Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/s5WP79QJSnsjV9jAwXq8kCsMQOc.roa
File: s5WP79QJSnsjV9jAwXq8kCsMQOc.roa (raw, json)
Hash identifier: eAUhr3nXJXUbkg/lTzhevw2Li/pf9GQwGS+i4fdUVU4=
Subject key identifier: B3:95:8F:EF:D4:09:4A:7B:23:57:D8:C0:C1:7A:BC:90:2B:0C:40:E7
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE621F5843762844871F1378E936245
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/s5WP79QJSnsjV9jAwXq8kCsMQOc.roa
Signing time: Sun 01 Jan 2023 10:34:59 +0000
ROA not before: Sun 01 Jan 2023 10:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 148996
IP address blocks: 45.142.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 09:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:21:f5:84:37:62:84:48:71:f1:37:8e:93:62:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3958fefd4094a7b2357d8c0c17abc902b0c40e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:e2:61:8f:8a:18:42:74:5c:ac:58:03:72:
13:4d:c6:c6:75:50:3d:f1:54:ad:93:96:22:86:26:
96:88:18:2d:82:c0:e2:9e:84:3c:f3:e5:ea:6b:ba:
05:52:72:d5:96:48:eb:fa:91:cd:4b:a5:88:4f:99:
94:1f:ae:bb:df:a5:20:39:ee:e3:b3:9d:20:d8:1d:
be:c9:64:7e:2e:a5:c1:83:68:60:9f:e0:ff:33:65:
b5:f0:4b:88:ce:2c:fc:6d:fd:34:d6:ed:df:28:63:
b1:d5:66:58:96:a9:3a:4a:a7:e1:df:0e:44:03:c7:
e1:75:9e:57:60:5e:0f:4c:89:02:30:c9:e1:7e:63:
28:47:b5:f4:3e:7c:3e:e5:0f:b4:41:2e:cd:87:24:
25:56:54:87:af:15:4e:a0:5c:6f:d0:e2:22:a3:52:
27:b0:2d:9c:30:d0:26:23:d5:e1:b9:60:bb:39:f6:
dd:ca:13:a0:80:fc:b7:87:3e:a7:df:63:a3:03:36:
56:08:b8:09:2e:fd:7c:38:88:24:86:3a:03:93:b0:
3d:73:c1:dc:32:23:26:34:f7:22:30:57:2e:06:cf:
03:10:79:c6:f7:a9:f8:67:86:c6:f6:e9:da:90:f9:
83:c5:7b:95:99:49:38:01:f7:ce:9e:1a:00:d0:29:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:95:8F:EF:D4:09:4A:7B:23:57:D8:C0:C1:7A:BC:90:2B:0C:40:E7
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/s5WP79QJSnsjV9jAwXq8kCsMQOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.106.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c2:36:a8:28:63:22:f4:12:0e:06:32:62:1c:ef:5f:28:10:
ef:bb:e9:84:a8:59:ad:18:6a:ed:59:7a:01:8e:b4:2e:21:5e:
b4:f9:51:b1:de:6c:f6:cc:99:68:01:e9:3d:4a:db:f7:ab:32:
48:03:54:7d:d5:d2:5c:43:af:9a:e3:ba:83:f2:f3:f4:f3:5f:
77:46:2d:ec:73:6e:70:54:62:e6:44:5c:a2:e3:80:6f:0c:36:
0d:13:ca:8d:bf:e0:5a:da:f9:09:a4:81:5d:37:a0:f8:63:94:
97:34:07:9c:d2:64:5c:e8:d1:ac:a8:0c:ce:40:2a:d5:d5:31:
82:da:4c:6d:87:5a:64:78:ec:e5:cc:5e:92:e0:a1:25:c2:f0:
27:50:4f:c3:71:94:0b:39:f6:77:69:d6:3e:c3:16:15:e5:7b:
ef:13:47:ac:bb:8d:33:71:df:9f:4b:31:bf:35:72:f7:11:15:
88:af:76:1b:f6:58:08:98:82:31:17:6c:36:62:7c:6c:d6:63:
1f:5c:24:17:1d:1f:4c:28:5a:cb:33:7a:28:24:fd:08:4d:15:
9c:46:b0:7d:31:2e:d0:00:ef:2f:cd:28:e6:21:c2:1f:ff:9e:
0e:62:2f:bd:bc:fc:c9:5f:cc:e3:ae:25:a6:a8:1c:fb:ae:37:
eb:f5:bd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org