Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Emla2Qy6lMgBOC8zHktoa0dIFs0.roa
File: Emla2Qy6lMgBOC8zHktoa0dIFs0.roa (raw, json)
Hash identifier: M4vc4CpKIka3+kqsqoz/GB5WfxeqMpzzPgOvuRlBIUU=
Subject key identifier: 12:69:5A:D9:0C:BA:94:C8:01:38:2F:33:1E:4B:68:6B:47:48:16:CD
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018731C5A58165372B2BD29FE56666F77BBC
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Emla2Qy6lMgBOC8zHktoa0dIFs0.roa
Signing time: Thu 30 Mar 2023 09:07:29 +0000
ROA not before: Thu 30 Mar 2023 09:07:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200303
IP address blocks: 45.67.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:c5:a5:81:65:37:2b:2b:d2:9f:e5:66:66:f7:7b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Mar 30 09:07:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12695ad90cba94c801382f331e4b686b474816cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:bb:aa:45:e7:a2:0b:84:d2:4c:c7:7d:0f:
05:3c:7d:b4:38:88:3b:03:7d:75:04:a7:40:88:f9:
e9:ac:9b:cc:d0:0b:68:d8:16:5d:ac:27:45:85:6d:
9a:e3:75:21:2c:c9:a3:4d:e6:3e:ca:b7:52:e3:61:
66:12:e4:8d:4f:61:36:07:9e:7f:ea:be:68:6d:7a:
1b:e8:ef:dc:79:00:a5:1a:8f:df:3c:3c:02:de:fd:
35:dd:41:a6:af:6b:4a:1b:cd:b8:65:97:89:bc:30:
9f:d9:38:0c:89:57:b2:05:c6:7c:03:f2:14:dd:1e:
bd:12:6b:fc:e0:30:68:fc:f6:2f:1e:f8:58:9c:f4:
fb:2c:de:58:33:88:70:81:df:31:3d:03:dc:40:8f:
3f:90:bf:94:7a:5c:bd:42:53:ef:ec:8f:a6:6c:c1:
78:22:2f:e7:a6:61:8a:bf:f3:3d:b0:f0:bd:0f:73:
85:c9:1f:d6:85:97:a4:e6:ae:cc:00:a6:77:dc:d2:
81:39:08:14:fc:c8:41:8f:01:a1:9f:f3:53:13:3b:
ec:da:fc:69:5d:42:92:cc:23:0f:94:ba:a6:1c:1c:
d3:b6:de:8a:70:a3:bf:05:b2:41:5d:e8:13:46:eb:
46:f1:0c:2c:01:da:97:ff:e6:0b:2b:f2:6b:76:ed:
96:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:69:5A:D9:0C:BA:94:C8:01:38:2F:33:1E:4B:68:6B:47:48:16:CD
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Emla2Qy6lMgBOC8zHktoa0dIFs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.138.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:d1:da:ba:41:07:a2:7d:cf:7f:b4:ca:63:79:68:c4:4c:5c:
58:3d:c5:2b:29:81:36:e0:b3:83:56:91:62:aa:d3:39:4f:6d:
15:be:60:26:b0:c1:d0:5b:f7:98:fc:11:04:93:d3:4e:67:19:
12:04:10:dc:05:c1:f4:83:84:a6:c4:82:59:85:d5:9e:32:19:
fa:32:cb:2d:e5:77:62:bb:46:72:9d:4e:35:a8:87:3f:65:31:
72:99:68:90:03:14:06:0e:0a:8e:92:5e:49:5b:6c:7d:72:0a:
22:70:49:e8:e2:ab:d1:78:bd:3e:61:16:29:37:b9:4c:11:ef:
b6:18:93:1d:ea:92:75:85:39:0f:17:88:b2:c9:f0:fc:52:f5:
33:77:34:fb:8a:eb:07:ab:7c:15:bb:65:d4:20:93:1e:11:43:
3e:79:83:73:ae:92:d8:65:ec:b6:a7:ee:b1:e8:0a:e0:ce:6d:
cc:11:ec:74:cd:70:a8:c8:8c:03:6c:3e:b5:3b:d3:2a:ac:ef:
0d:df:d4:1e:39:ca:b8:cc:89:34:15:66:60:93:e2:8d:ab:c5:
b5:af:5a:58:97:c9:8a:cb:bb:a7:da:2f:9c:91:42:d2:28:58:
1c:09:d7:09:34:42:b6:be:78:e2:85:bd:4e:13:31:e2:56:18:
da:8c:db:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org