Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/uAS4jjA8LnhsCWYHWc09lmmdG3A.roa
File: uAS4jjA8LnhsCWYHWc09lmmdG3A.roa (raw, json)
Hash identifier: g8kqZJfs79ij/4caLm0MM+Gynsyzb10AlCUlydbpkm8=
Subject key identifier: B8:04:B8:8E:30:3C:2E:78:6C:09:66:07:59:CD:3D:96:69:9D:1B:70
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 01881FE2FB9EEF5DDE03183417FEF7A41CE1
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/uAS4jjA8LnhsCWYHWc09lmmdG3A.roa
Signing time: Mon 15 May 2023 14:49:09 +0000
ROA not before: Mon 15 May 2023 14:49:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43366
IP address blocks: 45.155.212.0/22 maxlen: 25
195.35.114.0/23 maxlen: 24
185.103.76.0/22 maxlen: 24
2a06:2a80::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:e2:fb:9e:ef:5d:de:03:18:34:17:fe:f7:a4:1c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: May 15 14:49:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b804b88e303c2e786c09660759cd3d96699d1b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:99:34:47:98:c4:dd:f4:e3:ad:fc:8e:5e:d3:
c2:3c:ee:ff:a4:80:11:f5:3d:9f:62:d3:99:13:e3:
70:19:6e:d5:76:a2:06:51:b6:c9:c6:ee:36:7b:97:
14:a8:9b:b1:99:3f:f0:c8:ee:16:12:ad:14:bf:a3:
99:ef:ce:12:b6:4a:4d:a4:fd:08:7e:9c:e7:4f:e4:
d6:1d:69:4c:d5:d8:69:cd:73:4c:6c:be:73:2b:90:
4e:e5:e3:2d:8e:57:fd:47:44:92:42:90:03:4c:87:
48:55:fe:f3:43:fd:f5:1e:d7:56:1b:4d:44:7e:a4:
cb:49:ea:bf:74:ba:63:d1:6c:05:eb:47:51:79:9c:
a3:e8:50:d6:a3:02:92:b7:03:d3:76:aa:a5:92:7b:
ff:33:6b:aa:ac:b5:a7:44:ea:ec:f5:4d:b4:f9:46:
9f:f5:6c:b2:3c:73:46:66:3a:59:d5:69:9b:82:ee:
71:d6:be:f2:89:d0:b8:45:45:1e:23:6d:05:37:ed:
97:2f:f8:91:83:0b:3c:19:ff:ff:c3:a8:1e:76:2c:
05:e1:0a:5b:ad:12:f6:80:9b:6c:e1:1d:ce:5e:68:
cc:b1:06:6d:e0:ed:eb:08:48:86:27:a4:0f:bf:bd:
13:bc:92:f8:15:6f:f9:c9:e2:f9:a2:13:f9:f8:3f:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:04:B8:8E:30:3C:2E:78:6C:09:66:07:59:CD:3D:96:69:9D:1B:70
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/uAS4jjA8LnhsCWYHWc09lmmdG3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.212.0/22
185.103.76.0/22
195.35.114.0/23
IPv6:
2a06:2a80::/29
Signature Algorithm: sha256WithRSAEncryption
62:f1:a0:0c:c6:9f:ed:2e:03:ec:43:15:0b:0f:5a:1f:74:64:
63:8d:7f:f7:05:7d:51:3b:8d:8e:1e:4c:e4:24:0c:54:0d:9d:
f1:90:3b:05:68:ba:fa:2c:dc:cc:56:ba:65:9d:57:bc:8c:e7:
c4:71:b8:0b:ef:83:e2:3d:bb:45:96:e3:ee:f7:c5:10:ec:52:
b1:21:02:43:2a:fd:87:0d:7e:18:6d:f4:cb:34:44:5b:59:cb:
79:31:4d:da:73:d3:0f:2f:c7:6b:86:d7:1c:fb:a2:1a:1a:09:
d0:36:c1:d0:ec:ee:d7:f8:eb:df:46:42:e1:f7:84:5b:fb:4b:
b9:a7:93:62:b0:08:79:a6:67:82:ea:83:4b:fd:9c:e7:54:02:
16:f2:e3:ef:28:e7:2f:68:9e:76:36:b2:27:42:da:ad:b0:d1:
a7:d9:3c:41:ea:4d:1e:4f:02:16:cc:6a:f7:1e:ed:1c:fe:05:
5a:4d:0b:bd:c2:f6:9e:26:f3:b0:0f:92:7d:82:90:d3:73:5c:
93:1b:63:64:62:a9:18:fd:43:e8:da:c4:d1:0c:31:ba:1e:38:
dd:9a:c9:90:d5:69:a5:d6:99:8d:64:9e:dd:7a:ac:99:c8:37:
92:c6:7f:e2:9d:af:2a:49:33:9b:73:f4:fd:fa:d4:52:e5:2c:
14:b5:ed:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:16 2024 by rpki-client on console-ams.rpki-client.org