Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/UuGRyheX1WZgqtwha0DP8zZ85VE.roa
File: UuGRyheX1WZgqtwha0DP8zZ85VE.roa (raw, json)
Hash identifier: IQ6zNfYeRsrewBxX0txxcCEIf49Vi/JSWdnol1Q7ifM=
Subject key identifier: 52:E1:91:CA:17:97:D5:66:60:AA:DC:21:6B:40:CF:F3:36:7C:E5:51
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 019005E6DDD561EC503DAF6FC17126788FD8
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/UuGRyheX1WZgqtwha0DP8zZ85VE.roa
Signing time: Tue 11 Jun 2024 06:05:34 +0000
ROA not before: Tue 11 Jun 2024 06:05:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 45.10.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 10:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:05:e6:dd:d5:61:ec:50:3d:af:6f:c1:71:26:78:8f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Jun 11 06:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52e191ca1797d56660aadc216b40cff3367ce551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:6f:96:d5:d8:0b:6a:f1:eb:36:66:b4:c4:
29:aa:1e:db:26:87:1b:c4:27:a8:87:60:81:dd:f4:
87:e9:05:78:90:e8:9f:4a:65:d8:ad:7b:1d:fb:0a:
5d:c7:14:10:94:de:86:e4:be:9a:21:4d:eb:e9:e0:
c9:bf:7f:8e:de:8e:d3:85:eb:e2:06:2e:cd:bc:37:
84:d8:69:5d:5f:3f:34:25:b2:85:c1:51:30:5d:b0:
bf:35:cb:f7:95:8b:a8:73:92:e2:e9:f1:fd:3e:b6:
44:98:b3:cd:2c:9e:20:07:f3:6a:f2:36:d3:14:b0:
3d:1a:73:6c:f8:a3:fc:a9:a7:0e:34:b4:7f:64:14:
e7:36:3e:56:60:12:24:65:c3:88:d0:9e:b8:84:e7:
b2:67:36:c3:31:49:da:0a:98:04:5c:e5:3a:99:c8:
69:09:08:a0:d4:f0:54:6d:4a:d7:fc:c9:56:d7:ec:
d8:f8:45:2c:13:4e:82:2d:f4:db:89:f2:27:ba:41:
2e:3f:a7:2e:20:98:4f:6b:d6:da:56:79:20:99:f5:
26:d3:1b:80:ca:24:af:f1:a3:d3:87:46:ac:5c:a0:
61:ae:b1:39:ab:69:ad:fd:13:83:db:cc:36:fe:32:
18:bd:96:9f:ec:03:39:e4:1a:c7:0b:a9:cf:4f:ac:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E1:91:CA:17:97:D5:66:60:AA:DC:21:6B:40:CF:F3:36:7C:E5:51
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/UuGRyheX1WZgqtwha0DP8zZ85VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ea:14:0b:b2:31:1d:6f:19:00:24:e8:dd:99:26:66:ac:65:
14:47:18:e4:88:fa:b4:ab:5b:6e:2c:be:83:9f:24:99:f3:7c:
4a:e2:a6:2a:53:20:8f:31:26:3f:4a:20:21:af:ef:41:d8:67:
84:3b:4b:76:6d:7e:3a:99:1d:26:bb:96:b1:35:ea:43:86:05:
2a:40:e9:97:88:22:0b:aa:e4:99:15:79:f1:7e:df:41:0f:d7:
4b:35:b0:21:5f:19:91:3c:db:62:8f:32:6d:fd:50:3f:03:69:
50:ea:c5:da:fc:56:87:de:3d:e9:0e:90:01:6e:31:02:a1:d6:
10:b7:fb:a4:c7:96:9b:d4:44:e7:5d:f2:9b:b4:80:e2:fd:cd:
af:76:26:c2:e0:d5:d3:8b:6f:6b:cf:5f:4b:5e:f1:3a:ad:c8:
e1:ae:d1:1e:ba:94:60:5f:28:03:c0:02:7f:90:02:84:92:3a:
27:c4:09:66:7c:b7:83:00:ea:c0:ab:5c:9d:98:ef:06:9f:95:
7c:45:42:c6:c4:6d:cf:50:52:c0:ed:ad:60:e7:2d:c1:58:dc:
7c:e4:28:dd:ed:61:7d:f8:0f:da:b0:e6:a4:07:0c:a2:80:ec:
3c:89:ca:8a:c1:48:16:dd:6e:c2:5a:30:bc:46:71:cb:c0:b4:
75:34:ce:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 13:01:34 2024 by rpki-client on console-fra.rpki-client.org