Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/k1qS6jPIECCr-iL1OPi24hIMm2g.roa
File: k1qS6jPIECCr-iL1OPi24hIMm2g.roa (raw, json)
Hash identifier: PPMkLojLW8mnWgEgnrnhy6udmM6JTRuzxC318X7+K0w=
Subject key identifier: 93:5A:92:EA:33:C8:10:20:AB:FA:22:F5:38:F8:B6:E2:12:0C:9B:68
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018DBB145AD25627B7C95F1EA384546DE548
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/k1qS6jPIECCr-iL1OPi24hIMm2g.roa
Signing time: Sun 18 Feb 2024 07:18:09 +0000
ROA not before: Sun 18 Feb 2024 07:18:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 45.141.168.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 07:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bb:14:5a:d2:56:27:b7:c9:5f:1e:a3:84:54:6d:e5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Feb 18 07:18:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=935a92ea33c81020abfa22f538f8b6e2120c9b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:75:b8:f8:57:0e:6d:26:6d:1b:29:be:08:
a4:80:3a:06:2b:a6:ba:19:2b:d8:fc:5f:09:50:65:
95:18:a0:9c:ff:8d:b7:a9:d6:f5:32:95:a5:be:90:
de:95:77:51:e6:d2:8e:26:0b:24:33:5b:96:ba:2f:
96:7b:61:13:8b:7a:40:81:af:d5:bd:8b:54:df:01:
03:04:8d:c0:6e:ad:9e:2c:06:5b:88:17:0c:b5:bb:
3a:f6:1b:48:ea:33:0b:f6:80:78:7b:6c:b3:7c:9d:
7d:21:9c:e6:76:c4:e1:bf:2f:9e:6c:4c:7d:3c:5c:
3f:43:3a:9c:be:1e:df:de:f0:64:a3:5c:3c:2a:a4:
b8:af:e6:d5:d3:4a:ee:88:66:fc:53:af:47:86:82:
b1:38:c4:ab:3e:7c:0d:9c:46:8d:b0:6d:11:a9:f7:
84:17:02:ea:be:ce:69:f8:66:d4:af:dc:b9:91:3a:
60:4f:0e:26:bc:31:42:d9:04:a5:f3:56:2d:a3:0e:
1e:65:bc:25:6c:9e:d5:43:70:64:5a:fd:89:e4:aa:
41:71:25:56:5b:61:bb:0f:64:0c:22:60:62:84:31:
b2:6f:f1:e4:f0:c1:e3:e8:46:04:85:4e:fc:90:96:
7a:f7:87:05:23:ed:8f:be:77:1b:0f:41:83:c6:30:
de:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5A:92:EA:33:C8:10:20:AB:FA:22:F5:38:F8:B6:E2:12:0C:9B:68
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/k1qS6jPIECCr-iL1OPi24hIMm2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.168.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:12:7c:1e:06:02:6f:84:6a:46:61:e5:f2:33:ad:da:6d:7b:
2f:06:f5:58:87:d3:74:bf:33:c0:3e:f2:0a:f0:89:fa:17:04:
7f:34:79:cf:a1:f3:73:95:17:23:ec:5f:d5:53:19:97:44:13:
c9:84:d3:71:f3:fd:89:8f:c8:cf:3f:b4:97:b8:61:a7:01:a3:
17:df:a9:f1:9f:32:db:1a:fd:ce:4d:6b:a9:0e:27:fb:83:d3:
5a:ca:a2:fd:30:44:e4:0b:59:e1:aa:bb:2c:08:68:34:e4:19:
23:05:79:ed:5f:a1:f4:10:f9:8d:55:19:7d:7f:83:a2:e2:56:
94:31:85:63:9a:b0:dc:ca:9f:cf:b1:8b:f0:19:42:6c:5a:d4:
99:a5:5f:7a:5b:89:64:74:6b:db:c5:9a:ce:55:12:58:71:32:
a1:70:39:bf:ff:63:d0:85:98:89:63:05:a3:76:2c:7d:68:11:
32:1a:c3:d1:70:0b:eb:2c:d3:15:0b:7c:c0:94:34:49:68:1b:
13:1d:60:ee:65:25:38:38:15:70:c2:d6:27:df:32:71:f5:0e:
19:3b:78:52:e5:9c:05:9d:c6:30:d9:e8:e6:22:82:ce:3b:22:
d1:79:2d:2d:d1:c9:39:64:7b:98:33:11:89:d1:ae:1d:f0:4a:
84:96:ae:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org