Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/t_K_bJ-mv5vhATpnlrMYv2mxER0.roa
File: t_K_bJ-mv5vhATpnlrMYv2mxER0.roa (raw, json)
Hash identifier: ULqw2VtPhxmbJimRqZI0KuzfS+cpPq98NMj8FE5VRcs=
Subject key identifier: B7:F2:BF:6C:9F:A6:BF:9B:E1:01:3A:67:96:B3:18:BF:69:B1:11:1D
Certificate issuer: /CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Certificate serial: 018572B4354FFE18DF1FAC95FEFB01018CC5
Authority key identifier: F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/t_K_bJ-mv5vhATpnlrMYv2mxER0.roa
Signing time: Mon 02 Jan 2023 13:38:10 +0000
ROA not before: Mon 02 Jan 2023 13:38:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208897
IP address blocks: 45.15.132.0/22 maxlen: 22
45.15.132.0/24 maxlen: 24
45.15.134.0/24 maxlen: 24
45.15.135.0/24 maxlen: 24
45.15.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:35:4f:fe:18:df:1f:ac:95:fe:fb:01:01:8c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Validity
Not Before: Jan 2 13:38:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7f2bf6c9fa6bf9be1013a6796b318bf69b1111d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:13:af:a9:86:d4:29:d5:48:17:aa:44:43:
7e:ac:68:c9:ca:c1:87:08:e6:66:97:74:12:7e:82:
e6:c6:76:42:25:af:5c:68:6a:6d:97:b1:4d:ef:ca:
3c:4e:c0:78:c1:db:57:ec:c3:4e:1d:a7:d1:fe:5b:
58:d1:f9:fd:03:28:30:8d:1f:f2:a3:1c:2b:2c:0e:
2b:cd:95:8a:00:ca:dd:9c:f4:06:f4:86:73:79:de:
6f:86:7c:d3:5c:0f:b5:d0:43:6d:e9:fe:79:5b:aa:
0d:c4:1b:05:ab:31:9e:4b:93:c0:90:ab:4a:6a:b3:
80:a3:19:df:db:ea:ac:67:b9:62:24:84:37:a5:d7:
53:85:02:e9:bd:03:fd:9c:6f:82:b3:7b:61:0b:f8:
05:97:b4:bb:8b:bc:37:75:a5:c7:84:b9:19:e6:0e:
f9:13:35:72:c5:03:9a:80:6c:dc:b2:c3:3e:95:a7:
ca:5e:dc:59:fe:e2:18:00:a5:61:5a:c0:98:1e:5e:
2c:66:32:bb:c9:83:05:3a:33:53:69:4a:59:1a:1e:
69:b1:bf:2d:c2:94:d8:0c:9e:3d:ca:73:02:98:86:
0b:9f:51:cc:4b:bd:68:18:d3:c8:d3:73:d2:7c:13:
e5:f4:a1:8d:48:e2:4c:ed:26:38:fa:e5:de:a5:42:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F2:BF:6C:9F:A6:BF:9B:E1:01:3A:67:96:B3:18:BF:69:B1:11:1D
X509v3 Authority Key Identifier:
keyid:F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/t_K_bJ-mv5vhATpnlrMYv2mxER0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.132.0/22
Signature Algorithm: sha256WithRSAEncryption
82:02:40:a8:72:7c:38:2d:9b:bc:4b:84:a1:f2:8e:dc:f3:8f:
63:6d:bd:01:24:6a:ac:a4:cd:74:ae:da:54:af:4a:3f:57:5f:
ae:d2:f0:b2:ff:b8:46:2e:a7:33:e4:e4:54:df:23:1a:d6:c1:
ca:4d:8a:e9:eb:a0:62:24:3d:cf:9d:17:4a:3a:cf:d4:8d:2c:
11:95:09:99:db:43:22:bc:73:30:fa:3e:78:91:f2:99:08:15:
d1:33:77:e7:fd:21:e4:bd:b4:eb:64:39:ed:60:b1:6d:fc:0d:
b3:e0:03:70:e5:6d:4d:6e:eb:70:30:59:51:3d:e5:4d:db:05:
15:2d:ce:36:b2:33:91:92:0a:24:e9:3a:51:d8:d6:f5:31:01:
3e:6d:80:67:97:ac:59:94:d3:3f:4b:b2:69:af:82:ba:20:6f:
8c:af:e6:9b:32:de:93:94:f2:21:2d:5d:7c:46:4b:75:bc:31:
9c:9b:90:1b:44:aa:11:e9:ea:1f:ce:30:c5:36:2d:9a:fa:ef:
09:1e:62:87:62:95:96:2c:0b:ba:6b:da:48:47:80:ad:f2:54:
7a:8c:4e:b3:d6:49:69:5d:5b:28:60:c1:21:07:c9:21:80:c7:
16:6b:3b:43:91:3f:dc:87:8f:25:17:29:d5:2b:78:db:6b:ca:
90:7d:fa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:10 2024 by rpki-client on console-ams.rpki-client.org