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTjv04EG4Tbb/XSszmFKGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjQwMTAyMDgzMzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmNjMWFiOTRkOGM4M2NkMjI4MGRkNzdmZjEyNjNmNmI3Y2E5ZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQXS0giwqFeAAJCeRZSu/BBcZLrS
2gqyfun430JCw1HLtoIEebaiSDM++ZQKRQMiaJD3CqlzOYHk6G+GcGuvwaLf+VVw
InF85WVKC67izsXpTCzJiyK/nCHSwCoXI8QBOI5Otq2kJtq/XUKbExRTxOOLvCKe
ELQ6n3HjQ/KPBw9UxfbB9XEl/7TN/QJBQiAWfnaf8RoHokdsxFaYvr7xVxoc4qrB
P8mofwCw0QsPnx5bZAdrfv5+sKQYJL5UJpEAzgI2q77xKNcsInNdYqmkaeOSql3O
3LhMDKPkETUCrk8aa/o8ZeIhLLbwvZhTcfW3BPvnePOcsg5xS9MGQFwC7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIvMGrlNjIPNIoDdd/8SY/a3yp6dMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvaTh3YXVVMk1nODBpZ04xM194Smo5cmZLbnAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYYkMA0G
CSqGSIb3DQEBCwUAA4IBAQAOvJT1/gnKIM6IjNxquJgwC50ZYZA4D6LXAuzhORMk
g8tvuj3Abr8uUgtvhqeAYua6MNHK1Bj37IeSXnTWfjwImcupPivi1sfMwSx/NylP
wSKzs3NKHe+yeg1NA9bd0a4PBn6eu/pruu1J4wnP/vUIzSGcZZgk+hu5+A1drMcY
HTeOIDuKiqMLDsMuswuyQnv6fAK1n+7lvmgaZkHc5Q/vVfYKolPgRzsqEvU7gneH
wEglQwhmRTJjSpkjW/IDyrCSut3m79Tm224pFR9mRRUS7R5nBomT9qSHWYu411Jh
ljHvUtkyPlKYMKTkz+YmMoD+E0bQ8BHTMjEW9o28UCeA
-----END CERTIFICATE-----
Generated at Thu Mar 28 22:13:26 2024 by rpki-client on console-ams.rpki-client.org