Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/lY_vI-GQi7iC2Y3HLhrhXqC-77Q.roa
File: lY_vI-GQi7iC2Y3HLhrhXqC-77Q.roa (raw, json)
Hash identifier: re18l8XVCfbidywUwsJZEn6tgC/nbX/ncjlpTZ36Z7E=
Subject key identifier: 95:8F:EF:23:E1:90:8B:B8:82:D9:8D:C7:2E:1A:E1:5E:A0:BE:EF:B4
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01917E3E848A34B65A5F53BB20B7F6AF06CF
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/lY_vI-GQi7iC2Y3HLhrhXqC-77Q.roa
Signing time: Fri 23 Aug 2024 07:58:32 +0000
ROA not before: Fri 23 Aug 2024 07:58:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58087
IP address blocks: 45.13.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 11:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7e:3e:84:8a:34:b6:5a:5f:53:bb:20:b7:f6:af:06:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 23 07:58:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=958fef23e1908bb882d98dc72e1ae15ea0beefb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:94:7d:77:b8:d3:a2:de:3c:af:0b:de:46:
8e:ce:a8:03:11:6a:01:96:3f:07:6c:41:54:3e:81:
83:42:bc:49:8b:98:43:f5:f3:04:b3:b5:5d:d5:20:
9d:a3:b9:53:4e:02:0b:31:80:9d:ba:41:5a:3e:86:
f2:ee:fa:51:b3:24:cf:43:b6:81:6c:ec:38:4d:73:
fc:e4:d6:bc:dd:d1:93:40:46:f3:fd:47:8f:c2:3e:
c2:57:91:ca:6c:ec:89:9b:b2:f6:6a:ed:df:30:aa:
e1:d7:2d:53:56:11:b0:d4:91:ca:87:52:9f:0c:e9:
6e:8f:7f:6c:06:de:70:53:43:54:f6:6e:7b:99:f7:
e6:1e:42:03:21:6a:16:8a:a2:c6:73:d4:d6:1d:09:
c3:39:1c:7f:2c:8d:97:d5:98:54:3f:1e:0e:25:19:
ae:da:ac:80:32:1b:32:eb:2d:5d:90:13:bf:88:b6:
70:61:61:55:c2:63:9e:2a:41:ee:ad:77:63:74:02:
64:a8:ad:4a:9f:c4:a5:b4:90:01:22:48:2b:07:31:
41:61:7c:0e:b9:54:52:8b:f8:d3:df:33:80:2c:2a:
ef:d4:97:6c:38:ca:82:ae:2e:46:bb:63:85:4d:3b:
a9:c9:06:a9:89:81:f4:a8:4d:9e:b4:45:d5:17:cc:
16:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8F:EF:23:E1:90:8B:B8:82:D9:8D:C7:2E:1A:E1:5E:A0:BE:EF:B4
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/lY_vI-GQi7iC2Y3HLhrhXqC-77Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.225.0/24
Signature Algorithm: sha256WithRSAEncryption
88:97:0a:7a:4f:ec:7a:03:14:a6:6c:03:24:b8:a1:d9:ae:84:
28:21:e7:2c:75:5c:ea:84:82:c1:57:68:85:ad:cb:9d:56:9c:
73:07:68:e3:b5:7b:b5:9f:b3:de:35:76:47:a9:f9:5e:0c:61:
29:dc:a5:cb:00:25:36:c1:e6:89:91:1c:88:17:ed:42:9a:ea:
32:9f:c1:42:e1:e8:2f:6c:72:81:5d:e3:5e:64:df:24:f6:fd:
84:9d:42:68:d5:12:cb:a9:9d:6d:b6:09:55:53:b2:31:f0:ff:
c1:a6:d2:9d:43:e3:39:5a:2d:6f:b7:b5:1d:3e:df:34:02:1f:
19:99:87:34:a4:f5:f0:76:c9:ed:e2:a2:a4:d1:43:b3:14:c3:
fe:c6:f9:a7:63:0d:a1:7f:8f:ac:b2:52:de:c8:e1:58:4f:0c:
fa:a0:ab:14:21:1e:ca:b2:8d:5c:b7:65:fa:91:08:03:a2:a0:
3f:a8:a8:a1:b2:c7:f6:2a:bb:13:7c:3f:27:a4:53:d9:84:11:
34:22:4d:70:a1:5d:ca:8f:54:84:47:1d:22:a8:b8:6b:1b:3e:
de:da:9b:eb:ab:97:c1:20:85:8f:e3:ed:7c:50:8b:4a:bd:36:
81:44:41:bf:cc:00:f1:48:cb:b1:b3:e3:37:0e:51:2a:ee:3b:
41:5c:e2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 13:19:42 2024 by rpki-client on console-fra.rpki-client.org