Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wuqxMaEHG_o8OnddFaXtgQ2OKK4.roa
File: wuqxMaEHG_o8OnddFaXtgQ2OKK4.roa (raw, json)
Hash identifier: 8k2j5LfI8gIFsdwDa8NDqDklrUtrD+lIlKhsClAN/h8=
Subject key identifier: C2:EA:B1:31:A1:07:1B:FA:3C:3A:77:5D:15:A5:ED:81:0D:8E:28:AE
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185E4408CACCD7A3E22F2E6A3881ED1E1C8
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wuqxMaEHG_o8OnddFaXtgQ2OKK4.roa
Signing time: Tue 24 Jan 2023 14:48:33 +0000
ROA not before: Tue 24 Jan 2023 14:48:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28917
IP address blocks: 45.85.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:40:8c:ac:cd:7a:3e:22:f2:e6:a3:88:1e:d1:e1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 24 14:48:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2eab131a1071bfa3c3a775d15a5ed810d8e28ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8c:06:de:dd:e0:09:c6:ff:13:d5:08:7f:72:
d2:cc:61:24:02:4a:04:06:1a:3f:d1:25:81:e7:67:
0f:62:c7:09:60:95:f9:bc:51:9d:3c:ee:f3:3b:9a:
36:68:91:88:e4:c6:33:65:20:6b:15:b4:51:e0:69:
1f:c3:e4:66:20:a9:fb:60:08:54:46:ff:fc:91:ce:
46:1a:1b:b2:cc:45:a9:ec:ea:54:53:14:7e:06:df:
93:2b:eb:e8:f2:27:92:04:46:7c:38:91:9c:8f:81:
1e:14:4d:50:95:04:81:2b:61:21:12:7f:33:91:90:
09:53:65:0a:6c:81:28:28:9a:2d:9b:43:d6:31:a7:
11:78:18:e9:b6:ad:a3:9a:ab:0a:49:7f:bc:d0:36:
84:b3:e6:04:8f:c0:00:a6:aa:73:7f:6b:b8:e2:c0:
2a:84:8f:87:6c:7e:e6:13:4c:ca:19:68:58:71:93:
3f:a9:da:3f:22:69:ff:88:30:21:78:4b:ca:f3:1a:
55:f2:20:19:9c:e8:e7:b1:5e:9d:29:00:ae:d6:97:
da:b4:3a:dc:c4:25:d9:38:58:5f:ee:22:e2:cf:a4:
6d:36:2c:8b:b7:75:aa:79:e1:92:de:6a:18:01:1a:
bd:97:61:b1:d5:75:0a:10:6f:09:c7:d0:39:43:bd:
cc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EA:B1:31:A1:07:1B:FA:3C:3A:77:5D:15:A5:ED:81:0D:8E:28:AE
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wuqxMaEHG_o8OnddFaXtgQ2OKK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.105.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a5:24:81:15:db:19:52:d2:9b:88:43:29:e3:9d:36:91:5f:
ed:bb:c3:ba:6a:38:01:a7:8d:e0:ce:34:58:07:ae:5b:95:41:
13:43:05:c5:8e:66:8b:61:eb:73:1f:66:03:3a:ce:f8:5e:ad:
df:3f:f7:dd:82:0f:58:5d:d3:49:15:54:8f:13:a8:2c:84:20:
09:12:7b:22:34:35:87:0d:32:7e:37:14:c0:ab:b9:40:49:3b:
7f:60:25:10:e4:02:0a:9a:59:39:4d:17:26:c9:49:66:c0:a4:
dc:23:b6:a0:9e:a3:04:4b:b3:bf:cc:84:96:7f:06:6d:87:90:
47:f7:1d:92:a1:e6:4d:0c:93:a4:cb:f3:21:cf:06:b3:c9:fe:
2d:3c:c9:cb:e5:a0:ce:a7:8e:fb:12:ca:18:6e:02:21:c3:40:
11:a4:e4:c4:2b:82:f3:d9:03:1a:ad:a8:ff:7c:6f:86:50:24:
5c:0e:1d:19:d9:5a:fb:bb:43:d7:d9:3b:23:91:d8:6f:12:50:
0a:76:be:f3:99:2b:93:cc:13:33:da:f2:cd:ac:5d:ec:21:26:
8e:a4:ad:1a:81:da:a5:6c:b0:1c:f5:52:18:e6:09:f5:d7:79:
65:e2:ff:25:26:99:d8:1e:6f:b2:39:1b:22:2e:d6:9c:c6:60:
b2:83:02:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXkQIyszXo+IvLmo4ge0eHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMTI0MTQ0ODMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmVhYjEzMWExMDcxYmZhM2MzYTc3NWQxNWE1ZWQ4MTBkOGUyOGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5owG3t3gCcb/E9UIf3LSzGEkAkoE
Bho/0SWB52cPYscJYJX5vFGdPO7zO5o2aJGI5MYzZSBrFbRR4Gkfw+RmIKn7YAhU
Rv/8kc5GGhuyzEWp7OpUUxR+Bt+TK+vo8ieSBEZ8OJGcj4EeFE1QlQSBK2EhEn8z
kZAJU2UKbIEoKJotm0PWMacReBjptq2jmqsKSX+80DaEs+YEj8AApqpzf2u44sAq
hI+HbH7mE0zKGWhYcZM/qdo/Imn/iDAheEvK8xpV8iAZnOjnsV6dKQCu1pfatDrc
xCXZOFhf7iLiz6RtNiyLt3WqeeGS3moYARq9l2Gx1XUKEG8Jx9A5Q73M7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMLqsTGhBxv6PDp3XRWl7YENjiiuMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvd3VxeE1hRUhHX284T25kZEZhWHRnUTJPS0s0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVVpMA0G
CSqGSIb3DQEBCwUAA4IBAQBtpSSBFdsZUtKbiEMp4502kV/tu8O6ajgBp43gzjRY
B65blUETQwXFjmaLYetzH2YDOs74Xq3fP/fdgg9YXdNJFVSPE6gshCAJEnsiNDWH
DTJ+NxTAq7lASTt/YCUQ5AIKmlk5TRcmyUlmwKTcI7agnqMES7O/zISWfwZth5BH
9x2SoeZNDJOky/Mhzwazyf4tPMnL5aDOp477EsoYbgIhw0ARpOTEK4Lz2QMaraj/
fG+GUCRcDh0Z2Vr7u0PX2TsjkdhvElAKdr7zmSuTzBMz2vLNrF3sISaOpK0agdql
bLAc9VIY5gn113ll4v8lJpnYHm+yORsiLtacxmCygwLR
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:04 2023 by rpki-client on console-fra.rpki-client.org