Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Uevzv-YG4EUkwFrKOXPgoCF20AQ.roa
File: Uevzv-YG4EUkwFrKOXPgoCF20AQ.roa (raw, json)
Hash identifier: z03j6tVo3sh/gn6rQuajbJH3jVRyCvC/sWTcZb77koQ=
Subject key identifier: 51:EB:F3:BF:E6:06:E0:45:24:C0:5A:CA:39:73:E0:A0:21:76:D0:04
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186EEF4D328F271C414E3E71A5285203E17
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Uevzv-YG4EUkwFrKOXPgoCF20AQ.roa
Signing time: Fri 17 Mar 2023 09:44:27 +0000
ROA not before: Fri 17 Mar 2023 09:44:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39251
IP address blocks: 45.85.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:f4:d3:28:f2:71:c4:14:e3:e7:1a:52:85:20:3e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 17 09:44:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51ebf3bfe606e04524c05aca3973e0a02176d004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:f5:c4:b3:fc:3a:ff:dc:de:8b:95:ab:95:
90:7c:b6:e8:fe:26:7e:3f:f6:c1:53:c7:03:b7:10:
97:9c:f9:4e:ed:d4:84:3c:22:a6:99:d3:e1:c6:1b:
b5:4d:4b:c4:4a:0a:c3:c3:1d:0e:20:61:8d:9a:44:
d3:f6:53:70:e3:42:50:fc:1f:92:e5:d3:83:02:46:
08:ce:0c:d9:27:8f:a8:a4:50:a5:1c:c6:fd:c4:2c:
7c:e5:67:2d:96:e5:e1:75:da:9c:07:58:f5:94:41:
59:97:b5:99:53:dd:38:68:fc:dd:46:1c:ee:ac:a5:
28:d4:f3:59:eb:27:b3:de:88:cf:7e:59:00:1b:7e:
cb:54:99:27:bd:3b:50:e1:e9:60:a0:ea:f0:56:54:
f8:6e:5b:04:88:e6:8d:a8:08:b5:9c:48:1e:d5:da:
71:bb:c6:19:aa:43:6a:44:e0:ec:57:9a:c1:2d:00:
4b:d2:12:c2:85:31:36:c7:1a:e1:16:bd:01:d3:7f:
4a:a2:1e:23:b9:8e:26:45:1b:b9:c5:36:22:76:ca:
da:ab:7a:23:a3:43:7c:1a:bd:fe:9b:f8:e6:a6:1b:
72:ff:3c:51:18:41:93:7b:1d:d2:a9:4f:b9:b2:f6:
97:24:18:96:87:c5:28:12:d7:78:cc:20:6b:a3:b8:
a4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EB:F3:BF:E6:06:E0:45:24:C0:5A:CA:39:73:E0:A0:21:76:D0:04
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Uevzv-YG4EUkwFrKOXPgoCF20AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.106.0/24
Signature Algorithm: sha256WithRSAEncryption
58:34:7c:ba:db:77:81:aa:09:58:7d:3d:23:13:11:4d:85:e0:
7f:3f:1e:63:b4:67:e0:0e:ba:20:1b:23:4c:f3:b6:52:b1:6b:
25:85:d1:a4:39:0c:8c:1c:42:25:9a:f9:bf:ea:3a:c3:d7:1b:
5e:c8:df:85:22:5f:3c:08:7d:01:43:d5:a0:aa:83:bb:1a:40:
70:04:a1:22:fc:cf:53:0b:bf:39:69:5a:7e:80:2a:b9:e7:2c:
bc:fa:ad:ab:9e:48:af:91:a2:dc:bc:ad:92:23:5a:a7:67:30:
31:46:6b:3b:b4:a9:25:04:70:8a:ae:44:b2:32:08:e2:ba:5e:
6b:ca:f2:f5:b1:77:a2:56:13:52:a9:d5:c9:c8:39:0c:8a:20:
f2:71:54:18:95:5d:af:00:2f:85:1a:a6:cc:1c:d9:c8:58:1a:
25:ab:95:61:8e:29:56:15:f4:62:23:08:dc:0a:28:55:fd:41:
4d:7e:e9:16:2b:b9:7f:83:6e:de:71:27:69:39:19:2c:7f:5a:
0b:e8:1c:80:1b:fa:b8:88:3a:9d:24:b8:c0:7c:60:fc:72:e7:
41:01:80:93:1e:ea:2d:11:d9:27:ce:63:ca:f7:d5:93:db:98:
3e:31:fd:70:9a:c7:c3:ac:2e:77:fe:02:27:c9:94:8d:c6:e4:
1a:4e:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:55 2023 by rpki-client on console-ams.rpki-client.org