Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uB6YsI2r96UaPaD--rCf792fKho.roa
File: uB6YsI2r96UaPaD--rCf792fKho.roa (raw, json)
Hash identifier: N7w9ZAyxzs/CuKXb0ZmlEq1o4xGv2rIqJiXm0LKYx3E=
Subject key identifier: B8:1E:98:B0:8D:AB:F7:A5:1A:3D:A0:FE:FA:B0:9F:EF:DD:9F:2A:1A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FA22806F0F96A20089335FA22F420EAED
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uB6YsI2r96UaPaD--rCf792fKho.roa
Signing time: Wed 22 May 2024 21:14:43 +0000
ROA not before: Wed 22 May 2024 21:14:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399979
IP address blocks: 45.88.90.0/24 maxlen: 24
45.139.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 06:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a2:28:06:f0:f9:6a:20:08:93:35:fa:22:f4:20:ea:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 22 21:14:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b81e98b08dabf7a51a3da0fefab09fefdd9f2a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:ef:0d:0c:e0:a1:58:ea:b0:23:d8:21:6c:
3f:a2:43:37:de:1f:df:f3:4c:7a:01:ad:8d:67:d4:
fc:dd:1f:58:7b:75:6b:f6:10:57:75:5d:8f:96:4b:
e8:77:82:d4:c9:0d:36:67:5f:45:32:84:de:8a:e5:
f0:6b:50:30:a9:0a:96:26:ff:b4:55:da:f6:03:83:
a9:83:c1:f6:0b:1d:d4:77:c7:78:9e:e0:6a:d4:e9:
84:01:56:48:73:36:51:1f:8a:a1:5f:e3:82:46:e0:
15:b1:04:c7:32:db:58:98:9d:e0:af:8e:04:5c:c2:
4d:40:7e:0d:30:e1:5a:8d:f4:7a:84:11:94:46:79:
82:63:21:8c:65:c0:c3:71:a8:d5:a5:47:7d:7c:64:
f5:2a:7f:71:f2:82:c6:b2:15:8e:b7:39:c6:89:61:
29:ae:c2:0e:6b:44:49:3a:47:d7:0a:81:a7:6c:58:
fe:c0:f8:23:fd:b8:b7:22:6e:57:4a:7d:2c:a3:ca:
1a:00:c1:9d:e1:f8:6e:5c:fc:85:3b:45:bb:8a:3a:
e6:f1:34:d3:c2:e8:64:90:f8:12:cb:52:34:b9:91:
cb:8b:74:1e:33:99:46:76:26:59:69:00:15:58:50:
0d:cf:5c:b6:7f:fb:a1:c5:b5:7f:c2:9a:1b:7f:84:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1E:98:B0:8D:AB:F7:A5:1A:3D:A0:FE:FA:B0:9F:EF:DD:9F:2A:1A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uB6YsI2r96UaPaD--rCf792fKho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
45.139.104.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c1:aa:2e:10:61:2e:fc:55:57:2b:e4:00:ee:22:13:a7:d6:
b7:f1:97:3e:cc:b0:25:67:16:24:67:f1:0c:58:2f:d6:07:72:
11:22:9f:64:94:41:dc:6a:64:d6:9d:78:f9:01:80:5c:4d:ba:
33:17:e5:86:11:fd:8a:02:4a:db:93:be:61:d6:29:ee:3a:87:
43:3a:47:4b:19:ad:ab:4f:f3:fb:d8:5b:d0:9a:7b:ad:c4:58:
f1:d8:ef:67:d1:31:3d:9c:86:a3:18:ee:f5:c5:f8:e9:42:83:
9e:26:80:19:72:b6:2c:13:08:0c:bd:b0:e3:6a:7b:3a:a3:e3:
59:9b:7b:c4:bc:37:2b:08:28:92:0b:9a:7e:40:db:fe:5b:d4:
bb:e2:08:68:49:8c:0f:45:3c:38:dd:be:9d:8d:53:98:b9:1f:
7b:32:dc:18:39:29:84:46:b5:b8:6a:be:1d:a9:4b:65:3c:8a:
0c:92:b3:8a:69:0f:6a:d5:0b:b5:89:0a:84:b1:9b:65:c2:d4:
ea:be:cb:27:b2:a8:5c:db:cc:0f:ad:37:0f:93:d0:97:a0:aa:
7e:e9:08:b6:b7:9e:86:44:bc:f9:c6:f2:62:83:51:f3:65:4c:
db:48:f3:9b:e9:d7:a2:8e:d6:73:03:57:2e:f8:ff:35:de:08:
34:4c:b0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 07:42:31 2024 by rpki-client on console-ams.rpki-client.org