Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/xGzoCL5VlxqsALm0-cMvZDVbgE8.roa
File: xGzoCL5VlxqsALm0-cMvZDVbgE8.roa (raw, json)
Hash identifier: WMBL4eYG2Eqf0P9MRsaEzUtt3/NVXINmTDAWJbaHUNk=
Subject key identifier: C4:6C:E8:08:BE:55:97:1A:AC:00:B9:B4:F9:C3:2F:64:35:5B:80:4F
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018A18C5B4EC7AD76D439DD5D8A7CF197BCC
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/xGzoCL5VlxqsALm0-cMvZDVbgE8.roa
Signing time: Mon 21 Aug 2023 15:45:24 +0000
ROA not before: Mon 21 Aug 2023 15:45:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203446
IP address blocks: 45.90.96.0/24 maxlen: 24
45.134.39.0/24 maxlen: 24
45.13.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Sep 2023 12:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:c5:b4:ec:7a:d7:6d:43:9d:d5:d8:a7:cf:19:7b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 21 15:45:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c46ce808be55971aac00b9b4f9c32f64355b804f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:62:86:03:f4:40:04:bb:a0:9f:55:90:9b:
74:32:26:37:b4:9c:87:fc:1c:19:1d:cd:cf:c3:79:
0c:07:07:37:a6:20:0e:98:1d:48:01:1d:b4:f0:ca:
16:16:c8:0c:02:40:b4:15:ed:e8:e3:03:a8:aa:8e:
ac:63:f1:7c:f8:24:ee:5a:0e:68:ea:f4:f1:72:73:
4e:c2:4c:6b:8d:cc:18:f1:b6:c7:f8:40:f7:6d:a1:
90:72:73:10:3a:d6:de:05:74:57:81:e5:36:b7:05:
ba:d1:05:a9:50:1c:35:e8:16:7a:2c:58:23:20:1d:
2a:66:ec:39:ff:e8:89:3f:aa:df:19:82:83:4f:e4:
db:34:6b:0c:02:1c:70:7f:78:3e:55:48:96:26:f7:
f7:b3:b9:75:11:73:b7:01:e4:44:47:2a:27:27:7c:
20:f4:ac:96:19:90:1f:5b:1d:9c:c6:2b:db:05:a4:
d7:8e:d2:53:36:04:8a:c8:f1:d0:6b:38:da:4a:a4:
9b:78:dc:46:11:9d:e0:b5:44:8a:bb:ca:63:a6:26:
dd:63:04:a9:9d:f6:d8:34:4f:6e:4d:fb:4b:95:78:
8c:a0:d5:49:43:9c:74:ca:d1:b9:12:3a:8c:90:bc:
2f:45:d4:d0:99:24:ea:00:05:66:d8:36:1d:c2:90:
b1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6C:E8:08:BE:55:97:1A:AC:00:B9:B4:F9:C3:2F:64:35:5B:80:4F
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/xGzoCL5VlxqsALm0-cMvZDVbgE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.226.0/24
45.90.96.0/24
45.134.39.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d0:ab:ea:07:e5:8b:59:a2:73:8b:f2:30:c8:57:18:35:b6:
42:ff:0d:02:90:64:8a:a3:a1:13:99:ec:e6:0b:6d:85:71:47:
fb:92:8b:a8:43:59:6c:c2:0c:f8:22:79:af:4d:80:dd:eb:47:
5d:4e:e3:ea:c8:e9:89:53:d3:61:0b:8c:ee:12:86:b7:66:00:
5b:16:99:3c:2c:88:22:c4:b0:95:80:ca:51:97:6d:96:f8:62:
a6:1e:30:1f:83:d8:56:0e:c4:3c:bd:0b:f2:27:21:39:cf:db:
24:9a:4f:bb:80:14:11:8d:05:ff:03:00:89:84:14:04:d8:00:
3c:2a:f0:b8:d1:fa:21:db:64:a6:00:c9:25:29:57:51:02:de:
b7:5d:8f:dc:a0:31:82:3e:aa:f1:de:9a:3f:77:52:ff:ae:d7:
11:96:13:5b:52:cf:50:69:a0:c8:b1:77:35:80:7f:0e:37:d4:
16:0d:5b:65:35:59:f7:c3:02:ab:8d:bf:64:58:2e:dd:55:cb:
6e:8f:2a:f9:ae:79:9d:c4:f2:6a:6a:3b:eb:21:37:b9:a5:33:
7c:48:a1:88:37:5d:91:ad:a2:07:a2:cd:13:37:c7:8f:46:03:
1f:43:83:65:60:0a:63:b2:74:69:3e:06:2d:d9:fa:8c:f4:bc:
91:df:08:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:14 2024 by rpki-client on console-ams.rpki-client.org