Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/v2joQW6joE1P8wvZaC_cc6Xqpos.roa
File: v2joQW6joE1P8wvZaC_cc6Xqpos.roa (raw, json)
Hash identifier: DKt2MQwZ7h+TdIe/8Ig+PTXhAMqs1i8289IxtFs86Lo=
Subject key identifier: BF:68:E8:41:6E:A3:A0:4D:4F:F3:0B:D9:68:2F:DC:73:A5:EA:A6:8B
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018A6F7CF34F7D93518D5E2884CCC727A8F6
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/v2joQW6joE1P8wvZaC_cc6Xqpos.roa
Signing time: Thu 07 Sep 2023 11:52:54 +0000
ROA not before: Thu 07 Sep 2023 11:52:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.134.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:7c:f3:4f:7d:93:51:8d:5e:28:84:cc:c7:27:a8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Sep 7 11:52:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf68e8416ea3a04d4ff30bd9682fdc73a5eaa68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:1c:82:50:62:97:31:fd:7f:50:aa:ae:e6:
f9:4d:5f:3d:fb:8c:5c:ed:8a:b7:2d:7a:d5:40:4e:
aa:bb:c3:47:fc:89:43:6a:1f:75:f4:31:d5:95:87:
80:8b:1f:28:b5:a2:71:31:2c:90:08:db:5b:cc:37:
87:78:01:9c:c5:26:17:cd:4c:b1:d1:a7:1c:57:4f:
8b:ea:67:ae:22:be:33:f1:42:86:23:97:ae:25:3a:
85:53:10:e2:cc:39:c2:9b:3e:ab:c3:6e:f6:9c:af:
85:1f:bd:9b:08:bd:91:4a:21:52:a7:41:e6:a8:fc:
07:96:d7:f5:74:42:02:89:12:4a:e1:f7:b9:a8:92:
eb:cb:3c:a4:1d:06:9a:23:97:37:c4:a5:85:f9:ca:
9b:5d:8c:c7:6b:4f:6f:f1:83:7d:ea:8e:33:39:72:
bd:69:99:74:f4:4f:06:b6:c0:06:1d:a7:1a:e8:b2:
1b:cc:38:b5:c4:0b:13:15:ad:22:27:8a:0a:a4:1e:
11:d9:8e:38:c7:3b:ef:a7:71:f0:c8:5e:c9:a8:2d:
d9:fc:46:48:6d:25:8c:4a:ae:2b:40:8b:96:fd:46:
ee:04:de:d4:a6:86:8b:3d:3b:b8:60:a4:a9:ee:10:
08:4a:39:5c:6e:82:0b:4c:1d:1b:f2:96:08:af:71:
b9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:68:E8:41:6E:A3:A0:4D:4F:F3:0B:D9:68:2F:DC:73:A5:EA:A6:8B
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/v2joQW6joE1P8wvZaC_cc6Xqpos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.36.0/24
Signature Algorithm: sha256WithRSAEncryption
96:a3:0e:b4:97:47:e7:99:93:a3:2f:a7:d6:f9:ad:c6:ec:14:
a7:84:5d:ce:36:1b:c2:f7:6d:45:e7:11:fe:6b:9a:14:96:57:
66:92:18:be:f1:4b:55:9c:b5:a9:99:df:cc:d2:e3:45:9a:8d:
1c:66:99:bb:ed:82:6a:8b:94:fd:a8:f0:ec:f6:3f:74:0c:e0:
21:22:46:e8:46:90:03:39:3b:7a:ce:0d:96:85:b0:35:92:1d:
20:6e:86:f2:a9:b1:76:b2:f8:70:11:46:d3:d1:09:b9:a4:bb:
2e:cc:55:0c:a8:7f:dd:f8:ff:5e:33:e6:70:f5:11:73:91:d2:
1e:4e:59:aa:d0:98:3c:be:e9:f3:b0:54:2d:54:9c:e5:84:cd:
33:d4:a4:a9:b3:0d:07:0b:63:06:9b:d9:ce:fa:37:38:3f:d0:
d5:3d:c4:1d:94:e8:78:97:60:31:ca:e2:9f:3f:52:0a:48:77:
af:57:c0:48:72:ea:ae:2b:2e:e5:6d:9b:9d:9e:4d:a4:71:e3:
a9:31:48:26:6e:15:34:bf:f1:50:a9:18:e5:57:45:b2:40:09:
ef:0b:c7:8b:7e:9b:a4:47:ab:33:f5:df:a4:2a:de:e0:cf:79:
67:ed:73:d9:77:55:10:7c:11:a5:46:4d:ed:0c:16:12:b8:09:
52:59:3f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 16:27:21 2023 by rpki-client on console-fra.rpki-client.org