Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/uvyprSaefnFoNanMg42U9t85q40.roa
File: uvyprSaefnFoNanMg42U9t85q40.roa (raw, json)
Hash identifier: YJ0Ju4hd3ShB2YCejPbuVoNc6YQFBw4dvI8pSKHXva0=
Subject key identifier: BA:FC:A9:AD:26:9E:7E:71:68:35:A9:CC:83:8D:94:F6:DF:39:AB:8D
Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial: 018BA8E3B213A850ADCC86A6A95C808F0431
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/uvyprSaefnFoNanMg42U9t85q40.roa
Signing time: Tue 07 Nov 2023 08:26:16 +0000
ROA not before: Tue 07 Nov 2023 08:26:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49544
IP address blocks: 45.153.19.0/24 maxlen: 24
45.153.18.0/23 maxlen: 23
45.153.18.0/24 maxlen: 24
2a00:1e29::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a8:e3:b2:13:a8:50:ad:cc:86:a6:a9:5c:80:8f:04:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Validity
Not Before: Nov 7 08:26:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bafca9ad269e7e716835a9cc838d94f6df39ab8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:13:fc:bb:2e:e5:3f:d3:7f:47:a8:59:78:
63:40:29:42:87:a0:9f:68:f0:11:c0:91:c2:96:a0:
47:d3:34:e5:10:c4:b7:85:8c:9e:24:9f:ad:33:ea:
bb:d2:6f:19:3d:e1:ec:62:e4:ff:13:83:1b:a7:79:
9c:55:55:4e:81:53:fc:c5:01:8b:c7:64:44:1b:a4:
62:82:85:a3:16:d1:1c:90:86:36:3a:13:90:c1:69:
58:21:f5:e0:38:a9:70:27:03:10:70:3f:df:6a:3a:
7e:02:90:77:86:1c:56:72:09:3f:fc:1f:83:70:b4:
90:dd:09:b3:cd:42:e8:39:19:cb:8c:32:e7:e1:d3:
1b:19:18:75:f9:d1:e2:5d:dc:13:1d:04:d6:3d:83:
be:6e:2f:14:92:1b:e6:28:00:05:31:99:33:e5:5c:
13:4c:06:31:55:cd:d0:d4:26:88:d3:f7:6f:6f:e3:
29:eb:95:e4:42:f3:a8:16:c5:89:7c:7d:91:53:5b:
dc:6a:3e:33:eb:35:68:f9:5d:80:eb:ee:c9:0c:32:
84:80:4e:b0:eb:52:15:45:20:7f:1d:18:3e:63:97:
f7:b6:90:3c:ef:2c:62:2f:36:5b:37:9a:41:78:b6:
e8:b0:40:39:b9:ef:4d:be:27:0c:08:58:8c:d0:b6:
87:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FC:A9:AD:26:9E:7E:71:68:35:A9:CC:83:8D:94:F6:DF:39:AB:8D
X509v3 Authority Key Identifier:
keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/uvyprSaefnFoNanMg42U9t85q40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.18.0/23
IPv6:
2a00:1e29::/32
Signature Algorithm: sha256WithRSAEncryption
79:a1:da:e6:60:64:ea:b8:fc:d2:5a:24:dc:f3:19:a2:a2:b8:
db:24:f0:d6:15:5d:08:a9:3a:19:e5:cc:76:fa:84:c7:e9:99:
b4:f5:b4:04:98:dd:60:6d:ca:9f:18:4b:c8:39:c0:86:bc:65:
3d:ab:eb:f1:5a:10:4c:fe:95:57:40:e8:0b:ec:9d:d8:4a:2b:
82:53:18:af:6d:74:91:cf:a7:c2:ee:a2:4b:26:89:26:b6:60:
10:f7:50:65:ed:18:57:92:53:c4:bb:f9:c3:84:5c:71:41:4a:
5f:2a:06:17:4d:89:68:e9:a0:c9:4f:a7:16:bd:fe:4a:08:be:
0d:2c:d5:46:d3:27:f9:cd:08:b5:e6:d6:0a:60:de:dc:f8:e4:
2f:92:0c:50:55:d0:57:4b:3b:2a:5e:a8:75:fe:a2:ca:f9:02:
80:45:50:b4:ec:4b:51:34:80:6a:cb:d0:c7:5d:cf:b0:37:9a:
b8:fe:17:62:bf:9c:79:a0:6b:88:c3:49:bb:d7:fc:4d:3c:17:
1c:e9:af:91:08:fd:b8:96:47:ba:d8:0a:5a:33:d3:80:00:1f:
9f:63:e7:ce:8c:9d:25:8b:42:61:90:4a:5c:74:e0:b9:7d:82:
09:6e:14:d8:ee:6f:4d:c5:81:ad:8f:19:f5:09:47:8f:5d:e5:
46:f1:80:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:12 2024 by rpki-client on console-ams.rpki-client.org