Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Ry8wR7JTA6EUpRRrO0dioWvHcsE.roa
File: Ry8wR7JTA6EUpRRrO0dioWvHcsE.roa (raw, json)
Hash identifier: qtOFg3sz67THhIAfUAqlg5OzxN1sW2NWG/vm61VyoqM=
Subject key identifier: 47:2F:30:47:B2:53:03:A1:14:A5:14:6B:3B:47:62:A1:6B:C7:72:C1
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0186E6EBA0FAC68C56ABAC9216FC83632280
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Ry8wR7JTA6EUpRRrO0dioWvHcsE.roa
Signing time: Wed 15 Mar 2023 20:17:27 +0000
ROA not before: Wed 15 Mar 2023 20:17:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.153.24.0/22 maxlen: 22
45.137.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Mar 2023 09:06:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e6:eb:a0:fa:c6:8c:56:ab:ac:92:16:fc:83:63:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Mar 15 20:17:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=472f3047b25303a114a5146b3b4762a16bc772c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5d:2f:3f:56:4a:09:fa:a4:d8:10:21:5b:ba:
0d:99:31:ba:97:e4:5a:9b:19:b6:66:d6:86:2f:fe:
ec:e0:3b:6d:e4:e3:59:c5:e3:86:71:80:26:fd:d7:
29:f7:1a:9b:2a:fa:9a:1c:f7:c0:c1:dc:0e:c4:10:
9b:1f:96:a0:30:82:71:2b:68:a3:8b:30:5a:7d:85:
09:38:9b:e2:d2:30:23:a2:73:86:4b:b8:18:5f:57:
4e:65:f7:02:fe:22:4b:6d:72:4c:ed:e5:26:f4:72:
13:79:74:ff:09:0d:1c:b8:5c:4d:32:84:aa:4e:ae:
90:97:1c:cf:30:07:f7:8e:aa:f1:ea:eb:f1:aa:b1:
98:d7:d7:9e:1b:29:1d:1c:da:6a:5b:eb:91:18:00:
66:e7:10:87:fe:15:2c:4d:d2:15:36:54:1c:89:71:
5b:1f:bb:0b:6a:4f:12:96:f8:ca:65:ac:c3:6e:e6:
83:6b:86:fd:cf:f1:23:21:3d:d8:54:96:fa:e2:3a:
08:56:58:2c:b8:8b:84:65:ba:51:47:0e:da:94:10:
8f:b6:b5:dd:a1:8b:45:b7:e7:94:c8:ae:97:89:57:
1d:b6:20:03:7b:e5:af:b4:9f:60:01:50:f7:e0:87:
43:25:64:b3:c3:ce:0d:63:3a:4a:72:b7:0f:7f:ef:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2F:30:47:B2:53:03:A1:14:A5:14:6B:3B:47:62:A1:6B:C7:72:C1
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Ry8wR7JTA6EUpRRrO0dioWvHcsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.201.0/24
45.153.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:00:df:8e:72:58:88:82:f6:75:58:ea:01:0d:8c:23:11:20:
e3:ce:6f:b5:c0:fd:ae:31:d1:7c:94:6d:36:27:ef:99:c8:86:
0b:4f:88:24:32:e2:ee:d4:ed:4b:ee:b4:d8:f6:51:f5:70:23:
ee:d7:0d:1a:f3:0e:52:2d:2a:b5:26:ae:4b:8f:cd:68:1f:db:
84:39:3c:4a:8a:2b:92:90:60:f6:7d:9a:31:07:9f:9a:39:26:
54:a8:e4:d3:f5:1d:e8:c8:4a:17:41:51:d6:b8:e5:7c:de:f9:
f5:53:1d:b3:77:10:fa:5d:a9:35:e0:52:4a:ba:ae:93:0d:83:
a0:11:ae:1f:c5:89:92:e3:fb:ea:e9:7a:b8:a7:df:cc:10:e4:
1f:9f:9b:00:2b:7c:06:6b:b3:20:8a:19:c8:34:c5:fa:06:6e:
ea:3a:0d:30:d4:d1:a9:68:23:b0:b0:09:f9:66:d9:79:08:66:
1c:53:33:96:54:0f:eb:dd:97:02:af:a2:02:10:ae:3b:1c:7d:
24:0a:88:ee:37:2b:9d:fe:ff:76:ba:b3:67:69:82:20:1a:3c:
b7:b8:20:db:cc:3f:c8:44:d9:ad:3a:66:f5:19:6d:f8:fd:42:
43:d1:f6:3e:4c:41:42:29:7a:2e:60:d8:b8:5c:01:cb:dd:9c:
f0:a9:86:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org