Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cSJgbtYOF5zsP44RnOOvJIcnnU4.roa
File: cSJgbtYOF5zsP44RnOOvJIcnnU4.roa (raw, json)
Hash identifier: wut8Z28XWVp7ULt0Ubne0yEPgnU5ZtxXu0hQRnhjcmA=
Subject key identifier: 71:22:60:6E:D6:0E:17:9C:EC:3F:8E:11:9C:E3:AF:24:87:27:9D:4E
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE62659B48A22F4A24EC2127942033B
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cSJgbtYOF5zsP44RnOOvJIcnnU4.roa
Signing time: Sun 01 Jan 2023 10:35:00 +0000
ROA not before: Sun 01 Jan 2023 10:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207907
IP address blocks: 45.92.216.0/22 maxlen: 22
45.151.56.0/22 maxlen: 22
45.95.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 21 Jun 2023 14:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:26:59:b4:8a:22:f4:a2:4e:c2:12:79:42:03:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7122606ed60e179cec3f8e119ce3af2487279d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:c7:de:08:ae:c7:2e:8c:67:51:70:07:4c:
ff:85:48:26:f2:0a:39:c9:ca:37:4c:0f:09:96:3d:
95:50:6f:b5:ff:8c:58:d7:17:c9:1e:93:00:2f:2a:
4d:50:21:c3:1b:d8:fa:9b:a0:bf:88:f0:22:14:99:
09:17:97:69:f5:f5:9b:2f:87:c3:d4:ec:6d:9d:a3:
5c:5e:34:44:5b:c7:a2:7d:44:79:c8:c1:72:ec:54:
d5:80:8e:5a:91:0a:35:55:e1:0e:4c:9c:56:77:48:
31:7b:39:6a:c2:fd:d6:dc:c1:b7:13:a6:29:4d:59:
8c:dd:89:cb:aa:68:ba:7d:c3:cd:11:39:2f:43:2f:
8d:e0:57:f9:91:1f:8e:81:7e:7c:99:1e:38:b7:76:
1b:90:b9:7d:94:0b:ad:1f:13:80:94:90:94:4a:55:
ab:fc:d6:83:c5:be:98:eb:2c:6c:6f:e2:46:a3:4f:
69:08:f6:43:ff:79:88:86:97:19:a4:ca:e3:f3:44:
fc:18:14:56:b7:1e:fa:79:81:7f:30:05:a7:1a:dc:
e9:35:5d:c9:98:9c:64:73:33:67:bc:d4:d1:80:29:
8a:96:d2:d0:6c:9e:05:85:de:05:6a:59:b8:2e:db:
74:8f:61:dc:4f:be:69:13:7b:ec:7d:63:58:4f:b9:
3d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:22:60:6E:D6:0E:17:9C:EC:3F:8E:11:9C:E3:AF:24:87:27:9D:4E
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cSJgbtYOF5zsP44RnOOvJIcnnU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.216.0/22
45.95.172.0/22
45.151.56.0/22
Signature Algorithm: sha256WithRSAEncryption
49:cc:ae:f5:29:14:6a:26:f6:9d:78:cc:55:86:1e:da:dc:97:
9e:30:f5:84:0a:dc:f8:80:86:64:01:10:00:36:4d:33:14:98:
5a:eb:7d:e6:c5:b5:1a:85:55:77:3a:f4:6a:1a:d7:3d:96:4a:
82:ab:a1:90:53:a9:68:93:a5:6b:79:7c:bd:9e:30:87:f0:79:
f6:2f:37:bf:48:00:05:a2:14:7c:e6:bb:2e:46:ee:b7:9c:14:
d2:e8:40:b7:4a:1c:e7:35:e0:32:01:7d:73:0d:19:00:6d:1b:
65:35:0e:af:ba:ad:aa:01:57:c3:c3:5e:77:22:73:d0:d6:da:
54:ae:d9:11:bc:7f:e6:d5:19:9d:fc:c0:97:0f:af:a9:e0:14:
10:18:01:a4:74:37:d8:8f:ac:27:ae:e3:f1:17:60:4b:f7:53:
c0:a6:4e:98:43:de:e8:ba:1e:23:54:0d:f6:75:a4:da:6e:23:
ec:91:b7:70:54:b4:3c:ee:12:d1:60:9d:f4:6d:dd:11:13:7d:
e6:de:81:98:ed:f7:4e:b6:25:21:a0:e6:8b:c6:dd:2a:a1:e8:
2a:c0:2f:39:43:88:d9:b6:93:ba:cc:93:6c:b9:6c:65:74:89:
5f:ba:19:28:ab:bc:27:90:dc:b0:ce:39:39:15:ab:4e:64:ed:
8d:49:ad:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org