Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/VN3aKwr2JZf8OxdQUWmtlAYXJx8.roa
File: VN3aKwr2JZf8OxdQUWmtlAYXJx8.roa (raw, json)
Hash identifier: E0h/DWxkA1b72GG/wkKJL5olIjSSLZIaxRwxUVBTk1A=
Subject key identifier: 54:DD:DA:2B:0A:F6:25:97:FC:3B:17:50:51:69:AD:94:06:17:27:1F
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018FBFE0E2F0A96728491D384CF0C9568A9D
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/VN3aKwr2JZf8OxdQUWmtlAYXJx8.roa
Signing time: Tue 28 May 2024 15:45:37 +0000
ROA not before: Tue 28 May 2024 15:45:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205965
IP address blocks: 45.145.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 12:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:e0:e2:f0:a9:67:28:49:1d:38:4c:f0:c9:56:8a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: May 28 15:45:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54ddda2b0af62597fc3b17505169ad940617271f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:ad:06:a3:ea:e9:0e:80:c6:bd:bb:a7:c6:
3c:87:b8:f3:1d:53:93:ac:b7:9c:da:12:44:8d:a8:
0b:aa:8a:8e:68:93:29:45:16:1f:14:04:86:70:33:
aa:b2:31:9b:9f:5a:b5:27:64:df:8d:74:3b:25:44:
23:44:00:a7:9d:2b:13:2e:3d:1b:bd:e3:04:4d:8b:
11:7a:99:78:9a:26:2b:87:49:56:26:b0:a2:8b:92:
46:d7:48:e1:7e:7b:40:62:f8:46:28:9d:31:bc:27:
4f:25:4b:dc:7d:ca:ad:60:0f:5a:2d:96:1e:90:0b:
bb:5b:b4:7e:27:5a:e1:42:43:7f:6b:99:2c:28:b6:
a7:4e:d3:c2:3e:1c:7f:25:e6:6b:86:1d:05:76:62:
d0:cc:77:1a:e0:26:2d:e8:4d:b6:b3:8e:02:67:ca:
0d:27:1c:e9:f6:fd:69:a7:3f:a7:5d:e1:b7:8b:07:
b6:19:c2:46:f7:72:43:1f:69:97:c0:48:d6:ce:80:
8a:ca:14:ca:56:da:a3:87:64:7e:ef:53:9c:d8:c0:
26:e7:0d:4f:90:fb:2a:00:e7:2b:64:7b:e0:d1:3e:
9c:1f:e3:53:7a:22:08:64:68:98:f8:8f:0e:8b:df:
11:96:55:c2:71:1f:0c:02:bf:c4:87:1b:11:57:c4:
6f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DD:DA:2B:0A:F6:25:97:FC:3B:17:50:51:69:AD:94:06:17:27:1F
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/VN3aKwr2JZf8OxdQUWmtlAYXJx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.226.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:4c:ab:9e:48:18:c3:a2:52:ad:d3:37:01:ce:04:b9:df:fc:
f9:10:dd:8a:cf:35:b8:e3:e9:91:72:0e:bb:c3:90:40:9c:d3:
e9:79:df:f2:be:34:c2:67:3a:d2:a2:89:62:b5:48:a1:40:34:
5f:71:00:a5:cb:94:5b:cd:ad:6e:5a:58:19:38:ce:80:cc:09:
5d:6d:7a:bc:fe:b0:68:78:af:a2:59:a2:61:6f:53:06:06:68:
86:9e:15:e0:67:2f:56:6f:e6:07:68:47:9e:5e:d9:87:9d:16:
9b:56:bb:14:d0:3d:e9:ef:03:90:de:86:33:d5:3d:37:ed:24:
06:f9:37:af:7f:55:70:a7:e3:fd:f8:06:fd:6e:99:b2:7a:c8:
d1:e2:08:dc:15:cb:20:07:ad:ba:32:c7:2b:73:a4:e1:94:9a:
d5:fb:fe:61:bd:36:49:2c:80:6b:fc:6b:6e:c2:c3:ef:95:9e:
c3:7a:f1:ad:50:34:0f:a8:85:bd:15:80:90:64:d5:fc:ba:49:
28:44:6a:6b:12:82:cc:0f:3c:9d:1e:d1:c2:e6:9b:f3:9b:8e:
1e:f9:1e:b3:5e:b1:95:42:be:d0:21:50:4f:cc:00:1d:b2:30:
ee:8a:a6:8d:67:9d:9f:24:ab:0b:e1:e0:49:32:11:f8:c4:0e:
eb:48:9e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 16:11:33 2024 by rpki-client on console-fra.rpki-client.org