Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Ua-DAUY1-5FuEbtqCnPiXMvU4ow.roa
File: Ua-DAUY1-5FuEbtqCnPiXMvU4ow.roa (raw, json)
Hash identifier: oi01uX6+/kcCAzUU36UUcAJh/UbxQWI13vhI+oaktno=
Subject key identifier: 51:AF:83:01:46:35:FB:91:6E:11:BB:6A:0A:73:E2:5C:CB:D4:E2:8C
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 019251CAF8B57FA1A281B710184017AC2B96
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Ua-DAUY1-5FuEbtqCnPiXMvU4ow.roa
Signing time: Thu 03 Oct 2024 09:51:49 +0000
ROA not before: Thu 03 Oct 2024 09:51:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 45.140.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 18:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:ca:f8:b5:7f:a1:a2:81:b7:10:18:40:17:ac:2b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Oct 3 09:51:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51af83014635fb916e11bb6a0a73e25ccbd4e28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:54:39:6a:59:b0:a4:43:7f:af:34:f1:74:
8d:9b:fa:4f:4b:a8:6e:17:b1:0e:b2:b0:0b:3f:85:
6a:39:1a:d9:9b:35:86:80:47:b3:6c:ce:b6:8d:ca:
4f:7b:c9:ef:2d:8f:e0:66:d6:fa:dd:5a:35:ce:70:
34:cf:07:73:82:ba:d4:3a:5a:c3:0f:cd:f6:81:09:
29:73:8a:aa:c5:72:6f:f9:6a:1d:59:f7:1a:26:6c:
57:02:ec:6d:5c:bb:fe:7a:7f:ad:55:22:31:48:ad:
6e:4d:47:ae:72:55:d8:58:e3:05:28:c2:8b:83:20:
17:44:28:5a:aa:a8:0b:ec:8e:e3:4d:93:41:5e:22:
95:6c:23:73:d8:6f:e8:22:0a:51:9b:a8:9c:d3:ab:
fc:81:3d:c9:47:a5:9a:d3:f6:14:ad:ab:86:05:ce:
83:98:59:8a:40:f6:f4:f1:f2:99:70:46:e6:64:f0:
2b:f6:f0:78:09:5a:e5:e8:72:81:73:82:93:0e:5c:
d2:98:a3:8d:ca:9f:0f:d5:a2:b4:3c:cb:4b:a2:7c:
16:9f:5e:88:88:21:6e:07:0a:16:69:1f:c9:5e:af:
d6:c5:29:cc:b7:3d:35:91:eb:68:3c:a4:79:7a:58:
6e:99:8d:c9:04:84:d2:3e:df:9b:e6:c5:34:bf:f8:
14:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AF:83:01:46:35:FB:91:6E:11:BB:6A:0A:73:E2:5C:CB:D4:E2:8C
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Ua-DAUY1-5FuEbtqCnPiXMvU4ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.208.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:42:9a:d3:80:1e:86:e2:cd:d4:15:0e:3e:fb:7b:6b:ae:81:
07:63:e6:41:0d:c0:36:9d:c4:8f:7e:cb:b9:c1:0a:8b:86:a5:
30:34:88:7b:ff:9c:09:62:c3:3f:4f:4d:20:83:6c:94:d0:89:
28:f8:fa:3f:3b:75:79:3f:e8:89:01:b8:d3:72:e5:dc:69:dd:
0d:47:80:c6:39:ab:2b:18:bf:bd:e8:fd:ff:1b:24:a8:76:19:
26:f0:66:3a:8d:92:67:0c:a4:fc:68:56:90:5c:ff:25:07:fa:
7d:68:54:24:a5:6a:98:0b:9d:e6:5c:ca:12:e6:92:b4:0f:9f:
cb:a4:b8:b5:2b:b6:b7:c1:b0:5a:fd:86:d8:a1:e9:f3:2d:b8:
d0:85:53:87:67:93:e9:bf:09:a9:4e:43:5f:93:ed:7d:f3:5c:
e0:f9:df:dd:96:41:68:63:62:2e:60:d7:03:57:c2:8b:45:7d:
d8:0e:a2:da:63:78:9e:96:9f:0f:20:9c:2f:8d:1d:a4:c0:99:
93:59:f7:96:f9:89:49:e1:6f:5b:89:d5:9d:e6:31:f6:d9:d4:
72:1e:39:e7:a3:71:a5:df:99:21:ea:e5:7a:5e:bb:06:3e:d8:
26:cd:59:d8:61:df:2c:0c:60:85:8f:d0:b6:07:ff:e0:47:dd:
9e:9e:29:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 21:55:54 2024 by rpki-client on console-ams.rpki-client.org