Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/gEtJjjrGy3MB7ha2A7nyS9Kdz-s.roa
File: gEtJjjrGy3MB7ha2A7nyS9Kdz-s.roa (raw, json)
Hash identifier: gBLYKLoI4CGAoSJck2pr+cPkR7+iiHNCd5zXA7NhgRg=
Subject key identifier: 80:4B:49:8E:3A:C6:CB:73:01:EE:16:B6:03:B9:F2:4B:D2:9D:CF:EB
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018B8533A4D61EB4A3DAD568F49D2599B0B6
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/gEtJjjrGy3MB7ha2A7nyS9Kdz-s.roa
Signing time: Tue 31 Oct 2023 10:07:16 +0000
ROA not before: Tue 31 Oct 2023 10:07:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216063
IP address blocks: 45.147.7.0/24 maxlen: 24
45.84.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Nov 2023 15:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:33:a4:d6:1e:b4:a3:da:d5:68:f4:9d:25:99:b0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Oct 31 10:07:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=804b498e3ac6cb7301ee16b603b9f24bd29dcfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:86:7f:d0:32:18:5d:40:93:81:5d:53:cb:da:
6b:23:0f:42:32:74:7e:89:ff:ea:e2:58:5f:94:14:
c0:76:f8:24:59:0f:a3:85:76:36:1e:fa:b1:cc:e0:
40:e0:28:e6:89:3f:9f:8b:4d:96:9d:95:bd:34:a3:
a4:c4:07:a6:fa:f8:86:ca:a9:f9:f0:b4:db:f9:03:
c9:ad:32:cf:eb:12:02:37:85:39:f3:ba:50:dd:4b:
96:9f:19:a8:db:38:7a:39:19:de:e5:80:82:81:2f:
8e:c9:cd:83:e6:a7:ce:32:b6:ce:c2:81:c3:66:54:
4d:93:b5:07:a1:7f:d8:98:ef:2a:31:54:31:39:f4:
78:41:14:69:e4:3a:5a:63:e5:a9:b5:e3:3b:b4:4d:
bd:77:7a:43:75:39:ab:7c:db:33:78:df:fd:e4:fb:
aa:eb:a1:1b:32:cd:52:fc:c9:df:c6:4c:a5:fe:0b:
95:3e:fc:df:25:85:4e:62:55:79:3d:bb:28:7a:09:
4b:e0:09:41:66:27:52:ca:20:5d:94:c6:b8:0a:38:
87:90:5d:e7:cd:cc:af:11:d8:40:57:ca:ec:19:6f:
2e:34:06:1c:09:73:33:ea:54:b9:34:41:34:37:2c:
07:11:47:96:99:ef:c2:a9:90:7c:c0:a1:79:63:06:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4B:49:8E:3A:C6:CB:73:01:EE:16:B6:03:B9:F2:4B:D2:9D:CF:EB
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/gEtJjjrGy3MB7ha2A7nyS9Kdz-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.196.0/24
45.147.7.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:54:6d:39:66:c4:af:78:e4:5d:91:92:07:a7:97:33:18:89:
70:c1:18:a6:fd:bc:69:e8:b9:d1:bf:1b:ed:45:b1:6b:be:fa:
99:5e:24:f9:35:00:b1:69:8e:fa:68:4b:3b:40:9e:6e:8e:5f:
f0:59:a9:ad:f0:f4:68:5f:1e:74:06:dd:1a:c0:83:09:2f:da:
b1:53:0b:f0:b7:6d:02:b0:6e:1f:0c:72:cc:ac:ae:a9:7c:4e:
00:64:d8:7d:3d:c0:bc:56:95:c8:13:8c:27:54:05:f2:d5:44:
6a:ea:b3:1c:48:0e:e8:dd:0c:c5:72:a8:fe:65:13:46:a9:1e:
3e:6f:39:ef:77:67:60:cf:5a:af:93:af:c9:39:6f:53:38:b8:
b1:ff:9e:c8:c8:da:48:af:34:3f:89:f8:d8:d1:7d:d6:42:67:
76:47:4e:cd:72:17:bf:19:1b:b6:7f:86:aa:aa:9c:e9:ed:44:
b3:b3:fc:81:c6:66:c8:4c:ba:4f:f2:75:35:2b:c0:2c:ee:ee:
0a:84:32:be:68:78:d5:ec:ad:98:10:3d:60:0a:f4:1a:90:0a:
90:c0:c1:36:c8:96:fb:af:24:38:d1:95:67:5b:a8:6a:7b:1d:
ae:36:44:05:90:1d:80:c7:59:fc:59:10:2f:51:cc:41:b5:f2:
93:e8:2e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org