Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/uTRVffe51OyXGZFv1kfBXAbnsc4.roa
File: uTRVffe51OyXGZFv1kfBXAbnsc4.roa (raw, json)
Hash identifier: kiDBPpS7HMaeUt4XbCX/Gv7PzhdeTeyXi5lLPqZML4s=
Subject key identifier: B9:34:55:7D:F7:B9:D4:EC:97:19:91:6F:D6:47:C1:5C:06:E7:B1:CE
Certificate issuer: /CN=732adfeeda50be0369a52be4951a093968744f67
Certificate serial: 01856DD41FBF0C3E355B82A33F030DC68760
Authority key identifier: 73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/uTRVffe51OyXGZFv1kfBXAbnsc4.roa
Signing time: Sun 01 Jan 2023 14:54:56 +0000
ROA not before: Sun 01 Jan 2023 14:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208891
IP address blocks: 45.80.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:1f:bf:0c:3e:35:5b:82:a3:3f:03:0d:c6:87:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=732adfeeda50be0369a52be4951a093968744f67
Validity
Not Before: Jan 1 14:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b934557df7b9d4ec9719916fd647c15c06e7b1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:0a:9a:47:04:17:35:b3:41:79:63:e0:4f:
64:5f:e7:ed:bd:0b:37:df:ae:63:ee:8c:f2:2f:ff:
90:21:cd:29:2a:42:5f:dd:1b:3f:bd:e6:77:0e:37:
12:4f:a5:10:ed:4e:a0:8d:79:57:e5:2e:37:3d:b1:
a0:88:b0:7a:08:92:e6:d1:90:e9:e8:60:99:1c:25:
3e:65:42:9a:35:2a:05:ee:de:84:58:20:fc:f9:23:
08:de:0f:df:eb:e9:c0:e3:bf:50:cb:d1:5c:69:71:
d0:18:48:ce:1a:3d:a2:fe:90:ce:b4:44:6c:45:d2:
e7:fc:b0:05:57:01:f1:b0:22:0b:98:7b:89:46:0e:
3d:ca:49:24:74:81:ac:87:db:2e:ad:d3:33:e0:5a:
29:dd:04:6c:0c:02:56:25:7f:2f:2c:6c:68:46:9e:
5b:06:0e:84:13:5d:b5:0e:60:49:02:5b:3f:47:6c:
ec:75:39:84:09:76:be:77:bc:6b:eb:04:66:1e:d4:
55:c1:ee:e6:00:82:77:18:56:4a:e5:9d:56:b2:b4:
f1:09:fd:93:17:e9:bc:b3:87:a5:06:13:9b:49:a1:
02:0d:42:d0:d8:dc:77:c2:db:5e:bf:bc:54:59:2e:
db:34:ea:c9:9a:c0:6a:86:9b:63:77:4a:18:7c:7a:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:34:55:7D:F7:B9:D4:EC:97:19:91:6F:D6:47:C1:5C:06:E7:B1:CE
X509v3 Authority Key Identifier:
keyid:73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/uTRVffe51OyXGZFv1kfBXAbnsc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:87:0c:4e:6d:33:34:c9:05:a1:c5:9a:33:99:b0:68:da:e3:
4a:08:e8:3b:a1:fa:3e:6c:3d:d4:00:87:24:04:61:44:80:12:
b8:6b:80:13:f8:b4:0e:7f:88:fb:bf:25:0e:7e:82:60:a8:6f:
c4:4b:58:99:10:84:ad:ac:cd:39:9d:09:30:3a:ed:78:5d:99:
c4:d8:97:7c:e0:63:77:2f:96:3e:74:c6:17:33:c9:e1:e2:04:
b9:86:bf:fa:10:f6:47:0a:ee:70:26:cb:7e:cc:34:e5:b2:92:
12:c4:0e:c6:cc:64:e8:d7:b9:d0:75:3f:7b:45:cc:51:9f:56:
e0:ee:61:88:46:af:69:a4:23:3c:9f:75:0d:e8:c4:4f:d5:52:
d1:42:fa:18:eb:5e:1a:2a:f5:7c:20:c0:d5:d3:72:0b:9d:00:
28:f4:55:1e:1c:30:83:ef:fa:cb:3d:71:0b:97:03:48:65:af:
67:07:8b:fe:71:d4:c0:96:b3:de:9a:f6:b0:01:9d:bf:b0:6d:
da:8c:42:8b:9c:6b:58:88:60:4a:a2:1f:08:53:88:4d:f8:23:
0a:71:dc:63:28:5a:82:5f:41:fc:a6:c6:09:7a:4b:57:23:96:
1e:d6:82:01:90:10:4d:50:7a:bd:d5:f1:82:7f:4a:7a:58:47:
fb:9d:ae:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-fra.rpki-client.org