Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/n_TONk1Xw1SP3tBPvVaqKCAj4Yo.roa
File: n_TONk1Xw1SP3tBPvVaqKCAj4Yo.roa (raw, json)
Hash identifier: OMhW+b5EZKKxI0fugpJnK/81TX5BdMZLcy0HaGNNXaI=
Subject key identifier: 9F:F4:CE:36:4D:57:C3:54:8F:DE:D0:4F:BD:56:AA:28:20:23:E1:8A
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018F5C92D1AFD67B3727009171642D72E447
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/n_TONk1Xw1SP3tBPvVaqKCAj4Yo.roa
Signing time: Thu 09 May 2024 08:57:56 +0000
ROA not before: Thu 09 May 2024 08:57:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.58.196.0/23 maxlen: 23
45.134.36.0/24 maxlen: 24
45.142.105.0/24 maxlen: 24
45.151.56.0/24 maxlen: 24
92.118.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 10 May 2024 07:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5c:92:d1:af:d6:7b:37:27:00:91:71:64:2d:72:e4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: May 9 08:57:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ff4ce364d57c3548fded04fbd56aa282023e18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:27:fe:e3:c4:29:c0:de:ad:a9:90:92:1e:
19:99:c6:96:ff:1b:cd:26:73:d0:54:fb:0c:d4:af:
7e:3a:72:f2:b1:74:55:a7:5f:ef:16:e1:ff:c9:2e:
5f:de:64:9d:7d:99:d3:bd:9f:20:77:14:07:9b:cd:
40:99:36:a8:2f:71:ff:09:ce:43:c3:26:87:f3:b8:
43:f2:bf:be:04:e5:9f:6a:22:ec:1d:a9:10:49:2e:
13:d9:85:fc:25:5f:79:f8:18:cf:ea:9b:68:d4:be:
8a:6c:ec:f7:6c:df:8c:e0:10:b2:16:fd:b7:3d:b1:
5f:f0:d4:1d:c2:14:b1:8e:09:43:27:91:ec:89:29:
c2:2e:fb:45:9f:d3:c6:9e:72:29:10:00:cf:94:08:
05:e6:22:43:d2:83:62:3c:57:17:38:f5:1e:43:27:
c7:0f:b9:75:f4:5e:87:50:e5:fa:ab:4b:aa:03:63:
2b:8e:80:81:ba:41:9f:9d:ad:ad:28:e0:a2:d5:b8:
7b:f1:ec:b7:a1:aa:c7:d4:5f:a1:fe:f6:b5:e1:9a:
af:ea:a2:55:b4:62:bb:54:19:ef:a6:b6:ea:8b:8a:
0a:95:76:f8:97:13:7b:7e:e5:63:15:c1:83:91:5a:
89:66:47:f2:35:5c:64:4e:81:6f:19:d9:b5:b9:22:
6d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F4:CE:36:4D:57:C3:54:8F:DE:D0:4F:BD:56:AA:28:20:23:E1:8A
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/n_TONk1Xw1SP3tBPvVaqKCAj4Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.196.0/23
45.134.36.0/24
45.142.105.0/24
45.151.56.0/24
92.118.204.0/22
Signature Algorithm: sha256WithRSAEncryption
29:97:13:de:43:6a:13:f6:d5:44:c6:ff:b9:e5:68:87:19:56:
90:29:53:a6:7f:f1:8d:fc:47:e5:5b:23:e2:a5:f3:c4:50:f5:
51:37:5d:61:59:fe:9c:9c:d5:7c:a7:ba:3e:df:38:fd:ac:c6:
df:0d:89:7e:f6:02:25:68:8c:fb:1f:71:df:4d:ff:c6:5e:66:
91:98:5d:3e:b7:61:38:fa:d1:de:6a:5d:6f:06:65:5a:4d:dc:
a1:b2:35:d3:83:7e:77:fd:30:c1:47:a2:36:80:1d:f3:2b:5e:
76:5b:bf:b4:a8:85:b3:4b:70:7c:11:4a:df:9c:52:08:4b:3d:
71:81:df:7a:b3:a9:73:c4:3f:ad:4f:3f:03:fd:7b:0a:73:4f:
0a:4f:c9:93:94:fe:03:66:03:66:d8:fb:f5:ab:84:66:71:0e:
5f:43:cb:f9:7b:ef:dc:3f:f1:10:1c:cb:35:8e:97:6b:40:ac:
4d:36:7f:01:ee:b4:5d:ea:e1:46:0d:ef:68:53:1c:77:fe:bc:
97:fc:8d:e3:90:0d:c0:d2:22:4f:f6:59:a9:d5:bd:32:32:6b:
c8:26:ef:8e:47:26:9a:11:90:4c:15:d2:1a:77:fb:07:ee:ab:
ea:24:59:66:5e:0e:39:7f:cc:9d:99:69:c6:22:be:a4:f2:dc:
cd:b2:87:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org