Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UtZuCbuKi5re09i41A0MIK1ktVc.roa
File: UtZuCbuKi5re09i41A0MIK1ktVc.roa (raw, json)
Hash identifier: lsb3bPimKvuhvI1xAhha5Dhl9TZzpaQaeBxBSKgnKck=
Subject key identifier: 52:D6:6E:09:BB:8A:8B:9A:DE:D3:D8:B8:D4:0D:0C:20:AD:64:B5:57
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01857102FF5CB88AECB09750CD969A2B1A16
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UtZuCbuKi5re09i41A0MIK1ktVc.roa
Signing time: Mon 02 Jan 2023 05:44:59 +0000
ROA not before: Mon 02 Jan 2023 05:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14315
IP address blocks: 45.80.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:ff:5c:b8:8a:ec:b0:97:50:cd:96:9a:2b:1a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52d66e09bb8a8b9aded3d8b8d40d0c20ad64b557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9f:07:bf:84:0f:3a:bd:76:a5:95:03:6c:d5:
0b:01:04:9f:71:7d:18:0b:c8:8c:49:1f:ab:99:e6:
41:1f:f9:37:bd:d7:6b:83:4e:97:33:dd:ca:59:2c:
33:f6:2e:9a:9a:6a:a8:f2:ea:18:b1:e1:7e:7b:3f:
17:71:2b:d1:25:c8:b1:03:ec:14:49:51:ff:cf:fe:
41:96:8d:95:cb:82:ba:21:6f:17:a4:f5:05:45:14:
1a:01:f4:66:19:68:0b:6f:ac:04:d8:24:53:d4:13:
27:62:56:32:ec:c8:3b:32:21:1b:5e:bc:b1:55:a5:
99:aa:3a:d3:15:10:b4:49:b8:5d:21:26:05:64:97:
eb:de:2f:43:0a:3d:f7:b3:59:92:54:23:34:ce:a4:
19:74:bc:79:47:64:fe:a3:8c:6f:20:e0:82:7c:8d:
6c:b9:d9:85:b1:78:84:64:54:1e:70:9d:50:bb:87:
80:28:51:31:c2:7b:a3:ab:6e:cb:0b:57:f4:fc:02:
60:be:d8:44:6a:e5:42:66:4f:05:7b:49:ea:82:d9:
b5:f8:43:cc:c7:12:0f:61:80:35:27:88:fc:2e:62:
c1:33:cf:33:c8:fc:9c:d7:f7:5f:9b:e7:c9:2a:66:
5d:77:ee:e8:66:78:ec:08:e8:4f:3b:4b:af:77:75:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D6:6E:09:BB:8A:8B:9A:DE:D3:D8:B8:D4:0D:0C:20:AD:64:B5:57
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UtZuCbuKi5re09i41A0MIK1ktVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.158.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4d:5a:3c:eb:37:02:e4:b2:0f:f4:74:55:a7:c3:03:3e:d4:
f7:3e:3f:cb:5a:a7:38:12:64:01:e0:99:46:ff:a0:bc:01:f5:
eb:6c:a2:bb:9a:78:9a:28:7f:1f:27:f5:73:9d:0b:9a:a9:51:
d1:8a:20:3d:71:e4:a2:8c:69:9c:c3:71:f0:dc:83:50:86:8c:
d4:d2:cf:d5:e4:91:56:c9:d6:84:be:dc:fe:ef:0a:d7:59:42:
3d:97:7c:34:7b:d7:7f:46:c3:e1:3f:45:c7:e0:95:40:86:fc:
06:b9:62:94:32:ef:52:2c:49:bd:0c:4e:27:3a:ea:60:a4:8e:
f3:32:b8:21:bc:c9:f9:b8:36:9b:2b:f1:d2:25:06:51:2f:2d:
df:b2:1e:18:de:3f:fb:f3:58:3e:e9:d0:b4:14:2a:21:c0:42:
43:90:e0:b4:57:f4:47:eb:15:4f:b4:4c:e5:21:d8:4a:5f:63:
99:a1:ee:be:80:5a:16:04:89:6b:17:c4:96:26:f5:92:e3:ba:
9d:50:a5:a4:61:4b:47:bc:17:03:f0:88:92:19:78:49:e9:16:
f4:af:ec:46:16:ac:15:91:0e:c1:4f:ec:b0:4e:5a:10:0f:0a:
b2:f5:28:82:78:2e:0b:2e:3f:e3:43:2c:b3:5a:e3:65:60:50:
45:5d:03:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org