Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/2fwGl8XcNf6riqRsM6YT0XLvsns.roa
File: 2fwGl8XcNf6riqRsM6YT0XLvsns.roa (raw, json)
Hash identifier: EE063v5zkyv9HZq/hvS+ARIh+DfawaN8iF5pJkaMHAo=
Subject key identifier: D9:FC:06:97:C5:DC:35:FE:AB:8A:A4:6C:33:A6:13:D1:72:EF:B2:7B
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018A03FAD4EB82FA66DAFBA88093FADED957
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/2fwGl8XcNf6riqRsM6YT0XLvsns.roa
Signing time: Thu 17 Aug 2023 14:51:24 +0000
ROA not before: Thu 17 Aug 2023 14:51:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203363
IP address blocks: 45.67.84.0/24 maxlen: 24
45.67.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 08:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:fa:d4:eb:82:fa:66:da:fb:a8:80:93:fa:de:d9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 17 14:51:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9fc0697c5dc35feab8aa46c33a613d172efb27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5f:73:2c:09:77:7a:92:03:74:d0:c8:dd:c0:
9e:b7:6b:a9:3d:19:54:28:09:04:3d:40:be:a6:a3:
d8:f6:9f:9a:06:9a:83:cf:41:84:19:0b:bd:04:81:
3a:1e:a2:fa:98:e8:a7:3e:03:4f:dc:55:47:79:02:
e8:a9:0c:a8:64:f3:50:37:c8:ba:b0:be:42:41:f7:
0f:a3:47:d0:06:62:1f:ca:2c:d0:6e:93:b2:f2:ef:
8c:a8:75:7d:9e:1a:90:a3:d6:cc:dd:1d:be:5e:79:
77:d3:5a:12:10:ea:30:43:f7:c4:fb:f9:35:6b:f2:
7b:be:76:bc:3e:58:18:c7:67:25:9c:c0:a4:27:8e:
bf:50:ee:79:87:e4:39:d8:e3:bf:69:d7:1a:14:f5:
10:f5:99:83:92:76:54:d1:5b:73:d0:90:ae:e1:f2:
49:69:64:16:7b:73:e4:c7:02:c7:a9:14:41:3f:80:
b0:df:3c:c7:a5:f3:4a:2c:ab:01:5f:22:cf:d9:56:
0b:7e:16:cd:6f:29:aa:bd:f3:99:fa:21:47:64:97:
8e:17:8b:3c:38:14:6f:29:6e:8c:16:0e:66:f0:d8:
73:d0:98:08:ff:09:47:03:be:5c:67:40:c7:4b:36:
dc:21:7e:f3:ae:78:d0:02:30:74:12:e1:ee:a0:e8:
be:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FC:06:97:C5:DC:35:FE:AB:8A:A4:6C:33:A6:13:D1:72:EF:B2:7B
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/2fwGl8XcNf6riqRsM6YT0XLvsns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.84.0/23
Signature Algorithm: sha256WithRSAEncryption
68:37:95:a9:a0:ad:b7:55:c1:a4:98:df:36:b9:f8:26:92:ad:
84:47:af:b4:44:89:62:91:1f:da:a5:74:01:17:d8:b6:f9:63:
48:d8:8a:cc:9e:01:40:d5:92:9b:03:b1:08:03:39:12:b1:40:
16:00:06:98:15:e7:a1:95:68:04:ab:8c:82:89:96:8c:4e:e4:
bf:8c:d3:77:76:07:d6:4d:38:5a:a8:a9:b9:17:e4:86:6c:02:
ca:d4:d6:82:57:af:b6:67:ef:f6:4b:b4:be:67:6b:73:0f:23:
c7:84:4f:34:78:cc:7e:51:b3:27:59:61:d2:6d:e7:4d:ba:05:
c8:4e:cd:d6:77:d4:62:cc:ec:a3:9b:26:dc:0b:3f:95:a7:ba:
0d:d8:89:36:95:8c:aa:b7:95:95:51:04:97:32:db:3f:24:62:
af:cf:a5:3b:b4:58:ae:c0:b0:32:c7:5e:20:d6:66:7e:df:61:
76:fb:75:d2:9e:17:8f:ad:61:4b:21:be:32:41:c9:79:24:f4:
f6:79:61:f4:ec:d3:ae:6d:6f:7b:29:59:53:27:e0:03:26:e0:
e9:ba:0b:68:66:0a:c3:9f:10:96:48:db:e2:08:da:19:99:ec:
cd:8c:58:76:2f:51:65:7e:c2:85:de:83:fe:19:a1:72:42:da:
99:17:96:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org