Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/u0PUfxuTw3tb1GENE8bhnu9fIaE.roa
File: u0PUfxuTw3tb1GENE8bhnu9fIaE.roa (raw, json)
Hash identifier: PQ0vmH0/kzNJGlJbPYQrRF8ItMrQbj/hHeqmpp7jbI4=
Subject key identifier: BB:43:D4:7F:1B:93:C3:7B:5B:D4:61:0D:13:C6:E1:9E:EF:5F:21:A1
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0186FFA017802E8709B3FA4A952C9F840BA5
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/u0PUfxuTw3tb1GENE8bhnu9fIaE.roa
Signing time: Mon 20 Mar 2023 15:25:27 +0000
ROA not before: Mon 20 Mar 2023 15:25:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396998
IP address blocks: 185.228.81.0/24 maxlen: 24
45.128.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Mar 2023 10:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:a0:17:80:2e:87:09:b3:fa:4a:95:2c:9f:84:0b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 20 15:25:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb43d47f1b93c37b5bd4610d13c6e19eef5f21a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:11:0a:17:38:fb:e9:1f:5c:ce:1c:5e:58:
a8:05:cb:c3:4c:c5:5f:b8:27:79:c6:a6:27:0e:cc:
18:6a:42:42:a8:27:5b:c3:35:36:0b:95:48:72:6e:
3d:2b:24:50:c0:45:6e:06:9b:4f:5a:1c:03:68:96:
13:02:ed:5c:94:db:47:6c:49:23:ab:2c:03:bf:ea:
b3:a9:4e:f7:ff:7f:10:d7:d2:22:d9:6b:9a:e1:68:
b3:5f:2d:bc:ef:5b:e7:23:14:ea:e9:4b:3e:b1:9c:
f2:09:db:e8:28:4a:1b:ad:4e:77:65:49:fe:65:94:
5a:45:f5:57:7f:e4:d7:61:35:67:92:18:86:6f:4e:
ce:f0:20:be:f0:56:5a:0a:e7:26:e8:78:60:5c:2f:
98:9a:da:2c:27:a3:3a:e3:fe:1d:71:ae:21:36:86:
a2:f8:57:db:f1:f1:e1:fe:41:df:b8:cf:bb:7e:72:
33:6d:79:05:a0:b0:74:c7:0b:13:a5:9f:c3:d9:74:
7a:ad:c9:8d:30:84:53:66:98:7b:3c:64:ba:52:24:
9e:eb:e8:1b:2e:90:ab:34:a0:fb:95:d6:66:bd:52:
33:82:cd:05:3d:af:02:83:ea:57:28:a5:a0:90:c2:
2b:7d:94:7a:eb:f8:1c:eb:fe:76:3b:64:44:9c:7a:
82:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:43:D4:7F:1B:93:C3:7B:5B:D4:61:0D:13:C6:E1:9E:EF:5F:21:A1
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/u0PUfxuTw3tb1GENE8bhnu9fIaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.157.0/24
185.228.81.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:99:97:60:5d:72:86:7f:85:73:c5:7f:24:f1:ab:5b:b1:ee:
53:14:3c:a5:08:54:72:b8:b7:48:75:8c:42:fb:00:47:03:9c:
a4:57:0f:0a:ef:59:f7:93:41:28:e6:37:f7:7c:dc:76:11:9c:
9e:39:50:ba:16:4d:7e:2f:dc:6a:71:11:ae:e9:ec:96:3d:de:
e3:c3:b5:5a:25:de:21:c3:72:60:82:81:e5:90:75:85:54:9a:
e7:49:fb:44:db:af:3b:0a:d1:04:b4:d6:8c:12:84:00:a3:c0:
a6:6f:e1:a9:05:d3:f0:10:23:27:c8:c6:6d:21:9d:39:31:bf:
5a:a5:ca:e0:0b:b5:8d:b7:2c:53:4d:5d:90:b5:28:27:fa:3f:
cc:13:19:af:ce:c9:b2:b5:ed:f1:18:d9:a2:18:99:45:74:ac:
5a:27:5c:30:c9:71:3b:eb:dc:a8:16:b2:49:06:76:b5:df:cd:
d2:2f:a3:cb:9b:a1:22:44:ad:9b:b7:7a:d8:86:ce:9a:e2:bb:
06:c9:af:7c:67:1b:fc:cc:d9:b4:db:c7:98:2d:a2:61:66:2d:
d7:85:38:58:23:83:96:da:71:7b:bd:02:1b:fb:35:44:46:3f:
09:b0:62:c8:b2:9e:43:60:dd:fb:1c:bf:93:17:9a:d1:b2:07:
d1:a6:86:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org