Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/CsaSUOaUAiyWrkI5g1yIAAsoTD4.roa
File: CsaSUOaUAiyWrkI5g1yIAAsoTD4.roa (raw, json)
Hash identifier: SnpLPd+BpFtU6MOiunTZbYlsMOd6vVfumducfAiUn7o=
Subject key identifier: 0A:C6:92:50:E6:94:02:2C:96:AE:42:39:83:5C:88:00:0B:28:4C:3E
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0193AAB7A678B4E7DDF883B9A6D8CB40B6DE
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/CsaSUOaUAiyWrkI5g1yIAAsoTD4.roa
Signing time: Mon 09 Dec 2024 09:19:42 +0000
ROA not before: Mon 09 Dec 2024 09:19:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.134.36.0/24 maxlen: 24
45.142.105.0/24 maxlen: 24
45.151.56.0/24 maxlen: 24
92.118.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:b7:a6:78:b4:e7:dd:f8:83:b9:a6:d8:cb:40:b6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Dec 9 09:19:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ac69250e694022c96ae4239835c88000b284c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bd:37:3d:62:f6:ce:07:1a:52:15:c7:18:72:
7d:93:26:9f:dd:41:c2:0e:ed:f3:3a:23:7e:52:75:
78:8d:85:38:bb:be:38:d3:96:90:ef:79:a3:c4:13:
f2:5a:90:5b:40:bb:3e:b9:9a:4e:0a:db:54:d6:80:
2a:2e:43:71:9f:d9:fc:fc:af:12:e3:e1:df:2c:c5:
e6:1c:15:d2:5e:8b:ef:e9:9d:08:32:48:2a:ee:9b:
38:cf:4c:a6:be:0b:ec:ed:da:c3:d7:65:ca:b6:69:
14:fa:ed:b4:7a:70:cc:d2:98:d4:7f:15:bd:72:bb:
f1:a3:9e:10:e2:e6:c5:93:58:28:96:f5:b8:25:b0:
ca:3d:c1:4f:41:a0:e5:62:6d:62:79:1d:b4:89:48:
bb:3c:e8:4d:ee:11:ab:11:01:45:aa:ca:60:d0:33:
3b:7c:1e:82:f3:82:d3:ae:c4:c5:b9:3a:87:5d:87:
2e:ce:11:63:ef:ed:85:ad:04:f9:00:22:b6:cb:77:
4f:7e:a0:45:5d:3f:4d:d6:19:7b:8a:b4:11:af:d8:
c2:84:d0:6a:01:03:f3:e9:c3:17:2b:e6:2a:2c:4b:
b2:62:15:e9:02:78:db:4c:63:4f:11:09:c4:67:ef:
93:08:50:5a:6b:b2:8a:42:a7:d9:64:68:52:80:b8:
35:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C6:92:50:E6:94:02:2C:96:AE:42:39:83:5C:88:00:0B:28:4C:3E
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/CsaSUOaUAiyWrkI5g1yIAAsoTD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.36.0/24
45.142.105.0/24
45.151.56.0/24
92.118.204.0/22
Signature Algorithm: sha256WithRSAEncryption
23:f3:fb:07:57:7e:ad:b3:87:27:ee:54:93:4c:ff:0d:66:22:
8e:48:ee:6e:df:6a:62:0a:ca:a6:43:50:29:c6:41:63:9f:88:
eb:4b:1f:00:61:44:e8:c3:ce:d3:f5:2b:0a:47:a6:c3:0d:8a:
46:75:80:88:0c:bd:a0:28:d7:51:2e:03:ce:09:c2:88:92:2c:
fa:67:ff:79:3e:1b:f0:ac:43:0f:67:78:d5:ea:32:fb:63:d5:
72:ed:f4:ed:d4:37:64:60:0e:17:6d:93:04:70:94:4f:e7:b8:
ef:c7:44:f9:1d:5d:3b:0d:32:b3:4a:f0:83:2a:54:ca:31:60:
41:b6:39:f3:a1:93:20:ab:f9:ae:3d:b7:6f:a6:87:98:cd:17:
11:ab:52:3f:69:de:75:be:ef:dd:70:4e:46:bb:2b:1f:5a:21:
52:0c:a3:3a:38:96:00:7a:98:e0:99:cf:d3:00:44:8b:0b:4a:
df:ef:be:57:43:4a:c9:58:fb:73:d9:e6:32:f2:e9:78:32:1e:
43:81:7e:67:25:a4:61:c8:c3:da:4a:38:10:e0:78:b7:1a:3c:
7f:76:1c:0b:e8:02:20:70:fc:ce:96:52:78:5e:06:19:fa:44:
73:f1:44:e1:f6:e1:a4:6d:2c:76:5b:4e:3d:7b:48:4d:f0:52:
83:81:23:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:08:42 2025 by rpki-client