Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7alBlc779diSwcDbZ56QEtA8ZBA.roa
File: 7alBlc779diSwcDbZ56QEtA8ZBA.roa (raw, json)
Hash identifier: gruQPBokPqUAFyiC9chKiEHO4FVwpp0jtt9sKfmcolU=
Subject key identifier: ED:A9:41:95:CE:FB:F5:D8:92:C1:C0:DB:67:9E:90:12:D0:3C:64:10
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0189CF4737E67320718EB4F83B15C60AA758
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7alBlc779diSwcDbZ56QEtA8ZBA.roa
Signing time: Mon 07 Aug 2023 09:14:58 +0000
ROA not before: Mon 07 Aug 2023 09:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197071
IP address blocks: 45.134.39.0/24 maxlen: 24
185.117.0.0/24 maxlen: 24
45.67.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 08:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:47:37:e6:73:20:71:8e:b4:f8:3b:15:c6:0a:a7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 7 09:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eda94195cefbf5d892c1c0db679e9012d03c6410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:37:a2:cd:d5:34:82:d5:b8:96:04:e7:8f:
24:61:b8:0c:75:21:c1:6e:43:20:a8:f9:77:29:11:
cd:7f:bf:f4:d1:a7:53:dc:30:1a:bd:c9:56:64:8f:
91:47:02:17:8c:f6:27:bf:4b:0c:6f:7d:2d:b4:63:
ee:33:66:b9:48:85:fb:59:90:4c:bd:7b:2d:e3:e9:
eb:47:5f:c2:7e:eb:5f:fc:87:aa:fd:2d:99:4c:a6:
da:fe:a0:e1:3f:1e:21:60:5b:2b:aa:95:cc:2e:b5:
08:31:dc:d0:f6:99:59:f5:f2:58:8d:2f:61:0f:e7:
b0:51:ed:5c:15:a4:f0:44:ff:21:ad:f7:cd:df:01:
95:3a:22:e8:d8:a4:e3:2a:c3:80:7f:a1:6a:52:24:
f2:f5:1d:6f:46:de:f7:96:dc:c3:aa:98:f6:cc:e4:
45:a7:c0:f5:9c:d9:d3:83:2a:03:81:1a:f0:cc:cb:
36:85:c1:93:ec:aa:b8:29:48:51:bb:89:cc:ef:8e:
ab:66:20:aa:8d:50:d2:c2:e2:4f:de:6a:9b:b3:90:
19:aa:b0:50:21:71:8f:3f:b5:67:9f:0b:9d:ef:4e:
7f:60:97:60:51:52:08:a1:aa:ce:2c:c1:b2:68:8e:
8e:d3:9f:ec:2b:38:38:5d:0c:44:19:f8:07:c5:77:
78:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A9:41:95:CE:FB:F5:D8:92:C1:C0:DB:67:9E:90:12:D0:3C:64:10
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7alBlc779diSwcDbZ56QEtA8ZBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.139.0/24
45.134.39.0/24
185.117.0.0/24
Signature Algorithm: sha256WithRSAEncryption
31:1b:63:63:05:09:26:0f:53:05:d0:d9:83:94:b5:a7:b2:ef:
13:2d:73:66:68:48:2b:ee:b1:7f:e3:e6:16:54:89:e6:44:19:
e5:5f:c6:e5:2e:48:66:c7:8c:db:22:07:b5:1b:e1:1c:f5:26:
bf:6e:2a:1e:46:e6:db:50:d0:1d:57:2f:57:fc:45:f2:57:36:
b6:00:ee:8e:01:75:3f:01:2e:72:ff:c6:05:e3:b6:8f:38:7a:
51:08:fb:c3:19:95:63:35:cd:45:4b:4f:cd:b0:8b:0d:3d:68:
01:91:29:3c:6f:76:f7:16:29:37:e6:16:53:91:71:fa:ed:32:
87:f2:f8:68:4c:1b:98:d2:80:11:6d:0b:11:a7:9e:b7:be:2a:
7a:ce:1e:88:14:50:4f:5d:e5:a7:e2:96:e7:0f:20:65:61:db:
7e:0c:61:96:ac:ad:da:c3:ac:9f:37:dd:18:37:7c:c1:6e:8c:
b2:61:1a:9b:f1:ff:33:20:a6:02:d8:4a:44:23:13:73:24:17:
b4:f8:56:23:da:7b:4a:8d:ed:d8:fe:3a:36:01:ee:60:b1:b3:
07:a4:ab:56:61:79:e6:2f:c2:00:0a:0b:5d:df:e2:98:41:9f:
65:bb:69:68:a6:15:f1:0e:4f:7d:1b:6c:f9:e3:cb:7a:72:f0:
dd:4d:b3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org