Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/UiA6DZ0-fhS9R8nNRApk8vpa8oA.roa
File: UiA6DZ0-fhS9R8nNRApk8vpa8oA.roa (raw, json)
Hash identifier: 9LKjIt9Zv9el/r51OFfmP7U4Pb/b9nkICzWtp7zPIlA=
Subject key identifier: 52:20:3A:0D:9D:3E:7E:14:BD:47:C9:CD:44:0A:64:F2:FA:5A:F2:80
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C7855944C320FB8907A7E9A2E799513
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/UiA6DZ0-fhS9R8nNRApk8vpa8oA.roa
Signing time: Sun 01 Jan 2023 08:35:03 +0000
ROA not before: Sun 01 Jan 2023 08:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 45.132.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:55:94:4c:32:0f:b8:90:7a:7e:9a:2e:79:95:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52203a0d9d3e7e14bd47c9cd440a64f2fa5af280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:ac:98:c2:7a:aa:49:69:a7:ba:9f:0b:e2:
86:fc:c4:b6:9d:1b:d6:02:12:7f:8f:ff:42:8b:19:
1e:cf:10:c1:d8:6a:1d:0d:5a:ca:a7:ec:ec:2c:eb:
9b:e6:a5:09:e6:1c:53:b8:fd:85:f2:b4:18:e5:2f:
25:fa:a4:b3:6b:70:91:31:d3:84:72:e3:38:3c:3e:
f5:c3:f9:0b:33:82:ec:04:8d:0a:c6:d0:26:84:90:
66:b3:8f:4f:26:a8:34:c8:4b:5e:01:55:d4:4c:ef:
c3:99:9a:cc:50:0d:59:17:29:41:37:1a:6d:47:f2:
83:8e:0d:06:7b:14:27:8c:ab:d0:10:c2:da:ab:db:
1f:b3:0f:88:94:23:6b:5e:d5:dd:e0:ac:66:e4:c9:
90:4f:c9:b3:d5:50:16:66:51:be:07:12:07:5b:49:
49:0a:ec:25:f0:80:86:b0:75:40:db:ac:77:86:3c:
f2:13:80:c0:8f:40:16:64:bb:9d:4e:e5:fe:61:e6:
4f:0a:8e:cd:bc:34:6c:85:3d:cb:02:a2:45:bf:49:
7f:10:86:35:4c:0c:a3:89:1a:c1:9b:7e:36:81:87:
71:de:05:30:c4:ea:b3:76:2d:0c:43:7d:f0:da:bf:
06:00:b3:a4:f7:92:45:c2:4c:60:0b:c3:09:79:74:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:20:3A:0D:9D:3E:7E:14:BD:47:C9:CD:44:0A:64:F2:FA:5A:F2:80
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/UiA6DZ0-fhS9R8nNRApk8vpa8oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:98:a6:4d:67:98:83:89:9e:7b:c7:90:bd:25:dc:a1:ea:bb:
83:d2:9d:61:1b:b8:81:c2:85:7e:fc:e5:cb:b7:ce:16:dd:68:
37:68:9e:2f:22:f4:69:ce:8f:f9:47:b1:ef:27:de:1c:bb:28:
66:5b:3c:12:83:96:94:10:3a:28:c4:45:af:5f:25:5e:e3:66:
e9:45:ff:79:95:6a:bd:99:75:e5:07:8f:61:30:b2:36:ea:72:
08:b9:fe:f2:c2:36:0f:f6:1b:f9:a8:46:fa:c6:df:f8:11:99:
f1:69:ee:1d:5f:88:36:a8:96:4c:5e:1e:1d:81:de:5d:8e:22:
a2:8e:ff:7e:11:db:6a:23:d2:06:4b:85:db:50:03:0a:51:df:
bc:66:5c:81:ea:6a:84:bc:f1:55:55:23:5e:9f:01:72:9b:33:
ce:eb:65:3c:c6:c0:7f:eb:57:76:a2:3c:b6:62:15:c9:ae:41:
8d:85:c3:ec:61:e5:88:79:c2:f5:0d:0d:dc:23:0b:e0:16:b4:
78:62:0f:cd:34:d9:f6:a0:5c:68:55:87:32:24:84:80:07:0f:
61:27:87:50:a7:93:15:5e:c4:e4:6f:2a:1c:97:c1:37:1d:85:
77:e1:c1:c9:df:25:33:f9:aa:ff:97:7a:57:5a:86:09:99:83:
68:61:ef:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org