Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-TkZQXfrcjvsU_XW0Yg_Q-fwz8s.roa
File: 1-TkZQXfrcjvsU_XW0Yg_Q-fwz8s.roa (raw, json)
Hash identifier: zgyWAm1GKKYyX8NcCS9CxOVzOfltz15x7enzmzSaN6A=
Subject key identifier: F9:39:19:41:77:EB:72:3B:EC:53:F5:D6:D1:88:3F:43:E7:F0:CF:CB
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE6257E7B830548A2B998F875865EF8
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-TkZQXfrcjvsU_XW0Yg_Q-fwz8s.roa
Signing time: Sun 01 Jan 2023 10:35:00 +0000
ROA not before: Sun 01 Jan 2023 10:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204174
IP address blocks: 45.134.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 11:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:25:7e:7b:83:05:48:a2:b9:98:f8:75:86:5e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f939194177eb723bec53f5d6d1883f43e7f0cfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:45:1a:ce:6c:01:32:22:db:0b:a7:96:d4:
e8:cb:30:28:6e:c5:61:eb:d6:d6:77:04:80:45:2d:
0c:02:ef:61:dc:53:87:66:7d:4f:2c:6c:53:a9:7d:
bf:8f:a5:a9:20:19:0b:30:66:2f:04:5a:24:37:42:
0f:0a:d9:01:1f:0c:9f:0a:e3:df:53:0f:6f:2c:ce:
36:69:0a:25:c2:7c:d5:b7:86:bf:fa:c8:44:65:3f:
6d:09:df:01:f5:3f:98:d5:91:67:b9:0a:f4:e7:7b:
d2:54:3b:d0:8f:76:e0:5d:33:10:39:58:ac:eb:9c:
09:14:56:93:9d:a5:6a:af:f9:83:30:21:a9:b4:7b:
e5:a6:dc:64:39:5c:07:6e:cc:3e:cb:30:7f:48:15:
1c:cd:45:36:e7:4b:0c:49:a6:4d:82:6c:d9:40:f2:
89:81:3a:85:e8:38:0b:25:13:36:66:b4:b5:6f:e0:
b9:31:95:64:56:10:34:78:78:ce:7e:e4:80:12:73:
bd:87:c7:1d:35:aa:ad:50:6d:4d:d4:3d:91:37:c9:
29:c1:d2:22:e6:d9:a2:fb:34:c7:bb:bc:ef:21:67:
20:88:fe:2b:29:c4:ab:0c:5b:95:98:1c:9a:0f:50:
9b:28:8e:4e:ad:d6:5b:bf:14:9a:32:b7:df:89:6e:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:39:19:41:77:EB:72:3B:EC:53:F5:D6:D1:88:3F:43:E7:F0:CF:CB
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-TkZQXfrcjvsU_XW0Yg_Q-fwz8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:25:10:a7:53:a7:67:f8:e7:7c:8f:6a:65:3d:82:a7:4c:1a:
4b:ef:db:22:92:19:12:3c:1b:37:3d:60:f8:b6:54:2a:87:c2:
90:37:88:69:9d:8c:cc:d7:ec:95:3e:55:f9:92:29:68:8e:d5:
67:01:fc:35:e8:28:ae:b4:5b:3b:cd:95:a9:70:f9:6a:d4:30:
84:6d:9f:7d:e6:7a:10:26:1a:b1:29:ee:2d:2d:25:c3:5f:2e:
2d:7a:67:c9:87:6a:ec:e8:31:12:7a:78:23:26:7e:71:83:51:
2b:83:44:c0:ac:e9:16:52:7d:1a:70:f0:84:8f:9a:c9:bd:67:
57:5b:4d:48:47:b3:39:a7:78:cf:ae:09:51:d2:c8:f0:51:da:
ef:5b:0e:16:55:49:a6:b2:aa:44:a5:f8:ff:f2:65:53:f7:75:
10:71:9f:5b:6c:0c:0d:b9:0c:21:81:50:92:6a:77:d4:b3:8f:
80:2e:52:f1:53:c8:bc:85:0d:bc:53:a4:55:d2:08:3b:f1:0d:
c6:5d:07:98:e8:35:9c:67:74:17:ab:f1:15:7e:83:a7:31:60:
b0:28:cb:ff:cd:f1:2f:9e:34:e0:d9:70:62:03:3e:3a:a9:ba:
75:1b:d9:e1:e2:f7:a3:1b:d0:e3:70:0d:68:c4:94:d8:b6:89:
48:d9:61:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org