Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/ujFq6v_qEmROMM_OwxwW1ljUyp8.roa
File: ujFq6v_qEmROMM_OwxwW1ljUyp8.roa (raw, json)
Hash identifier: 7wih1SIrH8gFh2yQ0ki33DJQU3WbayxcVPuP4ZtBLjU=
Subject key identifier: BA:31:6A:EA:FF:EA:12:64:4E:30:CF:CE:C3:1C:16:D6:58:D4:CA:9F
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 018F95118550C7DC25D3CBC0F6B33F31C2AE
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/ujFq6v_qEmROMM_OwxwW1ljUyp8.roa
Signing time: Mon 20 May 2024 08:15:04 +0000
ROA not before: Mon 20 May 2024 08:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 45.158.126.0/24 maxlen: 24
45.158.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 08:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:11:85:50:c7:dc:25:d3:cb:c0:f6:b3:3f:31:c2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: May 20 08:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba316aeaffea12644e30cfcec31c16d658d4ca9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:fa:61:3f:11:7c:86:c7:eb:dc:e2:12:25:
ce:01:70:ef:45:6a:01:ce:70:a3:22:c7:a0:c1:0d:
42:98:64:93:f4:87:c2:10:aa:51:ed:bf:8b:77:7f:
cf:eb:3a:04:bf:fd:ed:ee:a2:20:b7:a5:99:b8:d5:
18:48:34:de:c1:00:ab:96:22:f4:8a:72:40:d2:bb:
32:7e:78:b4:32:86:91:28:ba:78:3f:d9:01:44:1c:
37:22:26:da:1c:5c:ea:3e:cf:3e:49:84:f2:62:8e:
5d:8e:c4:92:95:c9:57:09:0f:34:e2:7d:cf:21:1c:
52:b4:dd:a5:4a:de:48:2f:64:a8:c5:25:bc:92:bd:
1c:e2:48:21:fb:db:e5:71:d4:36:8b:11:91:38:23:
40:7f:98:0b:87:f1:59:b7:7d:ec:d8:06:d6:fd:23:
63:4f:1a:e5:52:e5:ec:0d:7e:33:3a:63:81:bb:43:
62:6f:04:6a:db:b3:33:a3:8b:ea:57:4a:65:4f:b9:
46:45:83:f7:a2:b2:d1:1b:36:ca:8d:d7:b0:50:01:
f3:28:82:a5:a2:11:53:c7:ed:36:bf:50:08:65:b1:
eb:6e:d8:a2:af:7c:3e:39:4c:c2:42:af:a8:eb:22:
39:0a:0a:41:d2:34:17:df:63:96:10:eb:42:d0:71:
81:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:31:6A:EA:FF:EA:12:64:4E:30:CF:CE:C3:1C:16:D6:58:D4:CA:9F
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/ujFq6v_qEmROMM_OwxwW1ljUyp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.126.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:5b:84:a1:cf:ac:b5:f5:1c:3f:c8:df:06:d5:e2:dc:67:eb:
72:ef:c9:da:d3:e8:5a:2f:fd:47:2e:6f:8e:81:8b:30:5f:81:
4a:4a:17:73:8f:b3:32:fd:68:cd:f1:df:56:b6:d1:dc:4b:ba:
d2:07:83:01:03:71:05:6b:9d:b2:19:3e:99:e1:28:9d:50:e5:
2c:17:11:86:de:a8:fe:b0:77:16:2d:18:68:13:90:6a:b5:56:
34:05:57:23:59:18:0f:f2:f7:8a:33:a4:30:45:d0:cd:c4:14:
24:7d:40:47:73:6e:19:c0:2a:5f:f9:d7:20:bd:fd:fd:62:a8:
dc:23:a9:03:39:e0:da:bb:f3:63:18:a9:f0:b3:3a:4a:1f:61:
77:4f:5b:c5:a0:ff:f2:7e:b1:34:57:f5:c7:d9:85:e4:0b:b9:
85:9f:1f:f4:be:8a:fc:db:3e:d7:16:e8:88:c3:e1:15:d1:ce:
2d:ce:5e:d4:04:9c:46:5d:a1:9c:f9:57:e1:75:83:d5:6f:e9:
4e:f9:1d:cb:69:53:ce:a8:37:42:08:f0:43:b3:5a:6a:fa:3c:
0c:47:3b:f6:42:93:1e:73:f9:c6:33:5f:04:fe:7b:7d:bc:ad:
71:3d:6e:44:ef:17:a7:40:f8:27:a0:5a:a9:66:fb:42:fa:45:
bc:08:82:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 10:50:31 2024 by rpki-client on console-fra.rpki-client.org