Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/uo-_LI7DRYy6fgai1Pr3Iy6rEKg.roa
File: uo-_LI7DRYy6fgai1Pr3Iy6rEKg.roa (raw, json)
Hash identifier: ICBq3TzxrW6+lD052/dpSq4WIlObD4jwGaB4rYcywXA=
Subject key identifier: BA:8F:BF:2C:8E:C3:45:8C:BA:7E:06:A2:D4:FA:F7:23:2E:AB:10:A8
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018EA7AAB01DABBC321ADB96F71D67EE3F88
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/uo-_LI7DRYy6fgai1Pr3Iy6rEKg.roa
Signing time: Thu 04 Apr 2024 05:52:45 +0000
ROA not before: Thu 04 Apr 2024 05:52:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55933
IP address blocks: 45.82.76.0/24 maxlen: 24
45.89.232.0/23 maxlen: 24
45.94.43.0/24 maxlen: 24
185.207.152.0/24 maxlen: 24
185.207.154.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 23:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a7:aa:b0:1d:ab:bc:32:1a:db:96:f7:1d:67:ee:3f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Apr 4 05:52:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba8fbf2c8ec3458cba7e06a2d4faf7232eab10a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:f6:b2:d4:ef:e9:63:01:1d:a8:fb:6c:e8:
90:e6:f3:a4:9b:8a:05:17:ea:aa:6e:3c:3b:fe:55:
e5:1d:df:89:7f:f7:b3:65:79:ac:da:12:83:bd:d5:
91:b4:43:ca:4c:9f:04:3d:9b:79:b4:ee:3e:10:00:
3f:81:98:98:b1:5f:03:6f:43:a6:2d:97:e9:47:1d:
cb:89:a5:ab:63:a3:f7:51:77:ac:af:18:4a:89:91:
bb:33:79:3c:bb:48:34:37:15:f4:90:cf:a1:24:55:
ea:2e:cc:30:a9:cb:d8:9c:47:d8:cd:1a:ee:a4:f8:
ab:47:ec:9e:28:1a:7f:5f:58:99:c6:59:d9:18:97:
17:14:84:ff:98:ac:5e:68:f6:dd:eb:12:f0:86:db:
73:24:a9:46:47:5a:cc:2d:73:2a:a9:49:e5:08:8c:
cf:50:97:35:2f:8a:01:cc:55:76:e0:b1:6f:e9:c7:
18:39:9b:a5:a0:9d:f6:3b:e0:3e:af:b8:b9:bb:3c:
18:d5:1a:09:5a:1d:c6:f6:68:bc:49:38:be:68:f2:
9a:83:80:2c:cc:86:de:29:06:a9:e3:4b:e9:c9:26:
66:cb:50:b7:15:37:98:94:aa:ce:25:b8:b6:b1:cc:
bb:e7:0b:2f:a3:f6:b8:5b:e4:fc:3f:9d:89:be:b4:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8F:BF:2C:8E:C3:45:8C:BA:7E:06:A2:D4:FA:F7:23:2E:AB:10:A8
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/uo-_LI7DRYy6fgai1Pr3Iy6rEKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.76.0/24
45.89.232.0/23
45.94.43.0/24
185.207.152.0/24
185.207.154.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:13:da:a4:6f:b6:1d:d0:38:46:f6:65:12:c2:cd:be:b1:51:
af:a6:be:0c:9c:43:82:37:d2:7a:0a:5c:33:25:13:3f:cc:47:
bb:4c:87:e6:72:bd:1c:c5:06:94:ae:3b:27:8a:4b:e1:60:c1:
19:8f:5d:a4:95:9e:b8:0d:a6:38:f3:49:0e:57:30:20:05:0a:
3e:49:d2:97:e1:43:fc:8d:cb:2f:73:b7:4a:34:db:48:dd:59:
60:38:48:7e:8e:12:3e:5a:d4:d3:23:f3:18:57:eb:80:db:87:
22:1b:d9:e9:63:53:0f:e5:81:f6:b8:da:ec:9d:da:fe:a9:c3:
4d:f6:b6:28:44:e1:9f:3d:33:05:1d:f1:d8:88:2a:32:82:47:
c5:c9:86:7e:ea:b0:5f:15:2c:de:58:83:8f:d0:8b:a2:ba:d4:
64:f6:33:c4:5e:a9:42:21:fe:9b:f6:39:47:55:54:7e:40:2e:
10:b7:e0:a3:fa:18:2c:5f:96:3b:da:d8:3d:c0:c3:9c:fc:f3:
93:86:92:6f:17:e8:68:b5:60:54:11:d0:de:d6:7f:0f:8d:ba:
4c:db:c2:c8:f4:c3:25:28:84:c4:30:3b:47:01:67:64:a7:d5:
2a:b2:6b:3a:70:e0:11:21:af:da:ac:ca:f7:03:b2:9f:0c:8c:
30:4f:5e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:53:00 2024 by rpki-client on console-ams.rpki-client.org