Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UZXY9En1ZZv4wQOr6CQZck5c1Dg.roa
File: UZXY9En1ZZv4wQOr6CQZck5c1Dg.roa (raw, json)
Hash identifier: GK9eZjP5BzSMjwrKaSn+l+ZlMfJ2VTEfYMn+ynqUuzE=
Subject key identifier: 51:95:D8:F4:49:F5:65:9B:F8:C1:03:AB:E8:24:19:72:4E:5C:D4:38
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01857D00D51C4BF77DD0A479229783E31CD7
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UZXY9En1ZZv4wQOr6CQZck5c1Dg.roa
Signing time: Wed 04 Jan 2023 13:38:04 +0000
ROA not before: Wed 04 Jan 2023 13:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207083
IP address blocks: 45.13.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7d:00:d5:1c:4b:f7:7d:d0:a4:79:22:97:83:e3:1c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 4 13:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5195d8f449f5659bf8c103abe82419724e5cd438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:cc:74:4f:ec:f7:e5:14:ec:ce:ab:27:01:
f2:36:ad:f1:9f:4c:a1:07:88:92:c8:b4:d7:34:fe:
d2:b7:18:94:8e:d2:5a:47:39:05:34:5c:d7:72:d2:
e2:7f:99:b6:b3:67:8f:52:3f:36:10:88:16:0d:41:
bf:74:55:67:76:be:81:91:d4:c8:60:bb:33:32:c0:
e6:25:27:96:d1:3c:52:fa:05:7a:2e:46:7a:95:a7:
77:1e:58:a8:9c:67:64:3b:8f:25:23:43:f1:34:a2:
3d:7c:06:a8:85:03:b2:aa:f7:e5:fd:bf:42:1b:df:
f2:c4:44:83:7f:55:dd:87:60:41:e6:b5:c3:d6:8c:
c3:0e:be:ca:e4:dd:db:cd:79:3d:5d:b3:4d:28:8b:
e6:03:44:66:6f:45:b6:c7:d9:77:35:f6:e8:26:cf:
7b:fa:ab:9d:6f:95:3a:91:7c:11:dc:43:72:d2:d1:
46:57:1e:ba:df:d8:7a:f1:5b:92:a1:ec:b3:5c:7f:
59:68:db:68:22:b3:b7:68:75:bc:01:90:51:37:96:
a8:aa:7d:29:b7:f3:8e:5a:77:9b:67:f5:8d:2f:42:
01:18:2a:1d:8c:1f:a6:f4:0e:55:6f:3c:89:4c:f6:
fc:1b:85:5f:78:bb:5b:a1:96:31:29:11:63:b9:8a:
db:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:95:D8:F4:49:F5:65:9B:F8:C1:03:AB:E8:24:19:72:4E:5C:D4:38
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UZXY9En1ZZv4wQOr6CQZck5c1Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.189.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7b:a2:ae:0a:ab:a8:d6:94:7f:ba:19:3f:b4:f6:1b:a8:95:
0c:be:5a:3a:86:e0:01:d8:3d:bd:3d:7e:05:f5:5e:3d:cb:96:
16:40:1a:c7:25:2e:f3:36:44:96:15:e6:c8:7f:1f:aa:84:c3:
af:c9:ba:b5:f8:81:19:8d:f7:c6:18:09:b9:5d:ac:99:0a:4f:
ba:8d:6a:df:e6:8a:44:13:6a:49:8c:db:5d:bf:d8:7b:36:fd:
86:98:71:c4:e6:6b:bb:bd:b1:44:57:90:ce:aa:08:92:be:0e:
08:3f:6a:d3:66:b0:35:c7:60:16:c5:0b:3f:e2:c9:62:2b:b5:
fe:7d:59:31:af:c2:05:41:94:ca:e7:ca:f3:b6:6b:1b:dd:c1:
9b:39:34:6c:07:e9:62:c2:0a:33:b1:a2:43:42:27:b0:d5:9b:
71:3a:41:89:81:80:07:b7:e0:68:14:a2:49:19:7a:bb:44:62:
df:28:45:99:a5:db:81:a0:03:ab:89:6b:10:cf:7a:9c:59:1d:
98:a9:7f:74:4c:e9:37:e8:dc:81:46:32:c9:30:57:af:b7:c9:
c8:95:cc:61:8f:b1:a7:bc:1d:b9:07:26:31:22:6a:25:4a:74:
0c:da:4b:c9:5e:16:3a:fe:6c:99:ec:dc:c2:e3:e9:46:b0:0c:
2c:3c:f9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org