Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/uo54R7Uc8vnijp5Y2w20WMCbg_I.roa
File: uo54R7Uc8vnijp5Y2w20WMCbg_I.roa (raw, json)
Hash identifier: IqhhxjL6zcplqWwb+PDI/uX5pgo0HjW36e97jpF7EUs=
Subject key identifier: BA:8E:78:47:B5:1C:F2:F9:E2:8E:9E:58:DB:0D:B4:58:C0:9B:83:F2
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 018CC03C2CA72A16C4E140325D895A615AB4
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/uo54R7Uc8vnijp5Y2w20WMCbg_I.roa
Signing time: Sun 31 Dec 2023 14:16:58 +0000
ROA not before: Sun 31 Dec 2023 14:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32780
IP address blocks: 45.87.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c0:3c:2c:a7:2a:16:c4:e1:40:32:5d:89:5a:61:5a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Dec 31 14:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba8e7847b51cf2f9e28e9e58db0db458c09b83f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:42:76:3a:49:88:10:f0:96:5f:12:d6:1c:40:
20:0c:e2:29:b1:78:26:9e:f9:ce:53:ea:89:e1:82:
80:99:33:94:35:62:84:7d:53:f8:4d:99:8a:eb:25:
eb:45:64:0c:47:82:a8:58:6c:ff:d8:a7:e6:5b:40:
79:b6:58:30:a5:65:3a:ac:a6:10:c6:e6:ff:33:c9:
52:4d:66:d8:0b:c9:b3:6f:a9:91:17:7d:2a:16:32:
02:67:6d:88:32:0e:41:c4:6c:12:d7:09:84:ca:b5:
35:8e:0e:fd:c5:b6:ed:a4:64:e8:1e:14:19:10:1d:
d7:eb:af:28:af:4a:18:da:08:b4:2d:c1:20:69:2d:
97:ab:7a:f4:78:67:2e:60:8b:fa:93:61:25:f3:da:
a9:2d:16:f5:12:78:04:61:50:ab:1b:79:98:36:53:
fb:f5:ff:78:4b:23:cd:66:70:e4:fb:0d:21:4f:17:
d3:7b:f9:27:c3:57:9d:44:1f:52:e3:92:50:97:8e:
8d:fa:78:bb:37:c8:a8:93:76:3a:59:38:f8:0c:27:
00:e3:7a:78:bb:74:b3:a9:85:89:4d:8a:01:72:25:
08:b4:e4:85:ed:fd:d4:62:95:39:88:41:38:39:e8:
62:01:3a:13:f9:d2:37:0f:f7:3c:fb:9e:7b:84:66:
d7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8E:78:47:B5:1C:F2:F9:E2:8E:9E:58:DB:0D:B4:58:C0:9B:83:F2
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/uo54R7Uc8vnijp5Y2w20WMCbg_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.163.0/24
Signature Algorithm: sha256WithRSAEncryption
96:29:62:2d:ab:37:3d:fe:e2:03:72:2c:24:7f:30:e9:7c:f0:
ca:a2:58:60:8e:a1:62:04:e1:d0:0a:7f:eb:10:2b:18:9c:c1:
f1:18:4b:59:45:4e:21:6e:c9:9c:68:b1:81:5b:b0:6f:24:4d:
57:79:a1:dd:b7:b1:be:ff:a7:f8:1f:e5:c6:99:4f:f4:d0:18:
3d:4a:5e:2d:4a:20:76:f0:91:2b:fb:77:63:e2:cc:8d:2a:5f:
4b:a5:79:16:8d:a6:7b:17:6d:b4:b1:14:9f:8b:5c:d1:f3:ab:
c5:f8:ae:cf:f1:3a:bb:e2:07:fe:7a:9d:51:88:05:7c:51:ce:
f7:48:1b:20:e1:32:e1:79:9b:eb:58:7b:43:e8:14:5c:a9:2f:
73:f8:cd:90:3f:9e:66:0b:8b:12:53:d7:72:28:5d:89:8b:11:
c7:c6:ad:ce:fa:e7:fb:fb:89:64:a6:12:bd:15:26:bb:df:c9:
5c:de:52:1a:23:24:1c:08:ed:2e:aa:73:46:b0:76:51:48:dd:
e5:d5:21:74:89:70:57:83:66:de:24:cf:9d:4f:f8:cd:63:45:
19:60:5c:56:3b:d8:05:1e:04:a0:8e:73:d0:87:bb:d9:b3:e7:
9e:a5:73:85:55:2c:fc:74:69:74:7c:ab:84:5f:12:39:76:fa:
6e:1e:47:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:21 2024 by rpki-client on console-ams.rpki-client.org