Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/Uc8KNdrR_fdBLBSbtZHLL6XKW5I.roa
File: Uc8KNdrR_fdBLBSbtZHLL6XKW5I.roa (raw, json)
Hash identifier: CZ3Qh++RzIlBFHkkAfZ3T0fJl3zPDzYPYu8GGP+JpPw=
Subject key identifier: 51:CF:0A:35:DA:D1:FD:F7:41:2C:14:9B:B5:91:CB:2F:A5:CA:5B:92
Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial: 01857246AC4E24CC381C4CFA68B351171F27
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/Uc8KNdrR_fdBLBSbtZHLL6XKW5I.roa
Signing time: Mon 02 Jan 2023 11:38:32 +0000
ROA not before: Mon 02 Jan 2023 11:38:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49800
IP address blocks: 45.131.125.0/24 maxlen: 24
45.131.126.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ac:4e:24:cc:38:1c:4c:fa:68:b3:51:17:1f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Validity
Not Before: Jan 2 11:38:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51cf0a35dad1fdf7412c149bb591cb2fa5ca5b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b0:6b:94:e6:78:f5:f5:9d:f0:3b:ca:e1:ce:
75:91:39:4f:da:11:a0:a4:6e:6b:f9:d5:09:25:e4:
43:62:2a:28:0a:b5:fb:6a:af:b2:db:65:e7:94:c3:
56:7f:7e:35:10:42:3e:5b:92:ea:60:49:a1:e1:da:
ef:77:df:0e:8c:31:11:2a:96:7e:21:61:cf:23:3c:
8e:12:c5:6a:72:19:9a:78:27:00:3f:03:9b:f5:97:
3e:b9:68:1e:61:2b:bf:52:2e:82:ee:31:b5:6d:15:
80:f7:ce:b3:22:5f:95:ac:d6:35:73:47:e1:7e:17:
04:92:64:3f:16:42:70:e4:33:03:86:cb:d1:3b:34:
f5:a8:27:c1:2c:56:49:ec:52:e4:d0:f9:ac:70:27:
83:9b:1b:86:8b:20:e8:95:c4:74:44:49:c5:8a:2b:
1c:6e:98:2d:e9:e0:3b:ca:3d:40:c0:0f:05:a2:87:
39:79:f7:60:a3:05:3c:81:2b:6e:c9:0b:26:c3:1d:
12:e6:a8:13:1e:36:1d:81:6f:70:d8:2c:1e:27:c4:
59:4b:6b:be:14:6f:8b:bb:b5:aa:cb:49:e9:05:28:
0e:9a:84:3f:67:74:3a:2a:66:da:61:26:8e:eb:e1:
ef:ac:cc:43:df:a8:1c:e1:88:fe:b5:4a:f7:30:9d:
8e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CF:0A:35:DA:D1:FD:F7:41:2C:14:9B:B5:91:CB:2F:A5:CA:5B:92
X509v3 Authority Key Identifier:
keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/Uc8KNdrR_fdBLBSbtZHLL6XKW5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.125.0-45.131.127.255
Signature Algorithm: sha256WithRSAEncryption
1e:24:ea:84:74:78:49:7f:a5:6c:81:aa:e4:71:5d:c0:df:e0:
83:01:85:09:9a:f4:b8:f5:e0:f0:be:2a:d6:af:62:4d:90:a8:
77:24:00:cf:20:bc:fe:91:8e:5b:86:8b:d8:7d:9a:a7:12:39:
c1:d8:ea:99:7c:5d:1f:4d:c8:ef:d9:90:0e:7f:93:ab:95:e9:
ce:b2:89:d1:69:30:10:08:34:0d:8a:d9:52:7f:38:25:34:6c:
86:ed:bd:a7:73:7c:a1:2e:5e:ab:8d:01:9d:88:53:44:bb:67:
ed:74:e3:8e:ef:d3:c3:31:7d:85:0d:c1:6c:01:b0:0e:7a:2f:
f4:16:81:0b:e9:15:a8:10:bd:73:ae:25:8b:c8:0e:d2:da:60:
ff:68:8b:4b:ab:26:a6:20:eb:db:e1:ee:c4:bc:2b:dd:24:bf:
2f:f7:4b:cc:b7:47:77:8c:ae:66:64:6e:6f:d4:fb:e0:78:31:
39:ae:e0:97:b5:ab:55:d2:64:f8:54:95:1a:ee:29:7a:df:02:
cb:67:99:20:08:d9:aa:68:be:a3:f0:85:30:ba:52:3d:1e:e3:
8d:02:9c:2b:33:9a:ae:a2:38:41:86:ad:d6:b6:1c:96:a7:49:
f6:54:51:b1:50:74:8d:af:89:f4:ea:f3:6e:4d:90:d2:a6:96:
a0:8c:e2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:53 2024 by rpki-client on console-ams.rpki-client.org