Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ut_sCx-Z_URI9LocUTcdEQeH_VU.roa
File: ut_sCx-Z_URI9LocUTcdEQeH_VU.roa (raw, json)
Hash identifier: Xf1yjMOMy4UHIAJx75S0oU3pyLBB02pw0ETqtiRNJ8w=
Subject key identifier: BA:DF:EC:0B:1F:99:FD:44:48:F4:BA:1C:51:37:1D:11:07:87:FD:55
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01886D986D9B388FB343601DDC7C8805D7AB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ut_sCx-Z_URI9LocUTcdEQeH_VU.roa
Signing time: Tue 30 May 2023 16:58:05 +0000
ROA not before: Tue 30 May 2023 16:58:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210907
IP address blocks: 45.81.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6d:98:6d:9b:38:8f:b3:43:60:1d:dc:7c:88:05:d7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 30 16:58:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=badfec0b1f99fd4448f4ba1c51371d110787fd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ba:a0:d0:e4:cc:e9:c8:f7:34:f4:0d:23:8f:
59:89:a5:ba:5e:b1:a6:1b:6c:2f:e0:13:13:9e:ba:
20:f3:9a:62:3d:ff:7c:10:79:e5:07:23:a6:ed:8b:
27:68:c0:92:0a:08:ef:12:79:1d:d9:48:ce:78:c5:
24:89:5b:a8:d9:0e:a5:72:f7:55:c0:6a:5f:96:31:
52:e7:bb:52:7f:c7:a1:c8:a3:2e:36:16:78:70:02:
64:31:7a:ad:75:72:4d:49:3d:5b:c6:d6:4e:9c:ac:
3f:64:42:80:60:3f:2d:0d:1e:aa:cc:cc:32:12:19:
c4:db:f8:b7:08:f3:9a:00:2f:77:ef:c2:f9:36:be:
0a:5a:ab:fe:23:d7:9c:cd:f7:cf:dd:cf:38:db:36:
7a:a6:ad:56:6c:d5:eb:2b:b6:eb:63:4c:8f:6f:54:
72:bb:26:43:b4:75:00:d2:40:37:c8:10:4d:cc:88:
5d:45:91:2a:9b:e9:c9:0a:ed:50:89:9b:93:fe:f7:
21:01:3b:9b:6f:eb:03:2d:04:b4:d1:63:22:e5:ab:
cf:bf:d2:05:be:38:d6:7e:89:3c:63:3c:cb:15:67:
d4:21:60:ac:54:c8:b2:65:4b:30:88:4d:2f:2e:f1:
aa:ad:1b:f9:18:f2:6c:92:61:ab:b5:74:08:f6:d5:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DF:EC:0B:1F:99:FD:44:48:F4:BA:1C:51:37:1D:11:07:87:FD:55
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ut_sCx-Z_URI9LocUTcdEQeH_VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.240.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:fb:80:3e:e4:a9:c8:2c:24:71:af:ac:2f:41:a2:07:36:5c:
a7:ff:66:47:66:12:39:c6:6e:18:35:a0:17:06:ca:4c:be:69:
c1:90:91:13:9c:91:2b:4b:f0:5a:d0:1c:69:f0:85:6a:d2:b4:
ab:5e:61:59:6d:21:33:bc:50:74:4f:3c:af:ac:b8:37:73:d2:
6e:31:c7:7b:e2:e0:83:d1:89:e4:07:9b:72:1d:35:fa:83:dd:
a1:34:8a:65:d2:8e:2d:4d:3d:68:61:56:7a:d1:c5:16:81:46:
33:f7:3b:67:01:91:ea:6a:60:1a:c9:b5:74:5f:b7:ec:55:77:
83:b4:4f:4f:69:95:bf:5c:79:59:26:90:7b:bc:56:e8:6c:36:
0f:3d:d0:70:f3:48:b6:ae:d7:40:20:cd:e3:21:ff:76:27:eb:
c6:58:19:79:31:3c:1a:91:42:25:9f:aa:34:ce:ca:57:2c:59:
b3:72:de:4c:d5:3b:07:bf:c0:0a:9c:8a:2c:7c:06:d0:7c:36:
f5:37:35:30:aa:8e:ef:f7:a0:86:c0:bf:76:29:9c:56:08:0a:
fc:58:9b:6b:9e:b6:ca:f4:1e:1c:90:e2:6d:1d:96:85:8e:15:
c1:63:0b:1d:54:8d:f4:c7:03:80:c1:31:48:c7:31:df:b4:a3:
86:62:e6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:14 2024 by rpki-client on console-ams.rpki-client.org