Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/ujkSIAanPYG9hTuNPPOioQv65wQ.roa
File: ujkSIAanPYG9hTuNPPOioQv65wQ.roa (raw, json)
Hash identifier: FURkxzdo29BOq/1+UarO0tVcqqt5LOxa9/BFoD/oKOw=
Subject key identifier: BA:39:12:20:06:A7:3D:81:BD:85:3B:8D:3C:F3:A2:A1:0B:FA:E7:04
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 018CC72752492884D1CBAA7776E65F3DAC80
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/ujkSIAanPYG9hTuNPPOioQv65wQ.roa
Signing time: Mon 01 Jan 2024 22:31:32 +0000
ROA not before: Mon 01 Jan 2024 22:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 45.81.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jan 2024 03:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:52:49:28:84:d1:cb:aa:77:76:e6:5f:3d:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba39122006a73d81bd853b8d3cf3a2a10bfae704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:32:1d:16:60:a8:a3:e4:d5:2e:10:e1:56:
e9:c5:55:a7:ce:4e:ae:c2:ae:44:8e:85:29:03:7c:
0a:a4:5c:95:ae:f3:96:6a:2f:4d:ed:85:99:29:c1:
0a:5a:b6:f9:cf:c0:aa:da:90:1a:5f:12:15:ec:7f:
55:c5:75:e2:91:50:bf:c7:1d:e7:e0:50:b2:c2:0d:
3a:11:6c:db:67:7d:c6:02:04:85:fe:d7:5f:52:06:
4a:14:a1:b5:aa:7f:d3:c0:32:27:6a:98:3a:a0:ef:
62:4c:42:86:27:76:e4:7e:ca:b0:7c:8b:ab:76:c9:
2c:25:0f:14:c0:88:d6:76:50:53:98:75:7d:47:a7:
91:3f:43:93:34:0d:f9:f9:eb:b4:e3:22:1d:71:df:
3f:da:bc:13:80:8c:8d:34:c5:7b:1d:42:36:0a:56:
4d:af:56:60:67:cd:e4:e6:85:bd:0a:a5:75:dc:f3:
57:9b:44:47:d9:6c:d2:ba:df:81:14:76:10:ab:89:
d9:87:e5:1e:00:bc:20:ef:42:87:44:f3:99:b0:9f:
38:e0:b1:ec:10:b6:57:7b:4f:83:8f:d1:55:f1:6b:
9d:08:11:62:d0:02:d9:44:40:0a:07:48:09:40:32:
b8:74:1d:a1:ad:47:19:cb:0c:89:d0:10:23:f4:16:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:39:12:20:06:A7:3D:81:BD:85:3B:8D:3C:F3:A2:A1:0B:FA:E7:04
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/ujkSIAanPYG9hTuNPPOioQv65wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.151.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:29:28:c8:74:71:8c:32:fd:c6:5e:17:7d:0a:26:c0:ad:22:
d4:9b:a9:1c:9a:9c:4e:a6:31:f6:7e:b0:08:df:14:38:99:bd:
75:51:47:ec:64:5b:cb:20:68:5a:d2:f1:47:d2:08:08:a2:19:
4c:06:6b:7c:0d:a2:7b:c0:fd:82:a2:94:8b:cf:cd:3d:0c:0d:
5b:65:0f:97:90:49:74:d7:58:1e:7b:96:5c:ed:40:a1:55:bb:
48:ef:37:7d:86:f8:db:43:59:6f:65:7a:be:d6:5f:13:bf:32:
02:f9:cc:1d:2b:de:3c:73:97:1f:de:8d:91:a4:ef:2c:57:27:
0f:bc:ed:5a:6d:1f:72:0b:96:44:db:86:64:fd:63:5f:80:b9:
fc:53:6e:95:13:f4:69:88:c7:dc:cb:08:9b:c3:a8:66:79:7b:
55:c7:3a:02:0f:ee:a8:1d:08:93:bf:18:67:9d:1e:b1:4b:07:
8d:c6:ac:7a:1e:04:32:e3:dd:4f:06:0a:53:25:59:00:9a:19:
6e:f6:1f:14:a8:94:fc:93:cd:3f:85:d0:15:a2:11:87:99:9b:
11:5c:94:b1:36:76:ee:c9:f8:fb:3a:11:b9:3a:61:aa:35:6a:
a5:0e:f0:85:5d:93:e3:8f:c6:01:83:5f:28:50:df:67:3e:14:
65:d9:9b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org