Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/u8x3u6VOcTgBhQc2Qs5Xsrzpx3Q.roa
File: u8x3u6VOcTgBhQc2Qs5Xsrzpx3Q.roa (raw, json)
Hash identifier: scwx/9b/T3GkPAL2AY4hZ2cfwYZqgB6En+Z0sXxpo3o=
Subject key identifier: BB:CC:77:BB:A5:4E:71:38:01:85:07:36:42:CE:57:B2:BC:E9:C7:74
Certificate issuer: /CN=998674263fccd07f684e1e199302eeefe783fb3d
Certificate serial: 01856EF4301B2D83442AE28ECADF94F66DF3
Authority key identifier: 99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/u8x3u6VOcTgBhQc2Qs5Xsrzpx3Q.roa
Signing time: Sun 01 Jan 2023 20:09:34 +0000
ROA not before: Sun 01 Jan 2023 20:09:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208429
IP address blocks: 45.137.164.0/22 maxlen: 22
2a0e:a440::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:30:1b:2d:83:44:2a:e2:8e:ca:df:94:f6:6d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998674263fccd07f684e1e199302eeefe783fb3d
Validity
Not Before: Jan 1 20:09:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbcc77bba54e71380185073642ce57b2bce9c774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e9:8d:dd:5e:cb:29:9c:6d:99:64:c7:ce:1d:
0f:b2:19:0e:a1:19:a3:4b:8f:a0:56:9e:7c:e8:de:
6a:be:03:72:1a:50:eb:04:03:1b:ae:e1:f8:16:49:
5f:fe:53:71:73:8d:84:13:39:9a:52:9f:f5:1d:ce:
f7:72:eb:85:d4:47:24:c1:55:d0:5a:70:0b:f6:78:
76:f3:42:6d:2f:4b:0d:fb:13:2a:e4:cb:33:55:a3:
bc:31:a3:e3:77:cb:36:0f:0e:26:8c:f0:7d:e7:ab:
5d:eb:14:0b:68:b7:db:5f:96:87:00:80:6b:12:13:
ac:0d:7e:6b:34:18:a6:a9:87:32:1a:40:ac:50:df:
4c:34:d1:78:34:b3:41:e9:a8:e7:3d:68:92:61:6c:
88:e7:00:d7:92:5b:61:38:cd:92:62:17:6c:52:86:
19:f3:14:a2:dd:3f:e7:97:d1:7d:1e:b3:b4:30:a8:
70:0d:d1:fe:ee:73:58:d2:80:a8:44:8b:e7:a8:54:
ca:40:47:37:f2:e1:67:0a:71:9b:bc:a9:2f:8e:5d:
fa:b9:b5:10:52:fe:ea:fc:d8:8a:0f:3e:44:9c:02:
26:0d:a5:40:e4:c2:7c:66:b7:79:ad:29:01:7c:d3:
a7:8b:f2:6d:cb:66:6b:ce:8a:8d:50:13:67:6b:e5:
19:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CC:77:BB:A5:4E:71:38:01:85:07:36:42:CE:57:B2:BC:E9:C7:74
X509v3 Authority Key Identifier:
keyid:99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/u8x3u6VOcTgBhQc2Qs5Xsrzpx3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.164.0/22
IPv6:
2a0e:a440::/29
Signature Algorithm: sha256WithRSAEncryption
a4:8b:14:f9:d6:44:b2:e5:46:89:f2:64:76:ed:ea:77:35:f6:
0f:33:48:23:e5:79:d1:7c:a9:c1:1e:2b:8b:24:5f:97:1f:16:
c5:8f:f2:0a:22:2b:6b:ce:a9:0c:99:54:ab:ff:5f:c0:ef:e8:
da:4b:98:2a:97:80:74:e9:33:e1:c0:c2:23:c9:cd:b8:4e:d4:
d8:5e:45:6e:15:4f:77:ea:ac:cf:d6:98:c8:74:df:3c:bf:7b:
7b:70:1d:24:cb:47:94:eb:22:c4:22:9e:94:0e:4e:db:ab:7f:
61:c4:61:57:e5:b7:76:e1:ed:51:1e:25:5a:d1:76:59:f8:d3:
6e:f5:12:f1:90:ff:e9:7e:18:a3:3e:20:b5:39:53:86:b7:84:
ae:52:51:ca:29:87:8d:6c:cb:15:78:c5:f8:0a:b0:84:42:9b:
4e:81:cc:93:04:f6:bd:40:70:48:d2:cf:15:e6:c7:27:98:48:
91:d8:28:37:f1:cc:76:91:9a:aa:08:66:19:e6:7a:32:15:82:
23:6d:d5:ca:28:b7:88:de:09:6b:9a:d5:85:e2:8b:92:7c:bf:
a8:a7:6f:5f:4e:e3:dd:1c:6c:e9:59:8c:6e:70:94:17:f8:4c:
9f:90:13:96:86:d6:ed:5d:41:f2:77:66:38:1a:d6:cd:2d:00:
b2:b7:d0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:52 2024 by rpki-client on console-fra.rpki-client.org