Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/uH-FA7O-cRJxterb3QxK-3da5u8.roa
File: uH-FA7O-cRJxterb3QxK-3da5u8.roa (raw, json)
Hash identifier: ZjLB9h1YOCDfTjzKFh4dpiE42qpGFtMhRzMz67cP9AI=
Subject key identifier: B8:7F:85:03:B3:BE:71:12:71:B5:EA:DB:DD:0C:4A:FB:77:5A:E6:EF
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01857103184EF9E56DB9F7211C8DEBA47CDA
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/uH-FA7O-cRJxterb3QxK-3da5u8.roa
Signing time: Mon 02 Jan 2023 05:45:06 +0000
ROA not before: Mon 02 Jan 2023 05:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206238
IP address blocks: 45.83.232.0/22 maxlen: 24
45.142.232.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:18:4e:f9:e5:6d:b9:f7:21:1c:8d:eb:a4:7c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b87f8503b3be711271b5eadbdd0c4afb775ae6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:25:66:60:46:d9:9f:f7:56:f0:e3:de:48:
43:3b:b4:88:d2:c6:71:d3:37:e6:18:c7:e6:9f:e6:
6e:77:73:02:df:8e:7b:c2:ac:f8:22:6a:e7:70:d2:
85:a0:a5:ee:cd:62:cf:3e:02:ca:d9:22:2c:73:1e:
2d:c9:d2:4e:2b:29:de:10:62:65:fb:a8:69:c7:34:
01:cc:04:10:65:b0:e9:33:65:92:99:29:15:df:52:
a6:80:6f:1c:7d:48:6d:eb:00:d0:91:53:41:dd:31:
e6:e0:a7:6c:3f:51:86:03:19:5a:8a:44:6e:49:ee:
3a:90:39:91:07:d1:e1:5a:2e:89:a7:79:23:b5:22:
9c:2f:a9:1e:dd:a6:95:00:94:f4:c0:c5:98:28:36:
ae:c4:69:60:92:dc:00:88:d3:0c:cf:6a:2e:ab:ea:
d0:1b:d6:b0:e4:ea:76:89:8c:ce:23:12:91:65:56:
eb:a8:a8:72:39:42:9c:f9:a7:cc:75:b6:3b:8f:74:
25:f6:1e:43:07:43:c8:e3:23:84:96:a1:48:1a:ce:
4a:81:c9:b4:07:88:47:00:aa:a9:60:58:5a:44:89:
5b:2c:23:47:62:a9:43:18:89:33:79:fc:06:55:84:
e0:8b:0a:b2:48:62:24:b1:c3:0c:f8:a4:bb:ec:15:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7F:85:03:B3:BE:71:12:71:B5:EA:DB:DD:0C:4A:FB:77:5A:E6:EF
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/uH-FA7O-cRJxterb3QxK-3da5u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.232.0/22
45.142.232.0/22
Signature Algorithm: sha256WithRSAEncryption
97:67:82:4a:dd:80:bf:a8:f0:a0:59:62:3b:d5:83:f4:65:80:
13:4b:78:41:86:ce:08:7f:49:e2:b8:6b:5c:3b:31:32:e0:06:
fb:6f:53:e1:3b:26:73:9e:e5:50:04:1e:f1:cb:ec:ce:7e:a9:
cc:e5:b7:51:2e:c2:0d:93:34:0a:55:d7:70:6c:38:31:57:0c:
e7:c3:a9:27:bb:61:6a:df:da:63:63:7d:b9:47:74:7a:4d:11:
58:2b:36:75:0e:65:fb:df:2b:4f:a6:23:85:97:d9:fa:cc:85:
e5:72:63:09:14:79:30:08:1a:98:a8:fb:58:78:b3:86:b9:64:
88:7a:96:c9:d5:b5:85:88:60:c7:0e:f9:03:0f:27:b5:27:93:
f9:2a:ca:ce:fa:e2:3b:33:75:97:29:5c:1b:8f:a9:ca:6d:fa:
8a:f8:e3:84:9c:4f:97:58:23:df:fd:0c:b1:08:c8:b6:7f:06:
39:21:9e:a1:f4:ab:f3:fb:5e:91:86:de:de:94:31:d3:67:a1:
1d:d8:d7:17:4e:c0:fd:04:43:19:ce:d7:ef:bb:e8:50:f3:58:
e1:3d:7d:3e:b0:33:89:eb:e1:c0:ba:01:7b:52:f1:b4:7b:07:
b7:2f:af:34:7e:fb:7d:81:2b:2b:cc:da:87:82:00:44:55:47:
40:20:16:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:18 2024 by rpki-client on console-ams.rpki-client.org