Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/UXD316DVyHuZTk8N-HIR823cLls.roa
File: UXD316DVyHuZTk8N-HIR823cLls.roa (raw, json)
Hash identifier: gIA65nfaA1eeOHnRGA+bRDZTQGa3Cw530hjYwDrJuUs=
Subject key identifier: 51:70:F7:D7:A0:D5:C8:7B:99:4E:4F:0D:F8:72:11:F3:6D:DC:2E:5B
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018B88EAE0F6928A7F34E032DAE4C4677799
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/UXD316DVyHuZTk8N-HIR823cLls.roa
Signing time: Wed 01 Nov 2023 03:26:16 +0000
ROA not before: Wed 01 Nov 2023 03:26:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
45.150.52.0/24 maxlen: 24
212.115.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Nov 2023 21:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:88:ea:e0:f6:92:8a:7f:34:e0:32:da:e4:c4:67:77:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Nov 1 03:26:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5170f7d7a0d5c87b994e4f0df87211f36ddc2e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:f5:b7:74:5a:03:01:cb:0f:5b:c5:e2:b9:
e3:66:a7:29:18:69:ca:f0:77:2f:5d:55:36:e1:82:
2e:ca:75:c7:77:ed:81:58:64:3d:ed:e0:1f:17:36:
d8:19:7f:2b:5e:4e:1e:29:4f:2f:15:f2:7f:e8:59:
30:ca:38:f5:27:b4:aa:e1:78:e2:4c:09:04:ec:18:
79:83:1d:7f:47:1d:35:f2:6c:da:a3:e0:64:03:4d:
3b:c2:5f:6d:f5:e4:0d:a7:6d:8f:ec:50:7b:3a:97:
30:53:6c:b6:55:ab:f1:21:aa:fc:78:03:d3:a4:22:
9c:be:7d:b2:57:a3:e8:8c:17:c4:ca:23:40:e8:9d:
06:c4:e5:0d:fa:6b:f5:0a:b2:0d:73:70:1e:0e:6b:
f0:30:d1:6b:ec:ad:50:99:87:e1:c7:ee:67:79:8b:
b9:9b:40:bf:7c:6c:8c:b6:e6:74:23:4f:a4:57:f1:
29:09:a9:ff:04:8e:f6:df:13:a4:ba:80:1b:73:d3:
c7:38:51:7d:fe:9d:a9:fc:04:bf:d2:50:d9:7e:9b:
57:9e:0c:4f:23:32:a8:72:8f:54:2c:32:60:97:38:
d7:b5:1e:96:60:a9:a8:ba:52:51:65:6d:23:b4:ad:
d4:2f:5a:ef:64:1b:c6:68:4e:4f:9a:dc:e0:cb:4c:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:70:F7:D7:A0:D5:C8:7B:99:4E:4F:0D:F8:72:11:F3:6D:DC:2E:5B
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/UXD316DVyHuZTk8N-HIR823cLls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.52.0/24
45.150.55.0/24
212.115.126.0/23
Signature Algorithm: sha256WithRSAEncryption
22:7a:c5:11:a8:35:63:3a:02:dd:70:40:7d:5d:6d:ea:16:17:
be:4d:83:1a:56:bf:47:e5:66:85:02:8e:3f:dc:71:02:bc:0c:
14:f4:39:1b:9d:a2:67:15:65:dc:35:1c:82:97:eb:79:1d:27:
5d:74:e4:69:fc:54:33:87:b9:b5:88:45:01:66:9e:69:3b:e7:
0f:99:35:54:09:26:1a:4d:9b:3f:30:46:5e:db:dc:ec:cf:1b:
63:31:33:82:5b:78:30:2b:fe:35:d7:87:56:22:0e:de:59:ae:
ce:ef:46:4e:0a:23:e7:34:0f:f1:6d:c3:06:a3:53:5a:73:49:
93:1e:7b:d9:4a:25:3e:3e:b6:93:b6:db:be:9d:61:1f:60:bf:
1a:70:13:8d:ca:45:1f:8c:ea:ee:17:0a:fe:3a:07:d7:ef:c0:
1f:ac:81:4f:cf:44:63:11:a5:50:67:b5:dd:c8:26:3a:8e:7e:
66:45:87:73:5d:14:51:bf:b3:0a:68:00:b0:53:36:ac:bb:64:
2a:e4:e6:1b:98:db:ed:c8:a6:38:79:c9:dc:6e:39:07:ff:48:
2a:bb:69:1d:f2:90:be:b2:60:11:d6:d9:c8:9d:d8:96:9b:2f:
0d:0b:57:4b:62:1c:0d:e5:54:76:d1:35:aa:5b:b2:6e:72:4e:
f2:c6:bf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org