Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/MytLEK_joJXWNe9L-6Jy01nVK1o.roa
File: MytLEK_joJXWNe9L-6Jy01nVK1o.roa (raw, json)
Hash identifier: jdaG/18kH+57V90ipYVUieza+YGS5r1vE5X3jbvt35o=
Subject key identifier: 33:2B:4B:10:AF:E3:A0:95:D6:35:EF:4B:FB:A2:72:D3:59:D5:2B:5A
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E3FC55B572EE36AFF31840C6528F2
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/MytLEK_joJXWNe9L-6Jy01nVK1o.roa
Signing time: Tue 02 Jan 2024 08:33:17 +0000
ROA not before: Tue 02 Jan 2024 08:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207252
IP address blocks: 45.133.75.0/24 maxlen: 24
45.84.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jan 2024 03:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:3f:c5:5b:57:2e:e3:6a:ff:31:84:0c:65:28:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=332b4b10afe3a095d635ef4bfba272d359d52b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:6b:37:1c:19:56:79:ac:27:7b:cf:77:34:
40:61:68:06:3a:6e:d7:73:a1:1d:20:e6:26:e9:e0:
c9:f0:ce:ff:8e:de:2f:0a:41:8a:9f:bd:f9:b6:9c:
0d:03:4c:fb:7b:bb:f4:b6:ab:70:9d:5b:24:0b:69:
46:f2:56:c8:a0:eb:01:65:9c:d9:80:47:36:41:ae:
33:c2:ab:df:8e:01:16:f9:0a:b6:3b:a0:a7:37:67:
e4:98:55:e8:1b:94:56:e4:9c:94:99:f1:4e:48:bd:
2c:40:a5:52:84:4d:3d:d7:7b:0b:fa:4e:84:f4:ee:
5a:b1:b6:b9:ed:39:0c:1a:23:fc:85:14:f8:37:0c:
88:00:d9:94:cf:ee:2d:2a:32:fc:42:ad:90:74:b8:
41:13:ff:7b:b1:62:1d:e9:c7:61:79:e7:56:12:98:
39:17:8a:4c:85:7a:f1:65:0c:36:4d:d6:df:96:f6:
82:4b:0f:22:1a:67:73:0e:56:1a:1a:a8:d8:bd:92:
67:0d:ea:a8:c6:52:f3:0e:59:e1:a3:99:15:5a:d0:
85:09:cc:d3:3f:e8:14:e9:30:b0:0c:1b:9c:6f:56:
04:8c:d7:67:a5:4f:8e:37:ab:4b:1b:3a:1e:21:da:
04:2d:a3:c9:a0:79:49:d3:47:9b:ee:13:3c:fd:6e:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2B:4B:10:AF:E3:A0:95:D6:35:EF:4B:FB:A2:72:D3:59:D5:2B:5A
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/MytLEK_joJXWNe9L-6Jy01nVK1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.197.0/24
45.133.75.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:94:80:6f:09:d4:67:3b:d8:9c:6b:67:96:6e:97:4e:a8:68:
1b:c0:c3:3d:e6:19:d9:f8:fe:2d:8b:81:fd:6a:7f:bc:d2:8d:
21:02:08:a0:5c:c6:9f:de:d1:54:5d:c8:b2:a8:c1:e4:33:dc:
35:27:1c:e3:a9:3a:79:e3:b0:8d:78:fa:3a:a5:68:3b:1d:a0:
09:23:bb:b3:35:f0:6d:09:02:25:3a:31:49:d7:c2:b6:0f:8e:
36:d0:d2:2a:35:ad:98:3d:eb:83:b9:fd:25:2b:a9:74:87:7f:
37:24:ac:77:83:21:2c:ba:94:85:2a:f5:40:08:24:f4:16:cf:
64:7f:3f:ff:14:63:93:ee:38:23:b1:72:e6:b5:53:82:34:6f:
dc:3c:60:a7:a0:9c:f2:6b:d6:ea:f6:d3:e9:07:db:f6:db:2e:
9e:b5:35:d5:43:d4:21:34:74:b1:7d:07:b9:a1:d3:3f:4f:f8:
72:94:fe:2f:ac:53:42:1e:77:53:bb:35:73:0b:2c:b4:8e:b1:
3d:c3:d1:76:c4:05:2b:13:1e:9c:e5:ba:70:60:8a:89:33:19:
b1:d6:42:26:60:be:b3:94:c1:d6:fc:54:ee:b5:a0:29:80:eb:
18:c5:a7:be:f9:49:15:2c:3f:ae:66:ab:78:10:cc:55:2b:d9:
2f:e5:77:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org