Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/UNJDYLyhUlEKqtBv2qmSGHib9Ms.roa
File: UNJDYLyhUlEKqtBv2qmSGHib9Ms.roa (raw, json)
Hash identifier: pdatvVbe7a3KwO0zT6BUOeusHJD9fRMTMIkdVNXltUY=
Subject key identifier: 50:D2:43:60:BC:A1:52:51:0A:AA:D0:6F:DA:A9:92:18:78:9B:F4:CB
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 0188D8DF79B58D6A87AB4EB1798156A2A4AE
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/UNJDYLyhUlEKqtBv2qmSGHib9Ms.roa
Signing time: Tue 20 Jun 2023 12:55:04 +0000
ROA not before: Tue 20 Jun 2023 12:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9335
IP address blocks: 45.136.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:df:79:b5:8d:6a:87:ab:4e:b1:79:81:56:a2:a4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jun 20 12:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50d24360bca152510aaad06fdaa99218789bf4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:97:bf:78:bd:da:d9:57:27:7b:ac:73:ca:
c2:8e:3d:ae:ce:30:6e:ff:85:49:8b:b7:c9:e0:e8:
7e:49:09:3e:63:0b:e1:f9:53:33:47:95:74:9f:ef:
31:df:c4:51:6b:f9:d0:fa:e7:9e:5a:f9:37:7d:52:
a9:9d:6a:55:80:da:45:44:b3:68:a3:27:51:46:9e:
6c:01:0e:ba:be:65:90:36:4a:3f:06:d2:90:ff:46:
93:0c:7a:8f:7b:9a:9d:8c:fb:a8:83:66:2a:fd:8c:
9d:3b:1d:a0:86:c6:e5:ee:08:b7:1b:0b:a5:01:69:
2a:47:25:d4:ac:50:ab:02:1f:a0:f9:2b:fa:b3:5f:
16:e6:ee:8e:ba:c1:f4:f8:3e:31:ec:af:ed:b7:83:
e4:51:bd:6a:3c:cf:be:11:c9:d6:65:9a:34:d9:6c:
13:ff:d2:d3:d9:7f:42:e2:17:a1:9e:67:85:e3:86:
5b:29:58:d7:2b:80:53:1a:bc:27:d3:9d:f4:50:32:
46:d6:f1:ef:08:6c:8d:99:e1:86:1b:f1:aa:11:6a:
45:ab:82:71:45:88:98:86:18:d5:88:9f:59:e7:a1:
85:97:4c:04:9a:70:4a:32:d4:60:60:df:0a:cf:59:
1b:ad:ed:d2:29:97:36:48:01:c9:f5:1d:20:12:4d:
38:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D2:43:60:BC:A1:52:51:0A:AA:D0:6F:DA:A9:92:18:78:9B:F4:CB
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/UNJDYLyhUlEKqtBv2qmSGHib9Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.236.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:06:36:d7:c7:09:e2:18:94:d3:13:05:0b:d3:60:37:20:96:
14:de:e9:f7:c8:31:7a:47:be:7c:c1:5f:dc:db:53:e8:f1:9f:
d2:83:11:72:16:82:b8:42:a5:16:49:f9:ac:06:f4:2d:e2:8e:
17:75:47:d7:60:fe:e3:45:07:db:2f:15:25:1e:00:51:c1:f9:
7f:6a:8d:54:fc:03:e1:d1:dd:56:06:94:af:cb:45:46:23:2b:
2f:f4:6d:57:79:9c:ce:5f:ef:15:af:21:56:31:87:e7:0c:fb:
a0:9a:c2:6b:52:90:76:f4:0e:e8:2d:69:98:4a:12:d2:a7:69:
cf:20:a2:fd:d6:52:4b:31:99:41:04:44:fb:de:96:81:8c:b8:
00:8c:ef:34:cc:71:f3:c9:20:bb:1c:c8:b0:98:20:54:fc:0a:
62:4b:1a:24:f5:44:c3:f8:5d:e7:37:70:e8:e8:27:72:38:e9:
9d:f6:07:42:af:2f:be:e7:43:9e:64:b1:2a:b9:ab:33:dd:20:
08:56:b4:90:06:63:ba:ff:10:26:f4:41:d2:a9:28:26:6c:d0:
6b:d2:d4:25:e8:c1:e3:d8:31:c3:74:cb:16:f7:de:8b:4e:de:
54:e1:2c:ef:85:20:07:1e:5e:5d:e4:5e:99:14:28:6b:98:fa:
ab:d7:9e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:31 2024 by rpki-client on console-fra.rpki-client.org