Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/U6n4KoHPZ3HlLb21jX0WOUiXv1c.roa
File: U6n4KoHPZ3HlLb21jX0WOUiXv1c.roa (raw, json)
Hash identifier: w3GOj8SGs3ZZBCM2yhN11OvbUj7W/sYnmDEKv8+A18s=
Subject key identifier: 53:A9:F8:2A:81:CF:67:71:E5:2D:BD:B5:8D:7D:16:39:48:97:BF:57
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 0188D6A6F20252E10A7270525F9FC8666DD5
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/U6n4KoHPZ3HlLb21jX0WOUiXv1c.roa
Signing time: Tue 20 Jun 2023 02:34:05 +0000
ROA not before: Tue 20 Jun 2023 02:34:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.81.151.0/24 maxlen: 24
45.92.28.0/24 maxlen: 24
45.92.28.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d6:a6:f2:02:52:e1:0a:72:70:52:5f:9f:c8:66:6d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jun 20 02:34:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53a9f82a81cf6771e52dbdb58d7d16394897bf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:c2:9f:6c:6b:8e:e7:97:56:71:b0:be:df:
a2:70:ab:a4:22:08:78:88:41:09:ae:41:f0:fc:7c:
59:d6:08:6b:70:ac:ac:90:51:4e:76:5e:4e:83:af:
ce:48:cd:b2:e6:af:cc:0a:0f:ec:75:f1:17:29:04:
71:ef:a9:d0:a4:75:37:28:57:db:76:75:5a:6f:08:
c6:98:9c:b8:cf:4f:4a:c5:f3:d0:d4:6a:e2:06:c5:
d9:ca:1e:97:33:dd:29:4f:71:8d:71:39:18:58:fa:
21:fd:bb:cd:c9:cb:d2:08:f2:28:31:f2:0d:8d:2b:
85:63:39:a3:69:41:1c:67:8f:90:6d:9c:d8:13:64:
f7:4f:2e:27:9a:8e:5f:45:d2:ce:ae:42:de:4c:a8:
e5:3a:51:f1:09:f7:df:9c:b9:4e:51:d7:9b:1f:e8:
fb:e1:c4:15:6d:a7:06:23:66:7a:31:03:ac:95:96:
ef:ab:ee:78:67:1d:88:49:7e:86:51:60:7d:aa:4b:
4e:6c:dd:df:f5:d7:d6:2e:f4:f0:7a:f0:9c:3b:c1:
87:00:c1:a1:59:aa:40:96:45:6e:48:85:0b:a1:57:
db:d4:40:32:8d:87:51:29:9c:6d:66:aa:61:a9:f9:
56:2d:b7:9e:fb:68:94:a6:84:a3:02:5e:c0:a5:e2:
54:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A9:F8:2A:81:CF:67:71:E5:2D:BD:B5:8D:7D:16:39:48:97:BF:57
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/U6n4KoHPZ3HlLb21jX0WOUiXv1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.151.0/24
45.92.28.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:b1:0c:4b:90:9f:45:4b:0d:c9:f3:fd:06:85:86:49:f4:88:
4f:7b:39:60:39:16:09:f9:43:50:a3:db:a0:e9:f1:7f:0b:66:
d3:99:df:4f:48:51:3b:2c:c8:2d:71:db:51:d4:ec:72:be:fd:
c4:d7:94:d4:d7:6d:81:70:7a:45:9d:91:6b:82:d2:83:5a:d6:
6c:3c:65:32:9d:61:22:a6:56:ab:07:e1:10:da:ba:0a:49:dc:
90:b9:74:68:ec:72:9d:0e:dc:c4:67:d4:ab:82:03:b0:83:f2:
b4:58:8c:86:af:0d:a5:a2:51:ae:de:57:c8:4b:16:42:bc:52:
88:94:ab:40:58:9f:96:c9:ca:61:b5:0e:9b:6e:76:2f:cd:f8:
f5:00:24:32:f8:f0:f4:e4:39:d5:0a:6a:ee:88:17:ce:25:a0:
6f:a3:92:3c:80:13:90:c0:66:13:b7:8b:24:a4:1e:3a:56:d0:
af:78:e0:7e:3a:db:9a:e7:8f:1f:3a:35:d2:94:97:40:94:f3:
f6:4c:32:3c:b4:9c:dd:2f:82:b7:4d:30:74:06:2c:8c:48:ec:
13:a5:43:76:81:17:b3:87:05:dd:a0:72:b9:17:64:d5:a4:61:
ac:20:a9:56:a8:c1:65:a3:cd:8f:50:ee:44:86:a3:b7:43:1f:
f5:8e:ca:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:02 2024 by rpki-client on console-ams.rpki-client.org