Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/uFNwbN1fgiZcLvtHvvGFOfcCExk.roa
File: uFNwbN1fgiZcLvtHvvGFOfcCExk.roa (raw, json)
Hash identifier: wTV7WTBELjkJZaIXUyC0PEPONNM6CN2oqDG7KrFBijU=
Subject key identifier: B8:53:70:6C:DD:5F:82:26:5C:2E:FB:47:BE:F1:85:39:F7:02:13:19
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01857054CE54685670614E33E20193C8D1DF
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/uFNwbN1fgiZcLvtHvvGFOfcCExk.roa
Signing time: Mon 02 Jan 2023 02:34:44 +0000
ROA not before: Mon 02 Jan 2023 02:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61344
IP address blocks: 45.66.250.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:54:ce:54:68:56:70:61:4e:33:e2:01:93:c8:d1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 2 02:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b853706cdd5f82265c2efb47bef18539f7021319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d4:06:5e:cb:64:ea:58:05:83:b5:fc:9e:64:
c0:93:41:53:7c:94:72:df:7d:8d:5d:24:51:07:a8:
23:76:ba:0a:82:61:52:b2:da:7f:b5:a9:22:97:c9:
8b:a5:79:80:ee:f8:33:3d:b0:e3:21:64:09:ec:7f:
43:f5:77:cc:ca:b7:3a:63:12:26:50:07:f0:b1:5a:
6f:8f:ee:27:08:0c:16:e0:b5:b8:05:2a:0e:63:ba:
cd:0a:4b:33:4c:82:cb:3a:96:49:6d:c0:58:db:3b:
ec:bb:56:10:28:a1:1e:e5:26:10:84:7c:7f:a4:3c:
ac:11:8c:27:a3:c4:40:c7:e2:fe:41:2e:69:cd:6e:
32:d6:a1:71:8e:e1:92:09:33:0f:b0:0a:c1:1c:e4:
7e:33:1a:47:60:6c:f8:ef:52:d7:82:85:e0:2e:cf:
20:7f:f3:1a:09:ac:c7:dc:4b:1c:12:6c:69:58:66:
2f:99:49:c6:44:18:14:03:ce:36:96:2f:dd:30:ca:
10:0a:5b:ad:22:75:64:ce:32:f5:3b:cf:4b:f7:a8:
54:30:de:80:64:a8:67:07:35:6f:16:8a:7e:d1:b6:
55:fe:a2:b0:37:75:db:5e:b0:c8:a9:86:6a:f1:c4:
62:71:e9:7b:f3:11:43:da:fa:9d:3a:ec:bc:c9:db:
74:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:53:70:6C:DD:5F:82:26:5C:2E:FB:47:BE:F1:85:39:F7:02:13:19
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/uFNwbN1fgiZcLvtHvvGFOfcCExk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.250.0/23
Signature Algorithm: sha256WithRSAEncryption
87:04:bd:08:1c:36:27:53:de:fb:17:32:32:b0:40:c5:e5:e0:
06:68:39:7e:f2:26:28:41:c9:a4:04:ef:b2:b6:b2:0f:32:33:
a0:58:ac:da:41:b6:d7:c0:c0:a6:01:d3:b1:f1:45:0d:8a:f5:
ce:3f:50:56:55:9e:17:34:17:03:a1:55:16:9c:28:bf:a3:b8:
e4:7d:ba:dc:36:2a:c1:0a:7a:8e:bb:46:d9:f9:71:19:a7:5f:
32:19:78:f3:8c:56:70:54:98:11:e3:e6:c7:3e:55:b9:a5:f9:
ae:01:ce:be:03:b5:86:39:4b:e7:f9:24:dd:e4:97:26:0d:11:
e7:97:ff:73:e3:d9:75:fd:95:45:ff:15:d4:63:66:42:9b:b1:
ee:7f:9e:37:88:3b:db:59:12:19:58:d4:99:11:5a:7d:6b:df:
8f:15:f8:da:dd:3c:c9:71:f1:f2:7e:31:40:a2:f2:ba:39:92:
b6:cd:05:ac:bf:18:77:11:d2:e2:cd:26:e4:f8:44:f3:30:0c:
e1:bc:6e:d1:d4:4a:98:b1:f8:e6:7c:a4:e8:01:25:c8:bd:c9:
ab:11:c3:07:67:1a:10:76:2b:cf:18:5d:b6:1e:7c:05:94:ee:
24:0a:f3:02:15:16:49:05:4c:ea:96:3b:3f:6e:e0:f4:4d:44:
4f:e5:07:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org