Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Uhs2cnVFhdpAf_6SeFRM2RfeRG4.roa
File: Uhs2cnVFhdpAf_6SeFRM2RfeRG4.roa (raw, json)
Hash identifier: 7xe2cXqiS3NopMDzoV9UEPoOJ4VqY5lNFu33LvGnXiQ=
Subject key identifier: 52:1B:36:72:75:45:85:DA:40:7F:FE:92:78:54:4C:D9:17:DE:44:6E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018C50CA4030A4A4F1FDA054E415794B8B16
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Uhs2cnVFhdpAf_6SeFRM2RfeRG4.roa
Signing time: Sat 09 Dec 2023 22:54:41 +0000
ROA not before: Sat 09 Dec 2023 22:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198652
IP address blocks: 45.81.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:50:ca:40:30:a4:a4:f1:fd:a0:54:e4:15:79:4b:8b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 9 22:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=521b3672754585da407ffe9278544cd917de446e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:aa:ce:fa:33:35:19:f0:83:89:02:dd:26:0a:
f4:f7:76:c0:c8:ab:dc:63:23:4a:60:b1:29:ed:fa:
c1:c7:51:bb:b2:5a:07:63:41:0a:bf:78:b8:fc:60:
83:fa:c7:23:9f:6d:bb:f8:bf:e9:3e:09:88:77:47:
1f:5f:2f:11:75:76:b1:dd:e5:56:f6:b9:6d:8f:84:
6e:dd:10:72:13:4f:d7:4c:ca:1b:d7:2d:a1:bd:56:
14:e6:ba:63:08:8d:14:a2:35:6b:43:21:4d:93:23:
e4:f7:7d:42:15:02:4d:19:93:2f:21:63:1d:dc:55:
03:75:a7:8f:39:5e:b2:2b:02:3a:5f:01:05:d9:66:
c2:cf:46:ce:5b:e8:3d:1c:86:eb:3a:89:be:2c:50:
28:f0:5c:3a:b1:3f:40:02:ac:6b:06:ff:ed:16:c1:
15:63:64:a6:01:9f:b3:43:eb:02:9e:a5:2e:7d:7d:
4f:a1:b5:7e:60:a0:69:72:a2:a2:04:8f:6a:3e:89:
00:b4:ec:02:f0:22:f2:7e:d6:e4:bd:20:3b:d7:39:
91:76:c7:91:ee:9a:a6:65:22:7d:a2:1f:3f:81:16:
99:01:f1:dd:1d:6e:a6:67:84:08:ca:0f:8a:a1:01:
cd:cc:dd:b5:48:75:61:92:e9:bf:70:81:e2:cd:aa:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1B:36:72:75:45:85:DA:40:7F:FE:92:78:54:4C:D9:17:DE:44:6E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Uhs2cnVFhdpAf_6SeFRM2RfeRG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.113.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c1:54:cd:41:a3:bc:41:ae:a9:73:eb:15:52:6a:d2:1a:0c:
ce:05:14:d6:ae:b9:f0:fe:cb:7c:8e:4d:7f:e8:07:b3:e4:77:
6d:d7:b4:8f:b7:87:eb:d1:51:c2:bc:42:1d:f7:58:95:62:f8:
c2:0f:75:08:10:35:ab:68:8f:c1:70:5b:cc:09:52:55:a6:ba:
c5:24:a7:83:d9:76:0f:7e:be:98:93:ef:64:e7:56:74:38:66:
4c:ca:a7:d4:9e:bb:46:0c:a1:ad:26:f1:71:04:af:01:57:5a:
b1:64:8b:05:91:d3:21:22:3d:e0:18:6e:b0:5a:e9:07:02:e1:
37:dc:ca:bd:00:90:77:ec:ad:79:d1:d7:e0:95:19:c4:7a:bb:
48:12:57:52:aa:11:5a:58:2b:6a:5c:cd:96:cd:b8:4d:ae:0b:
d6:0e:91:ce:07:5f:a7:0d:dc:8c:ba:d4:9a:2b:b7:62:13:b0:
57:f8:21:fa:7d:e8:52:2e:83:3a:76:87:16:ff:2b:4b:54:77:
94:e3:91:67:a4:cc:33:b4:8b:a5:fc:9b:de:9c:6e:46:1f:7e:
1c:20:c3:28:56:b5:a8:4f:1e:1d:19:79:8a:8f:04:de:92:92:
fc:8d:77:19:47:03:76:79:e6:38:1d:da:a8:56:e3:a9:72:8a:
85:7e:bb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:45 2024 by rpki-client on console-fra.rpki-client.org