Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/ULzd664wQ6vwFSlfLGMYvp80HGM.roa
File: ULzd664wQ6vwFSlfLGMYvp80HGM.roa (raw, json)
Hash identifier: Wgljobxvk2NxxiVJaqATtUGbDItVrP8aFX5QGHxBFBM=
Subject key identifier: 50:BC:DD:EB:AE:30:43:AB:F0:15:29:5F:2C:63:18:BE:9F:34:1C:63
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 0186C124CC0DC42095F84E753BB52913BFB0
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/ULzd664wQ6vwFSlfLGMYvp80HGM.roa
Signing time: Wed 08 Mar 2023 12:14:19 +0000
ROA not before: Wed 08 Mar 2023 12:14:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1828
IP address blocks: 45.133.80.0/22 maxlen: 22
45.133.80.0/24 maxlen: 24
45.133.81.0/24 maxlen: 24
185.92.123.0/24 maxlen: 24
185.92.120.0/24 maxlen: 24
185.92.121.0/24 maxlen: 24
185.92.122.0/24 maxlen: 24
45.15.192.0/24 maxlen: 24
45.15.192.0/22 maxlen: 22
45.15.193.0/24 maxlen: 24
45.15.194.0/24 maxlen: 24
45.15.195.0/24 maxlen: 24
2a05:f240::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:24:cc:0d:c4:20:95:f8:4e:75:3b:b5:29:13:bf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Mar 8 12:14:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50bcddebae3043abf015295f2c6318be9f341c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:75:e4:2a:cf:d2:64:82:ed:9a:19:05:95:ac:
89:dc:13:6d:a8:33:34:42:46:eb:a7:12:39:62:e8:
bc:2f:cd:f2:7f:b2:ab:45:73:e1:83:e5:eb:d5:9e:
d8:3c:3b:91:bb:43:90:bd:7e:cf:1c:ec:25:d1:92:
00:a9:15:45:9b:b4:3f:e1:1c:7b:f4:e8:0f:8b:fa:
6e:38:26:27:87:54:8b:f1:1b:a7:33:8c:40:13:7c:
c8:e8:9c:b1:75:10:49:ab:f1:9a:0d:ed:2a:45:3b:
e3:4b:e8:4a:af:d5:d4:91:ba:e8:5a:ac:f7:99:a5:
ef:f6:11:2d:d8:86:6d:56:c5:13:13:6b:d1:bf:3e:
cd:e6:a0:5d:d1:bd:fe:ee:40:a9:d2:7d:2a:eb:c4:
8d:cb:86:bf:a2:7f:ff:dc:eb:b3:f7:26:3a:1d:c4:
6a:19:5f:bd:0e:e3:5a:da:49:da:e6:cf:28:04:10:
19:65:18:40:f9:64:f0:48:70:4c:e9:d1:c7:90:98:
2b:6b:ac:58:36:f8:94:ab:87:23:b9:3d:29:40:88:
cf:50:4b:1f:3f:c7:9f:d2:7d:9b:a9:59:c5:f6:ec:
2b:47:7a:30:ae:f5:a3:a2:e9:e3:c2:1b:9b:0b:5d:
25:89:d0:c1:db:fa:33:88:ce:83:c6:eb:a6:97:eb:
8e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BC:DD:EB:AE:30:43:AB:F0:15:29:5F:2C:63:18:BE:9F:34:1C:63
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/ULzd664wQ6vwFSlfLGMYvp80HGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.192.0/22
45.133.80.0/22
185.92.120.0/22
IPv6:
2a05:f240::/29
Signature Algorithm: sha256WithRSAEncryption
2c:15:3b:c9:b2:b5:4a:78:a5:47:5a:cc:3e:10:9f:01:59:48:
0c:48:60:c5:5a:01:00:f3:39:0d:6e:3d:98:dc:9b:68:5a:29:
eb:35:41:cc:f8:18:c4:a1:3c:63:57:03:8b:cc:02:ed:03:db:
00:d5:02:80:41:60:ac:87:b5:3f:1b:fc:73:83:fe:ba:42:38:
6f:14:c3:8b:40:3d:2e:02:01:4e:c9:83:9d:8b:7f:df:55:83:
9b:10:65:54:2d:f3:25:8a:7f:5d:0a:11:8e:49:e2:0c:8b:bb:
0c:8c:c6:c2:2c:78:66:82:0b:7f:1a:f7:8a:ce:9d:2f:d9:06:
7b:0a:7f:46:f1:b3:29:16:d2:3b:d9:89:20:2a:58:e2:00:52:
10:e6:bb:51:ec:1f:23:54:95:6f:b3:8f:c0:59:48:9e:47:02:
ed:cd:f7:6c:7c:04:cc:d5:21:be:50:42:05:b2:b1:a8:f0:80:
2b:fc:f2:cb:29:c7:ed:06:1f:52:ab:7c:80:77:a5:d2:41:b7:
1d:8b:95:83:e7:bd:63:5d:b9:2a:03:b5:e9:6d:f0:5d:88:3a:
25:eb:60:14:df:58:be:d8:ac:0a:b0:87:86:e6:02:c6:38:d9:
56:0b:81:24:1f:c4:9e:56:67:7b:b8:9f:8c:83:40:7c:3f:40:
3c:7c:28:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:34 2023 by rpki-client on console-ams.rpki-client.org