Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/8-ujxaLOYBIIHhe4ojlHMprKe88.roa
File: 8-ujxaLOYBIIHhe4ojlHMprKe88.roa (raw, json)
Hash identifier: 174ZYjqkrxkKwmA51RQHhO0VsO1l0QGZoxKOtpGK87A=
Subject key identifier: F3:EB:A3:C5:A2:CE:60:12:08:1E:17:B8:A2:39:47:32:9A:CA:7B:CF
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01895360A936C68914E5AE7D563439D0AB88
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/8-ujxaLOYBIIHhe4ojlHMprKe88.roa
Signing time: Fri 14 Jul 2023 07:49:50 +0000
ROA not before: Fri 14 Jul 2023 07:49:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
81.28.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 12:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:53:60:a9:36:c6:89:14:e5:ae:7d:56:34:39:d0:ab:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jul 14 07:49:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3eba3c5a2ce6012081e17b8a23947329aca7bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:50:30:69:05:0b:71:9f:3d:cb:de:cd:47:
6a:85:8d:a8:63:3e:cf:b7:f9:25:f1:d4:70:34:70:
3d:76:ba:74:99:bc:3c:3e:14:bb:82:8a:29:f7:94:
f0:38:eb:98:db:e1:dd:06:33:6a:ba:9d:5b:ae:63:
fa:db:fe:fb:97:d1:55:3e:b1:b0:ba:46:7a:7f:cc:
51:73:05:6b:0d:e1:a5:8f:b5:e7:70:a6:87:5c:b7:
96:0d:45:84:58:8d:96:fa:0b:e5:ae:ca:ef:22:16:
23:63:9a:76:bf:6f:4a:dd:53:d5:35:12:80:63:e1:
80:6b:7c:8a:5d:5e:45:2b:19:9d:c3:1f:5a:b0:11:
31:76:62:56:6f:a1:16:8c:74:1c:48:d7:52:43:7d:
84:e9:eb:42:e3:76:07:b9:fd:62:b4:a3:eb:71:b5:
3d:de:fe:3a:fa:bd:55:95:05:d8:93:5f:f7:7f:1b:
5e:8d:bb:fe:cf:57:b3:a8:8f:06:0c:2e:fc:78:35:
78:ba:fa:d8:ad:0f:a4:4d:f4:33:ac:42:21:d7:cc:
35:dd:d0:42:60:94:46:ea:62:28:d7:40:59:ce:af:
42:6f:9e:90:f2:2b:83:43:f0:5b:ae:28:d6:20:03:
8f:2e:97:a2:fc:54:1d:3e:be:d9:19:aa:c1:79:a1:
99:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EB:A3:C5:A2:CE:60:12:08:1E:17:B8:A2:39:47:32:9A:CA:7B:CF
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/8-ujxaLOYBIIHhe4ojlHMprKe88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
81.28.255.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:39:59:60:e5:f7:46:7b:87:0a:8b:03:1e:8c:e8:1c:4e:7c:
b3:7b:e5:8a:9f:11:0c:c6:ed:c3:d4:d0:94:47:1d:a1:42:d1:
28:5e:97:5b:92:6b:9c:b3:b5:d9:7e:3c:4b:a2:cc:05:88:26:
3d:9e:a5:f8:44:4a:10:d4:14:35:c4:a4:8c:32:7a:71:b9:aa:
18:89:bb:d2:24:16:7e:78:8e:92:ed:65:44:08:81:99:39:32:
29:5e:62:d5:32:bc:68:cb:01:ab:4e:57:25:f9:05:30:69:e9:
64:44:5f:ff:51:d1:1b:7f:20:48:d3:f2:63:c0:27:db:62:85:
fa:cd:56:63:8a:11:e5:55:54:2b:b8:39:22:ed:f4:4e:80:9b:
6b:9b:27:13:e7:c2:38:42:20:e5:78:37:56:73:70:eb:2d:ec:
ad:4c:9e:99:63:6e:c8:6c:9d:ba:a1:00:45:b6:6e:11:d2:44:
0d:62:d7:5c:1c:f3:13:3d:92:fc:f0:f9:34:8c:6b:89:be:7d:
5d:12:e7:5f:a5:a1:c8:b8:01:35:5d:6a:aa:dc:35:e6:bb:39:
dd:25:e0:ad:d8:29:d0:67:54:26:9a:4d:03:c1:a8:eb:fb:f3:
13:a7:02:41:14:ec:9d:4f:14:d4:2f:82:25:4a:fb:e6:3e:b2:
e6:b1:f9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org