Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7eMN3ELoFm7qALPUDmQdV6FZf9A.roa
File: 7eMN3ELoFm7qALPUDmQdV6FZf9A.roa (raw, json)
Hash identifier: ATWrM7W85mkQFtDs6/zJM+unmNM8mz+7ucpHuoXwtDA=
Subject key identifier: ED:E3:0D:DC:42:E8:16:6E:EA:00:B3:D4:0E:64:1D:57:A1:59:7F:D0
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019390C6D527AC8925819D1D08DA20F8533B
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7eMN3ELoFm7qALPUDmQdV6FZf9A.roa
Signing time: Wed 04 Dec 2024 08:26:10 +0000
ROA not before: Wed 04 Dec 2024 08:26:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.134.36.0/24 maxlen: 24
45.142.105.0/24 maxlen: 24
45.151.56.0/24 maxlen: 24
92.118.204.0/22 maxlen: 22
204.11.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Dec 2024 09:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:90:c6:d5:27:ac:89:25:81:9d:1d:08:da:20:f8:53:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Dec 4 08:26:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ede30ddc42e8166eea00b3d40e641d57a1597fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:96:69:51:2a:8d:1c:93:64:67:2e:73:f4:
34:f5:0b:da:c6:01:b8:b3:e9:e7:f4:01:e6:c3:fe:
63:05:bd:49:f9:97:ef:f2:44:d1:29:ea:fe:03:77:
cb:5b:95:bc:10:b8:81:3b:fd:57:d6:ed:ab:e8:7f:
1a:55:40:1a:92:73:9f:d7:e6:27:d8:8b:06:0f:c2:
08:f9:c4:67:60:3a:c4:44:f5:4a:2b:8c:0b:15:fa:
8f:54:5f:b1:b3:34:7d:73:d0:d4:7e:be:09:71:48:
d0:b0:72:36:23:b7:5c:c0:84:8b:cb:66:c8:07:6e:
2d:74:57:80:9d:38:cb:96:89:ad:f4:02:26:30:fc:
c9:97:9a:94:27:9e:ae:e0:f4:bc:c0:06:94:42:f6:
9f:dd:4b:13:0c:5d:2a:59:6a:99:2e:b1:ca:7f:1a:
e0:f6:ee:86:99:d8:e5:9a:62:6f:e4:a5:d9:51:f2:
a2:d4:fd:73:55:71:d8:91:0e:97:9f:51:a7:cb:dd:
dc:75:d7:c0:81:c4:7a:9c:13:0f:66:56:e7:55:b2:
4d:ce:1c:e7:0e:4e:c4:c6:5f:07:0a:fa:25:ff:35:
b8:ad:bd:19:93:6a:62:d0:6f:a6:bd:22:9b:05:41:
da:28:0f:c7:04:9b:da:a0:d7:28:33:13:06:76:06:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E3:0D:DC:42:E8:16:6E:EA:00:B3:D4:0E:64:1D:57:A1:59:7F:D0
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7eMN3ELoFm7qALPUDmQdV6FZf9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.36.0/24
45.142.105.0/24
45.151.56.0/24
92.118.204.0/22
204.11.1.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d6:39:48:c7:19:3c:1d:ac:6a:02:b5:37:f6:ef:63:2f:af:
34:b7:4d:4e:c1:2a:12:60:4f:09:a7:af:6b:94:1b:db:8a:93:
80:ce:3e:d5:af:48:41:32:33:5d:d2:c1:d7:b1:f1:97:34:f7:
1d:a1:3d:28:1c:92:d9:fd:65:d7:c2:92:53:1d:5b:99:c7:fd:
23:3a:de:a2:2f:b1:6d:31:fb:7f:97:1f:4a:fe:ea:56:cb:10:
e0:79:b3:5f:dd:52:c3:24:9b:3d:92:da:1d:a7:aa:30:41:e2:
14:cd:91:65:35:ad:9c:31:e7:50:79:af:97:8a:dd:60:50:79:
51:17:b8:b8:6e:b4:14:ed:6c:bd:de:1d:7e:91:e7:5e:3a:bb:
a0:d5:57:be:8d:5b:01:91:c7:ec:ca:34:85:3a:65:11:4d:c3:
2e:35:0b:c3:2e:20:88:de:db:dd:6a:96:22:03:ff:10:ff:e0:
cb:d1:bb:d4:58:b3:03:6b:26:94:56:a6:38:4c:b4:6d:94:ba:
43:3e:69:a7:a0:1f:33:a5:2c:01:c5:78:d2:ab:1a:b2:5d:05:
95:b5:be:1e:7f:5d:84:42:49:50:d9:ad:bd:26:c7:82:95:b4:
35:d5:fa:f2:0d:1b:49:c6:5b:51:48:49:91:2a:89:1b:d2:5b:
03:72:8b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:41:46 2025 by rpki-client