Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/umEjkOD4xgTjDjVZQkcbECtxFDQ.roa
File: umEjkOD4xgTjDjVZQkcbECtxFDQ.roa (raw, json)
Hash identifier: Ayh7cScWMkf+K6dLTHF79Daq6p6WPkXtBlVPTWPusxY=
Subject key identifier: BA:61:23:90:E0:F8:C6:04:E3:0E:35:59:42:47:1B:10:2B:71:14:34
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 01856EC20401B30AC02184B77F5636FA0F03
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/umEjkOD4xgTjDjVZQkcbECtxFDQ.roa
Signing time: Sun 01 Jan 2023 19:14:46 +0000
ROA not before: Sun 01 Jan 2023 19:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47787
IP address blocks: 45.94.244.0/22 maxlen: 32
45.95.48.0/22 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:04:01:b3:0a:c0:21:84:b7:7f:56:36:fa:0f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jan 1 19:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba612390e0f8c604e30e355942471b102b711434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:52:e5:d2:fe:0e:a4:02:f1:15:d4:58:6e:2c:
68:46:95:12:fb:1e:87:3a:58:27:d4:0a:a9:85:3e:
7e:b8:2b:31:14:18:82:c0:b6:e9:79:10:3d:14:36:
5f:0f:ed:a7:15:98:bc:bd:6c:0c:eb:c5:60:4f:95:
b9:f5:66:00:d3:57:10:a2:21:7f:69:26:02:81:6d:
83:34:6d:12:e1:6f:5f:ed:71:56:00:96:58:1e:4d:
62:df:3f:74:eb:7a:c4:16:de:65:f9:5e:3e:ae:51:
76:36:17:4f:96:99:63:af:08:d2:f6:b3:f9:60:4b:
d4:5e:b8:0d:7d:d8:53:ab:6b:dc:eb:56:3d:3e:b1:
dc:1a:82:ad:75:69:c3:32:99:8c:a6:ab:ed:6c:9e:
ff:fb:f0:de:25:2d:09:f5:80:b1:e8:c7:73:ea:0c:
8e:79:a7:e4:6f:4d:c5:37:f9:9d:ed:df:0e:08:bd:
9e:a0:b9:7f:35:00:fd:ec:9a:10:b2:59:38:bc:44:
f8:30:7e:90:67:6f:3f:b5:10:53:4f:dd:e3:39:9a:
39:4b:35:f4:66:1d:8c:35:a8:00:f7:c9:96:72:dc:
96:41:c8:b6:61:5d:04:b4:dc:9d:42:9a:53:c4:a6:
19:41:3a:07:92:10:6d:92:e9:f5:ef:f8:2d:6e:65:
1a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:61:23:90:E0:F8:C6:04:E3:0E:35:59:42:47:1B:10:2B:71:14:34
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/umEjkOD4xgTjDjVZQkcbECtxFDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.244.0/22
45.95.48.0/22
Signature Algorithm: sha256WithRSAEncryption
33:34:bb:c3:97:3b:16:b3:fe:ca:04:b6:33:bc:56:0d:f2:55:
bd:5e:b3:04:d9:e0:5b:8e:ee:ff:69:d1:22:d2:c3:1a:46:3e:
73:5a:3d:40:e2:f7:89:de:76:6f:bc:99:79:d9:7c:c9:7b:b8:
bc:86:8f:c7:24:73:c0:a6:2e:95:83:75:76:df:b9:3e:d3:2a:
29:81:c4:cb:8a:c0:33:e3:92:79:18:d4:6b:80:71:1c:2d:09:
40:76:8c:a2:17:cd:0e:7a:a4:04:ec:cb:2f:c5:e7:c0:8b:95:
59:85:7c:36:ec:1a:4b:06:74:de:fc:54:7b:40:17:f4:e8:68:
53:02:b1:de:43:c0:53:f9:79:ff:53:38:79:dd:13:c0:c7:11:
9d:ee:8b:40:f3:2c:a5:f5:96:61:ca:e4:c4:19:f0:93:f1:1c:
0a:24:92:ea:ab:65:5e:df:cd:b4:fd:25:52:f0:91:9d:42:fa:
de:72:c9:7d:6c:8a:79:ec:15:d2:b1:8c:33:1f:9c:a8:1a:63:
1d:d5:5f:eb:fb:5e:e0:91:ba:7e:1a:75:41:fb:bc:42:c2:f5:
e3:b1:5d:6a:a2:36:0b:23:8e:8f:a2:78:65:03:3a:93:9d:52:
d6:07:f7:19:63:72:ee:13:26:13:0a:a3:35:99:ce:3f:bd:aa:
6d:ca:1c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:24 2024 by rpki-client on console-ams.rpki-client.org