Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/uBZ-VjBKiRr8z5RQ6o4kIYvj2yo.roa
File: uBZ-VjBKiRr8z5RQ6o4kIYvj2yo.roa (raw, json)
Hash identifier: JV2/fAMS7nxvItVvfIIy6Ln1QU6KhoqkrELIZFuH4W0=
Subject key identifier: B8:16:7E:56:30:4A:89:1A:FC:CF:94:50:EA:8E:24:21:8B:E3:DB:2A
Certificate issuer: /CN=531f247d4bc70214606d07d659319ec3f3479706
Certificate serial: 01856EA6B1B7677288081B821F637D2A4F30
Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/uBZ-VjBKiRr8z5RQ6o4kIYvj2yo.roa
Signing time: Sun 01 Jan 2023 18:44:56 +0000
ROA not before: Sun 01 Jan 2023 18:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 45.81.132.0/22 maxlen: 22
91.212.140.0/24 maxlen: 24
2a0e:4680::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:b1:b7:67:72:88:08:1b:82:1f:63:7d:2a:4f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706
Validity
Not Before: Jan 1 18:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8167e56304a891afccf9450ea8e24218be3db2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:a2:91:3a:76:b3:82:43:7f:29:24:4d:bf:
b8:af:8c:40:e9:82:c8:33:73:b6:dd:31:ae:5e:5e:
a4:c7:b1:71:49:2e:d9:73:ba:74:ff:1f:6f:0b:fd:
be:72:d9:ff:57:23:71:ba:8d:08:0e:cb:8a:d9:16:
9f:0c:75:42:e1:0d:bb:d8:a6:1e:85:1b:f9:d9:50:
02:9b:4c:f7:0d:c6:78:09:94:84:90:87:42:1a:c0:
4d:9d:b7:df:9c:0f:fd:3a:08:62:00:f6:c7:c8:22:
39:85:41:ad:ef:37:4a:df:70:c2:33:8f:c5:6d:bb:
d1:17:59:a4:b6:7a:d7:b8:1b:af:2b:d3:11:41:5b:
85:5b:ae:75:82:e2:8e:e0:ec:cb:ea:30:cb:c5:b3:
63:90:a3:74:f4:8a:0a:de:79:1e:a1:49:8e:63:9a:
ba:d0:41:b1:47:7c:8d:a2:8d:31:cd:00:39:47:4d:
06:ee:4e:c8:57:9a:98:62:f2:1c:88:39:56:90:84:
b3:54:99:14:a5:59:5a:9a:25:74:51:aa:80:96:b4:
3a:d1:0b:24:63:1f:a4:93:e6:37:ab:d5:59:01:bd:
b4:90:65:d9:de:cf:79:77:f6:f9:f6:2c:0f:94:35:
f1:d1:08:57:92:e1:38:8a:e7:96:68:45:3d:8a:cc:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:16:7E:56:30:4A:89:1A:FC:CF:94:50:EA:8E:24:21:8B:E3:DB:2A
X509v3 Authority Key Identifier:
keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/uBZ-VjBKiRr8z5RQ6o4kIYvj2yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.132.0/22
91.212.140.0/24
IPv6:
2a0e:4680::/32
Signature Algorithm: sha256WithRSAEncryption
4d:e3:d9:cb:c3:b6:4d:15:40:a4:af:b5:f3:80:6c:b8:4c:18:
31:6c:04:06:98:b9:08:29:9c:26:10:32:00:02:58:de:7b:68:
5b:b8:5d:c2:41:45:08:19:d4:28:cd:69:08:3d:6f:30:3f:0e:
a7:a1:5b:c0:6d:ef:d4:c2:8d:26:b8:06:1d:8c:34:68:69:06:
25:dc:61:c2:22:80:20:fd:b7:a9:ad:58:81:85:f8:18:5c:7c:
b1:97:51:88:83:ec:5b:39:24:e2:d9:fa:68:39:1d:9d:77:ff:
bd:03:66:05:22:24:6e:ca:7b:2d:41:c1:f0:b9:fa:df:f4:52:
47:49:60:d0:c4:21:af:20:91:5c:39:27:3c:09:98:c8:18:ec:
2e:1c:b8:58:cf:f7:00:05:54:fd:dc:21:1e:27:2a:32:ae:c2:
11:49:a0:32:00:00:7b:a7:e3:50:a8:82:4f:e5:e7:38:06:f1:
85:73:2b:30:29:92:71:a2:6e:29:18:30:a0:b8:c1:6c:ff:72:
3f:b3:27:cc:f8:f9:d9:dd:cc:67:b3:2f:8f:2a:17:18:56:13:
58:54:57:e3:d2:8b:14:45:96:32:e8:c7:fc:78:83:65:88:cf:
5b:50:a9:2c:37:ae:2d:c6:cc:3f:68:69:a6:6a:46:a2:92:b6:
9f:4d:6c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:18 2024 by rpki-client on console-ams.rpki-client.org