Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-Ptl_fRVL7JLNSDWiSjMVxX3C0w.roa
File: 1-Ptl_fRVL7JLNSDWiSjMVxX3C0w.roa (raw, json)
Hash identifier: BdhyhChGLN3ohFdvWPIbWuFUgN4G6m8qWiunUW08Z5U=
Subject key identifier: F8:FB:65:FD:F4:55:2F:B2:4B:35:20:D6:89:28:CC:57:15:F7:0B:4C
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018736D92AC3A5B37D5E2DA9FB880C7F2E29
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-Ptl_fRVL7JLNSDWiSjMVxX3C0w.roa
Signing time: Fri 31 Mar 2023 08:46:54 +0000
ROA not before: Fri 31 Mar 2023 08:46:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12348
IP address blocks: 45.145.227.0/24 maxlen: 24
45.134.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 09:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:d9:2a:c3:a5:b3:7d:5e:2d:a9:fb:88:0c:7f:2e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Mar 31 08:46:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8fb65fdf4552fb24b3520d68928cc5715f70b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:ad:12:cc:05:c3:99:8f:2b:e0:b7:06:e0:
5c:6b:59:98:0f:f0:6f:f0:96:64:81:23:7d:99:d8:
be:09:13:d0:12:df:77:b3:5e:ea:7d:f8:f6:e0:b2:
31:57:d0:05:18:72:a0:25:32:f5:81:c4:de:8e:87:
0d:41:4b:95:0c:d8:64:05:c9:e4:4d:44:4c:fb:93:
23:c6:f3:47:bf:b8:a4:81:76:e8:89:29:ee:e0:b8:
bb:29:2c:09:c2:85:75:c6:fd:77:e0:62:c1:a1:9b:
ea:56:58:b6:38:b9:48:e3:e3:3f:6c:dd:c2:97:1f:
72:31:32:2a:11:db:8b:e2:43:a6:16:de:df:75:ea:
da:57:c0:f5:1d:83:43:a3:5e:d1:81:e8:b0:c1:2a:
5b:66:33:06:82:66:25:49:65:1e:2a:d0:0a:29:2e:
6f:2f:65:0a:32:a6:e9:39:5d:bc:16:07:95:a0:7a:
b6:f5:84:e1:2b:a4:ee:33:2b:16:19:53:c8:a5:15:
df:f1:e4:a6:6e:62:5b:15:49:f4:07:1e:12:00:52:
2e:7f:61:a4:3d:d3:3c:32:27:17:44:7a:7f:ad:1a:
48:de:b8:dc:e2:3d:fc:56:e8:f6:29:40:a5:48:b4:
e5:95:9b:d4:41:ed:05:66:26:26:14:85:52:8b:ec:
e4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FB:65:FD:F4:55:2F:B2:4B:35:20:D6:89:28:CC:57:15:F7:0B:4C
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-Ptl_fRVL7JLNSDWiSjMVxX3C0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.111.0/24
45.145.227.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ee:4c:36:36:98:d6:c5:68:a0:49:c1:55:b5:99:92:44:0a:
fa:0c:44:7a:aa:4b:b8:07:c0:c7:46:ad:99:18:22:9c:ed:bf:
df:c6:07:01:13:4e:d3:06:80:88:74:a5:9e:4f:17:73:dc:cf:
01:8d:03:60:02:c2:7e:8c:91:29:cb:85:80:ca:91:21:50:8b:
f8:bc:5b:f1:ed:7e:39:7f:e8:de:56:e4:0b:9f:79:fa:53:a4:
f9:1b:0b:26:83:49:39:a6:81:a4:c0:21:4f:00:c5:7c:38:15:
3b:f1:83:f9:f3:7a:d3:7f:bc:b9:a8:fa:4c:ed:99:a8:b7:a1:
06:34:c0:cd:7b:82:55:06:c8:08:fd:c0:d0:5f:50:6d:6f:1e:
82:1f:5f:e3:ce:ed:6c:1b:99:34:f2:77:43:dc:0e:e0:83:5f:
da:9b:65:15:0c:63:1c:63:1a:d6:99:72:4d:a4:7f:97:5e:14:
3a:74:db:f1:53:aa:39:dc:95:a4:0b:83:76:bb:cb:96:41:ec:
c1:ba:9a:ef:d1:9c:c9:d8:17:58:ac:66:fe:bf:66:e6:5f:8b:
27:fc:ec:04:5d:f6:a7:32:4f:ca:b0:17:c7:f4:94:4f:c2:02:
2f:1f:a3:18:79:81:2e:00:cb:05:49:1e:1b:65:58:41:0e:46:
00:cc:fe:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:27 2024 by rpki-client on console-fra.rpki-client.org