Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/uPXKQdBjTGth5Zi6hgRRXTGc6fc.roa
File: uPXKQdBjTGth5Zi6hgRRXTGc6fc.roa (raw, json)
Hash identifier: CfduoqiJqpwp7cweU7V9hq6p3Qq2ZaHiJi1KIgcZA7g=
Subject key identifier: B8:F5:CA:41:D0:63:4C:6B:61:E5:98:BA:86:04:51:5D:31:9C:E9:F7
Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial: 018CF287E3B7549D3FC45A8196167228A6E1
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/uPXKQdBjTGth5Zi6hgRRXTGc6fc.roa
Signing time: Wed 10 Jan 2024 08:40:40 +0000
ROA not before: Wed 10 Jan 2024 08:40:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 45.157.148.0/24 maxlen: 24
45.157.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:87:e3:b7:54:9d:3f:c4:5a:81:96:16:72:28:a6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Validity
Not Before: Jan 10 08:40:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8f5ca41d0634c6b61e598ba8604515d319ce9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:23:65:9c:a5:45:32:34:61:aa:47:81:5c:
d2:05:ee:48:e8:66:41:34:41:2c:c0:44:69:75:e0:
71:e6:b9:04:a2:25:cd:3e:99:96:d1:ac:da:fb:f9:
02:15:48:e1:9a:3b:70:59:e3:ae:e2:08:06:e9:35:
89:c4:90:f9:01:fa:c4:5e:82:f1:8f:7f:a9:03:fa:
9e:51:ff:a7:7a:ce:03:01:20:50:17:ba:cb:2e:1b:
54:4a:80:f0:5e:f2:f5:f5:45:ee:41:4e:d7:82:9d:
7c:28:cb:35:5d:62:0e:78:f4:6e:fa:22:cd:de:4d:
f6:31:ee:dd:44:f3:1f:ba:74:90:a9:07:a3:96:f8:
c2:c9:02:dd:4f:dd:f7:37:78:d5:53:c0:1a:71:fa:
8f:a5:1d:0c:b6:80:95:99:e8:35:9b:6e:5a:51:3c:
d5:d4:70:0e:fa:68:49:92:96:fd:09:70:ff:65:db:
3c:e3:fe:e3:1f:82:43:14:84:af:86:cb:bb:90:5e:
da:13:fa:a3:bc:9f:be:89:c7:41:fc:75:4a:13:e0:
f9:9a:8a:3c:db:06:6e:76:b1:9e:b5:b4:65:32:8a:
4c:03:60:bc:22:70:b5:f1:89:d5:cf:1e:54:e9:13:
3a:ae:57:1e:30:39:5c:23:b4:b4:7a:4f:5a:46:7a:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F5:CA:41:D0:63:4C:6B:61:E5:98:BA:86:04:51:5D:31:9C:E9:F7
X509v3 Authority Key Identifier:
keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/uPXKQdBjTGth5Zi6hgRRXTGc6fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.148.0/23
Signature Algorithm: sha256WithRSAEncryption
66:18:42:98:91:cc:e4:0b:66:f8:7c:ef:54:5d:34:ae:41:0e:
82:e5:07:05:58:e0:35:81:d3:18:bc:0e:bd:11:35:50:31:61:
85:78:94:8d:09:a7:c1:a3:07:80:a7:93:e4:2f:e4:86:f1:cf:
24:75:cb:25:11:bd:98:ff:3b:a7:02:f4:fd:13:a2:e9:36:b1:
77:5b:3c:56:1e:1f:f5:28:4f:53:db:ec:87:26:68:f4:b1:c1:
95:6e:f2:1c:a3:57:22:49:fc:d2:1c:be:51:93:f2:71:41:a6:
cb:f7:b4:87:ee:8b:c8:a1:9c:65:b8:37:58:51:e5:4d:e4:5a:
8f:99:0f:5e:3c:2e:4f:0e:07:64:4c:44:5c:d5:b1:9d:7c:48:
6b:20:0b:16:49:f0:ee:7e:70:04:be:67:17:9e:7f:da:21:6a:
c6:f1:ba:f7:a6:27:9a:0f:07:94:eb:be:9c:ae:fe:d6:32:28:
66:eb:08:ae:33:4d:39:19:62:57:1d:2e:29:1d:7b:ca:ff:1d:
17:8d:f5:bc:ee:86:a9:f7:ad:74:5c:62:78:7c:0a:4b:69:f6:
8e:cf:ad:36:cb:b8:46:9a:28:f2:19:b6:4c:89:f2:9a:9c:7e:
e8:49:d4:c5:39:3c:88:21:b0:1a:fc:83:9a:1d:be:9f:b3:c4:
b0:fa:b1:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzyh+O3VJ0/xFqBlhZyKKbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGU5Zjc1YzczMjZmNzY1Yzg5NjZjMmVkYzAwYTk4MmE1
ZWE3ZjAwHhcNMjQwMTEwMDg0MDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGY1Y2E0MWQwNjM0YzZiNjFlNTk4YmE4NjA0NTE1ZDMxOWNlOWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm0jZZylRTI0YapHgVzSBe5I6GZB
NEEswERpdeBx5rkEoiXNPpmW0aza+/kCFUjhmjtwWeOu4ggG6TWJxJD5AfrEXoLx
j3+pA/qeUf+nes4DASBQF7rLLhtUSoDwXvL19UXuQU7Xgp18KMs1XWIOePRu+iLN
3k32Me7dRPMfunSQqQejlvjCyQLdT933N3jVU8AacfqPpR0MtoCVmeg1m25aUTzV
1HAO+mhJkpb9CXD/Zds84/7jH4JDFISvhsu7kF7aE/qjvJ++icdB/HVKE+D5moo8
2wZudrGetbRlMopMA2C8InC18YnVzx5U6RM6rlceMDlcI7S0ek9aRnrCjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLj1ykHQY0xrYeWYuoYEUV0xnOn3MB8GA1UdIwQY
MBaAFCNOn3XHMm92XIlmwu3ACpgqXqfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82MzVhMGQtOTIxZi00NzExLWI3ZDQt
NzdkZWUyZDc5YWU0LzEvdVBYS1FkQmpUR3RoNVppNmhnUlJYVEdjNmZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82MzVhMGQtOTIxZi00NzExLWI3ZDQtNzdkZWUyZDc5YWU0
LzEvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZ2UMA0G
CSqGSIb3DQEBCwUAA4IBAQBmGEKYkczkC2b4fO9UXTSuQQ6C5QcFWOA1gdMYvA69
ETVQMWGFeJSNCafBoweAp5PkL+SG8c8kdcslEb2Y/zunAvT9E6LpNrF3WzxWHh/1
KE9T2+yHJmj0scGVbvIco1ciSfzSHL5Rk/JxQabL97SH7ovIoZxluDdYUeVN5FqP
mQ9ePC5PDgdkTERc1bGdfEhrIAsWSfDufnAEvmcXnn/aIWrG8br3pieaDweU676c
rv7WMihm6wiuM005GWJXHS4pHXvK/x0XjfW87oap9610XGJ4fApLafaOz602y7hG
mijyGbZMifKanH7oSdTFOTyIIbAa/IOaHb6fs8Sw+rHx
-----END CERTIFICATE-----
Generated at Wed Jan 10 19:48:46 2024 by rpki-client on console-ams.rpki-client.org