Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/UwrgsCEigfvLg8A-zBY5wDhDQKg.roa
File: UwrgsCEigfvLg8A-zBY5wDhDQKg.roa (raw, json)
Hash identifier: pS1sx7xOkcb5kCs4iSD77CiWoFJ+7FQhPYemIg9v/Jg=
Subject key identifier: 53:0A:E0:B0:21:22:81:FB:CB:83:C0:3E:CC:16:39:C0:38:43:40:A8
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018B47BD3FDD14B9A2C211631A9F64860286
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/UwrgsCEigfvLg8A-zBY5wDhDQKg.roa
Signing time: Thu 19 Oct 2023 11:41:06 +0000
ROA not before: Thu 19 Oct 2023 11:41:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.8.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:bd:3f:dd:14:b9:a2:c2:11:63:1a:9f:64:86:02:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 19 11:41:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=530ae0b0212281fbcb83c03ecc1639c0384340a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:54:9b:03:53:cc:62:3d:4b:af:2f:db:87:
90:76:a9:c0:7e:1b:05:52:88:4b:0e:2d:93:83:21:
0a:d7:d7:bb:ad:7e:50:b5:dc:4a:b6:66:32:88:6a:
97:3b:b0:07:1d:4d:16:cb:23:25:1f:13:6d:ca:a8:
3a:c0:7f:b4:e8:77:76:73:65:fc:63:ac:af:dc:7e:
c4:36:63:e0:c5:0a:7a:e2:ca:8b:31:f7:78:cc:f7:
ae:44:62:6e:16:e0:57:7f:a8:50:3a:4b:2e:02:a1:
96:bc:1d:bf:11:87:ef:c2:74:64:66:1c:03:4f:da:
68:06:c2:81:30:12:d1:1e:13:aa:72:68:94:07:42:
24:77:04:9a:78:b7:b0:56:45:a2:fc:f2:58:37:d6:
16:9d:10:a6:67:da:6f:38:8e:e7:66:1e:e5:84:6b:
7b:21:d8:a8:43:8b:98:6d:a8:d0:be:e3:a2:ab:b6:
93:8d:74:3d:40:03:3c:3f:eb:a7:8d:ae:2f:18:ff:
53:69:ab:05:4a:db:7e:15:97:10:ce:42:e4:01:03:
49:c0:2d:ae:f2:48:35:8d:c3:b8:4b:2d:b2:c7:a1:
0a:df:dd:be:12:d9:88:af:bd:74:1b:b0:8e:6d:5d:
f8:80:c6:60:45:fd:df:02:ad:ea:12:02:ff:ba:ce:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0A:E0:B0:21:22:81:FB:CB:83:C0:3E:CC:16:39:C0:38:43:40:A8
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/UwrgsCEigfvLg8A-zBY5wDhDQKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.187.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ac:85:45:4f:f2:27:6a:77:31:47:1c:dd:bd:b2:d0:01:aa:
b2:85:2c:a1:e0:d1:09:44:70:a3:55:34:9c:1c:60:33:3c:11:
ab:a8:6f:d3:51:17:d8:71:d3:fd:4d:91:63:5a:89:f8:15:33:
79:c3:78:61:93:02:42:ce:ea:bc:2f:1e:ea:eb:4a:e2:8e:bd:
39:cd:05:48:83:3e:13:b7:5f:9c:b9:ee:17:4e:be:59:dc:16:
34:4d:10:ab:80:50:80:97:56:a9:cc:f0:cb:b7:01:16:74:04:
db:37:83:e2:0f:f6:04:78:0f:23:fa:8d:fe:81:3f:88:fe:4c:
26:2d:f8:b9:16:65:c8:0f:0f:0b:c5:bb:1b:ad:d5:64:13:ed:
4d:b8:8e:ad:c4:a2:eb:d2:f1:15:a2:75:9e:49:3e:08:14:a7:
a8:fd:bc:1b:9b:d9:a0:92:d9:8f:54:dc:c7:ba:1e:e8:a0:41:
75:9c:c7:20:f7:a0:48:51:b3:ad:b2:26:5b:d5:86:ca:16:a7:
d6:0d:c9:ec:d4:56:e9:0d:6f:fc:ca:01:20:b3:0e:ee:42:9c:
f8:d8:07:8b:bc:c2:46:b8:3e:0c:c2:0e:2a:f9:f6:33:d6:fa:
2c:a9:ce:e4:41:fb:8d:f2:74:bd:f6:14:dc:d6:bf:f5:cb:b8:
86:07:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 19:38:22 2023 by rpki-client on console-ams.rpki-client.org