Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7t_AtKI-XTHh25N_SUqRgSuZ78Y.roa
File: 7t_AtKI-XTHh25N_SUqRgSuZ78Y.roa (raw, json)
Hash identifier: qOwYzbDaqTn8hqczWUpEha43A3hwXS0Ltr5wnjLAUC8=
Subject key identifier: EE:DF:C0:B4:A2:3E:5D:31:E1:DB:93:7F:49:4A:91:81:2B:99:EF:C6
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018A53CEECDCAB6C53D6F27AB29D6B410308
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7t_AtKI-XTHh25N_SUqRgSuZ78Y.roa
Signing time: Sat 02 Sep 2023 02:53:04 +0000
ROA not before: Sat 02 Sep 2023 02:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.134.36.0/24 maxlen: 24
45.137.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Sep 2023 11:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:53:ce:ec:dc:ab:6c:53:d6:f2:7a:b2:9d:6b:41:03:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Sep 2 02:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eedfc0b4a23e5d31e1db937f494a91812b99efc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:9f:07:57:b9:44:01:a1:97:d7:26:12:8f:
ef:c6:7e:ba:43:13:9b:61:6f:63:5e:66:e8:3e:66:
c3:5b:d8:26:fe:d4:b1:0c:1e:02:ed:0a:0b:5a:e4:
a6:eb:a1:d8:f6:a3:45:c5:5d:1c:b5:00:b5:06:62:
e7:05:b3:bc:a4:3b:71:c9:35:cb:76:8c:64:f5:ae:
98:65:74:fc:42:60:bc:d8:72:99:9e:01:c9:c1:11:
ee:27:98:06:79:99:56:f7:ee:36:10:d8:80:7e:93:
a2:c6:67:51:d9:9a:8c:bc:b0:9f:ad:ca:57:6b:74:
15:d4:c8:bd:34:34:c8:4d:9c:4f:ef:32:50:ed:7f:
68:42:d7:17:85:1f:6a:fa:b9:04:5a:2a:62:93:ec:
be:d5:98:62:a0:38:69:38:bf:c6:a3:8c:11:c0:1a:
7a:3e:b2:65:6b:57:72:7d:a9:0a:ff:23:db:e1:62:
4f:1c:8e:f9:a0:dd:db:4e:cb:e4:e0:76:63:40:08:
84:7c:56:a6:16:00:fe:63:cf:85:b0:e6:7d:6f:51:
7f:44:80:85:35:ff:49:10:d6:23:38:24:cb:99:b7:
94:d4:ab:af:ed:15:39:4b:35:a2:02:a3:4e:1c:a4:
11:78:14:67:9e:09:86:fe:4e:f1:46:c8:a6:2b:c9:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DF:C0:B4:A2:3E:5D:31:E1:DB:93:7F:49:4A:91:81:2B:99:EF:C6
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7t_AtKI-XTHh25N_SUqRgSuZ78Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.36.0/24
45.137.201.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:97:d1:1f:3f:90:cc:30:dd:27:69:e3:4a:29:56:d0:b7:59:
cf:75:58:e4:94:52:2d:85:bb:8e:b5:7f:50:e9:b1:3d:73:7d:
66:56:a2:1b:5c:9c:4c:88:b7:cd:ed:56:9a:23:af:17:c1:6c:
02:76:cc:6a:7c:67:cf:c4:76:74:68:45:b9:df:ca:f0:e4:d1:
e9:a5:4d:44:14:f5:a9:e6:ab:62:a9:67:60:60:f9:44:d5:6f:
5a:c0:79:de:fd:f4:83:2e:07:13:60:8b:5a:34:27:02:17:91:
40:98:21:53:f5:e7:88:81:cc:57:77:3f:e4:5c:05:70:a0:d0:
c4:36:07:36:c9:40:59:24:a3:c2:b1:5c:0f:7c:4d:a8:5f:73:
b3:2d:1a:42:21:e3:cb:23:5f:07:4e:0b:23:bf:30:2d:0f:8d:
6a:fa:2e:94:51:43:5f:5e:cf:2c:8a:23:40:b0:34:5a:d8:1f:
ac:ce:d0:4d:8c:70:73:19:45:ea:dd:5a:bf:fc:4c:e3:97:30:
6f:cc:ed:23:a9:c1:55:d9:cf:f3:71:1a:30:fb:de:fd:b3:31:
54:da:89:09:02:c1:a4:bd:4d:ff:3c:a8:95:4a:15:8f:dd:94:
27:6a:3d:b9:9b:f1:b1:57:e6:86:94:75:49:50:ef:d3:3c:f9:
08:26:15:5d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYpTzuzcq2xT1vJ6sp1rQQMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjMwOTAyMDI1MzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWRmYzBiNGEyM2U1ZDMxZTFkYjkzN2Y0OTRhOTE4MTJiOTllZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gqfB1e5RAGhl9cmEo/vxn66QxOb
YW9jXmboPmbDW9gm/tSxDB4C7QoLWuSm66HY9qNFxV0ctQC1BmLnBbO8pDtxyTXL
doxk9a6YZXT8QmC82HKZngHJwRHuJ5gGeZlW9+42ENiAfpOixmdR2ZqMvLCfrcpX
a3QV1Mi9NDTITZxP7zJQ7X9oQtcXhR9q+rkEWipik+y+1ZhioDhpOL/Go4wRwBp6
PrJla1dyfakK/yPb4WJPHI75oN3bTsvk4HZjQAiEfFamFgD+Y8+FsOZ9b1F/RICF
Nf9JENYjOCTLmbeU1Kuv7RU5SzWiAqNOHKQReBRnngmG/k7xRsimK8mhKwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO7fwLSiPl0x4duTf0lKkYErme/GMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvN3RfQXRLSS1YVEhoMjVOX1NVcVJnU3VaNzhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYYkAwQA
LYnJMA0GCSqGSIb3DQEBCwUAA4IBAQCdl9EfP5DMMN0naeNKKVbQt1nPdVjklFIt
hbuOtX9Q6bE9c31mVqIbXJxMiLfN7VaaI68XwWwCdsxqfGfPxHZ0aEW538rw5NHp
pU1EFPWp5qtiqWdgYPlE1W9awHne/fSDLgcTYItaNCcCF5FAmCFT9eeIgcxXdz/k
XAVwoNDENgc2yUBZJKPCsVwPfE2oX3OzLRpCIePLI18HTgsjvzAtD41q+i6UUUNf
Xs8siiNAsDRa2B+sztBNjHBzGUXq3Vq//EzjlzBvzO0jqcFV2c/zcRow+979szFU
2okJAsGkvU3/PKiVShWP3ZQnaj25m/GxV+aGlHVJUO/TPPkIJhVd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:27 2024 by rpki-client on console-fra.rpki-client.org