Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/qV9d9G-AudrMgM6LBKibDmk8yJE.roa
File: qV9d9G-AudrMgM6LBKibDmk8yJE.roa (raw, json)
Hash identifier: IVn+JC3IVJDwXequdR9CUjA+lQvWN2YFF/6vzb/ljY0=
Subject key identifier: A9:5F:5D:F4:6F:80:B9:DA:CC:80:CE:8B:04:A8:9B:0E:69:3C:C8:91
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018B3CC9E77E4E67A1D0F4DE2907DFD2546E
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/qV9d9G-AudrMgM6LBKibDmk8yJE.roa
Signing time: Tue 17 Oct 2023 08:39:06 +0000
ROA not before: Tue 17 Oct 2023 08:39:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216157
IP address blocks: 45.134.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:c9:e7:7e:4e:67:a1:d0:f4:de:29:07:df:d2:54:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Oct 17 08:39:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a95f5df46f80b9dacc80ce8b04a89b0e693cc891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:e2:20:a5:0e:dc:0e:73:83:8c:ed:1a:62:
cc:a3:45:04:b3:df:7b:08:e9:12:e7:ec:de:bb:1f:
53:d6:21:50:9a:d1:4b:48:1f:3b:b7:ca:ce:a2:66:
7d:ff:cc:2b:a1:42:e1:99:f2:e6:8e:2c:53:0c:1c:
b1:0b:3e:52:b3:a8:2f:64:8a:1c:3b:94:a1:29:bd:
74:cd:19:fb:54:2b:96:fb:a4:22:bc:0a:dd:55:8a:
85:78:6b:8c:a7:42:2d:23:c1:ba:85:3f:55:3e:b5:
c9:de:cb:59:22:14:29:4a:53:fb:f1:c7:d8:0e:3c:
48:e8:22:7a:e8:11:61:63:e7:e1:1c:3b:14:06:f4:
fe:37:9d:3f:00:4f:83:8e:eb:d0:23:17:e1:04:77:
84:e1:05:56:f8:39:ac:2f:d6:0c:ca:30:8f:7f:8c:
46:ca:24:b3:1b:cb:29:00:50:44:d4:99:f1:f2:fd:
63:f1:54:ec:e3:3b:ce:8d:b4:a3:97:eb:17:93:0c:
19:02:6b:2a:78:83:78:76:4e:44:04:e8:f6:27:2c:
5b:a6:1c:0f:ba:ec:96:30:ea:bb:8d:8e:50:a6:2f:
b2:c8:b7:34:3a:7d:12:c4:8a:8c:0b:d6:1b:b3:84:
53:53:a2:d1:d5:87:38:e4:0f:07:bc:48:f6:c6:01:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5F:5D:F4:6F:80:B9:DA:CC:80:CE:8B:04:A8:9B:0E:69:3C:C8:91
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/qV9d9G-AudrMgM6LBKibDmk8yJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.36.0/24
Signature Algorithm: sha256WithRSAEncryption
89:9e:08:52:5e:46:55:55:c4:73:cf:f5:b4:e5:78:57:d3:19:
1b:4a:99:0f:d3:af:e8:c9:be:4c:45:50:17:28:36:e5:b5:65:
1a:77:07:ad:85:af:d6:1a:ca:e9:d0:89:78:b4:ec:1c:98:a4:
ae:24:cd:cd:c0:43:ce:b7:6a:20:c9:08:9c:d9:a3:65:45:4d:
9f:ca:21:d1:83:49:5a:2e:89:c3:c2:45:d0:b3:c3:c3:86:a3:
6e:b2:4e:78:b6:18:a7:17:43:e7:f0:f3:b3:e3:ce:9c:dd:b1:
dd:e7:3f:00:a4:b0:73:29:7e:d5:d7:1a:07:ea:c8:52:e5:a0:
8d:c7:0d:9d:2f:71:b1:e2:f1:24:2c:ee:97:92:6f:d5:5b:32:
ec:ac:6e:49:b4:33:83:d9:1e:cc:ba:40:e7:49:49:b1:c4:a6:
cf:c6:ea:c5:a1:f2:f7:ef:53:30:87:8a:b4:e0:37:6b:17:92:
31:25:33:52:b6:98:77:20:dd:79:d4:4a:c8:01:38:f9:1a:ac:
ce:38:53:87:06:5e:93:98:fb:93:d3:41:d0:74:3e:d8:39:46:
30:09:11:2a:2d:a7:55:8b:ab:44:08:49:8c:e7:a6:1f:ba:cb:
d8:47:06:56:7e:3c:b0:29:17:58:bf:82:5d:da:56:ed:6b:4c:
79:0a:30:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:25 2024 by rpki-client on console-ams.rpki-client.org