Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/u9iur7Q1QXodHbtC7lbI10m04GQ.roa
File: u9iur7Q1QXodHbtC7lbI10m04GQ.roa (raw, json)
Hash identifier: vIO+iazuYJhCmW38X46PfIjiDm69Z868OW2Luuaxs5A=
Subject key identifier: BB:D8:AE:AF:B4:35:41:7A:1D:1D:BB:42:EE:56:C8:D7:49:B4:E0:64
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 01856F824110349E33A4086E4FBF3A9A684E
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/u9iur7Q1QXodHbtC7lbI10m04GQ.roa
Signing time: Sun 01 Jan 2023 22:44:45 +0000
ROA not before: Sun 01 Jan 2023 22:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212609
IP address blocks: 45.12.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:41:10:34:9e:33:a4:08:6e:4f:bf:3a:9a:68:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Jan 1 22:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbd8aeafb435417a1d1dbb42ee56c8d749b4e064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:03:ee:af:4a:ba:c0:c3:0a:a0:a7:a0:da:
80:af:b6:5e:af:c9:8f:21:9a:55:69:d8:fd:8b:55:
46:ce:eb:cf:c6:1e:85:1c:d4:99:67:1c:2c:3f:25:
e4:3b:dd:10:34:8d:51:d5:50:d7:3b:b2:0f:22:e7:
68:4f:32:4f:e7:3a:3b:d9:64:73:13:b6:9a:fb:00:
95:e1:f0:d8:db:1a:2e:43:3d:de:08:69:28:3c:d2:
f4:8d:8a:4d:7d:53:b7:a7:a9:a6:0f:8e:cd:78:e9:
1a:1f:a5:63:d9:60:b3:1f:d0:41:90:1c:42:99:01:
bb:a4:29:3c:52:8a:46:9a:3c:c1:df:90:65:66:1a:
80:85:d8:30:65:38:24:73:43:20:bf:88:77:b3:b7:
da:8b:ad:5a:0f:45:ef:0c:31:4c:9a:79:98:f9:b6:
14:8a:cf:a4:8e:6a:b5:3c:19:f5:59:35:bc:2a:f6:
5c:04:69:16:bc:3d:d9:d3:f1:aa:cf:4e:0c:15:ee:
09:1c:23:65:41:80:c0:0b:aa:18:8b:72:8c:92:2b:
64:a7:c2:e6:d9:85:b2:a0:34:09:c8:12:c0:be:6d:
6e:ab:d1:32:f8:df:5c:65:83:1c:9b:f6:c0:90:ea:
e0:4d:94:94:ea:2d:34:02:6a:87:f2:5d:ed:40:50:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D8:AE:AF:B4:35:41:7A:1D:1D:BB:42:EE:56:C8:D7:49:B4:E0:64
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/u9iur7Q1QXodHbtC7lbI10m04GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.186.0/24
Signature Algorithm: sha256WithRSAEncryption
16:35:a3:e2:25:1b:16:19:81:e6:5b:48:70:9f:87:80:0d:b9:
eb:96:2b:e0:df:67:4a:fa:50:16:a5:f2:d5:0a:0b:e4:3f:b6:
e5:d9:52:0e:a7:03:d6:3b:80:1e:d4:77:3f:8e:09:42:cd:43:
60:5b:97:03:e2:f7:f0:92:7e:3f:b6:bf:fb:4b:da:6b:08:89:
66:18:05:da:34:d0:8d:d0:c3:df:c0:54:05:38:28:78:a0:b7:
70:d2:93:3b:e0:31:a9:7e:5e:c6:35:37:86:82:b6:03:1a:06:
9c:61:fb:a0:52:7f:79:f4:81:6e:a3:dd:dc:49:69:71:cd:e5:
ec:b2:e1:f6:b5:76:df:4a:19:16:53:91:7e:0f:40:4a:fa:8c:
b3:19:97:7a:c8:86:b7:c6:5c:16:f3:e0:f2:48:e7:20:fc:79:
57:dd:60:cd:5a:9d:97:fb:da:2e:8f:24:1a:99:55:02:0d:ae:
8a:fc:eb:98:06:ac:76:b4:0c:84:97:a1:9d:5c:8b:d3:95:a4:
f4:50:6c:4c:cb:64:12:31:b8:88:11:ad:9c:f7:f3:cd:dc:78:
ff:4b:71:ab:33:ba:d5:d4:38:c5:47:bb:e9:74:7b:4f:80:44:
8a:a8:b5:b7:48:11:6f:0a:a2:49:ae:40:12:2f:00:81:06:ad:
ac:fb:8f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:12 2024 by rpki-client on console-fra.rpki-client.org