Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/U5n3J8sIYfVKvjJA-0Aoq6hwoig.roa
File: U5n3J8sIYfVKvjJA-0Aoq6hwoig.roa (raw, json)
Hash identifier: VOnsUnHeh8iVtYjgGGb8mTkAzRvRsAw2B9gENFgTtnE=
Subject key identifier: 53:99:F7:27:CB:08:61:F5:4A:BE:32:40:FB:40:28:AB:A8:70:A2:28
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 0185719552C2B81BEB7EFFAFB44091084012
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/U5n3J8sIYfVKvjJA-0Aoq6hwoig.roa
Signing time: Mon 02 Jan 2023 08:24:49 +0000
ROA not before: Mon 02 Jan 2023 08:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202358
IP address blocks: 45.94.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jan 2023 13:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:52:c2:b8:1b:eb:7e:ff:af:b4:40:91:08:40:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jan 2 08:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5399f727cb0861f54abe3240fb4028aba870a228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:72:3d:e2:8f:e6:fc:94:9a:8d:24:79:59:96:
4a:f5:94:68:4b:8d:0d:aa:aa:8d:5b:31:c1:13:ab:
97:94:94:60:b1:ca:52:8b:56:b3:2e:b0:77:e6:6b:
24:1a:23:1a:a4:f9:36:5e:4c:cb:31:0a:96:c9:96:
db:48:f2:f4:47:91:51:05:71:fb:0c:62:a9:ad:0a:
0b:65:c6:38:11:f1:bd:2d:dc:75:d2:d7:12:08:0a:
19:23:1b:cf:93:e0:31:68:e8:2e:96:98:d6:35:9a:
c4:85:80:c7:34:99:e9:3f:3b:5d:87:14:e3:01:06:
83:33:af:2a:6f:a6:8e:aa:c3:74:8f:e3:8d:a6:ff:
a6:89:b7:da:65:2b:42:b1:af:eb:b3:08:1d:22:dd:
fc:a5:05:0e:80:38:0c:3d:19:78:fe:08:fd:7e:76:
c4:80:c9:39:f5:44:4e:e9:3a:61:d6:88:c2:be:b8:
23:a4:f9:ce:e9:c2:32:1c:8d:b1:7e:ab:8f:95:06:
16:52:5b:77:60:e9:8b:6c:dc:9d:a0:f9:1c:8d:fb:
48:af:c0:36:4b:9c:e0:39:a4:42:c4:61:32:a0:82:
ac:4b:40:e5:7f:77:68:3e:9f:02:fe:74:cf:b8:00:
94:a9:1d:4e:fd:5b:fc:6a:c6:39:2f:44:7e:1d:b0:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:99:F7:27:CB:08:61:F5:4A:BE:32:40:FB:40:28:AB:A8:70:A2:28
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/U5n3J8sIYfVKvjJA-0Aoq6hwoig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.6.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a8:19:e9:35:a7:84:bb:c5:ae:e1:a1:65:e0:67:c2:23:9d:
25:37:48:b6:5d:44:5e:c4:54:49:b2:86:11:d1:19:dc:12:c2:
bb:0c:1f:da:cf:8b:bd:72:88:83:b4:41:41:01:cb:fb:13:35:
64:b5:00:10:cd:bb:0d:c9:9f:a9:d3:33:fd:f2:6b:eb:37:d1:
34:5d:7f:18:a5:96:ad:aa:fa:a5:ee:60:cf:36:00:00:0b:8b:
8a:d1:de:71:03:d0:b9:0c:f6:76:4a:d8:0c:ec:8c:f4:f4:63:
61:86:cf:35:df:83:4a:15:cb:c4:75:a7:df:44:45:cd:47:b2:
6f:59:77:7c:a5:e2:40:d7:82:59:f9:50:9d:16:22:7f:50:6a:
80:66:c2:9e:1e:db:6a:1c:1a:8b:fa:50:99:8e:b5:f9:a5:cc:
2c:38:22:df:8b:71:37:88:f0:fe:be:10:e4:56:26:00:90:e9:
17:b9:07:ac:4b:60:1b:02:4b:b7:8f:ec:39:3d:4b:67:e8:67:
b7:d2:f2:f4:7c:92:03:49:12:6d:fe:c9:43:7d:03:6b:0b:bb:
0a:ed:d8:e7:fd:f3:d1:b1:62:c0:3d:db:50:18:9f:86:bf:51:
de:2c:e6:8a:cb:9e:24:cb:d7:ad:8e:0a:50:1d:ef:df:cf:c8:
db:71:7f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:55 2024 by rpki-client on console-fra.rpki-client.org