Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/uePfVYiqHuVtz3n7zuS4fSshiH8.roa
File: uePfVYiqHuVtz3n7zuS4fSshiH8.roa (raw, json)
Hash identifier: GLdHgYiy5LWiKZvnqwdFaAIThTdH4++n3BBRskFmbaM=
Subject key identifier: B9:E3:DF:55:88:AA:1E:E5:6D:CF:79:FB:CE:E4:B8:7D:2B:21:88:7F
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 018570428D970C1BB1D036D2A5CF9495448C
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/uePfVYiqHuVtz3n7zuS4fSshiH8.roa
Signing time: Mon 02 Jan 2023 02:14:47 +0000
ROA not before: Mon 02 Jan 2023 02:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49250
IP address blocks: 45.149.248.0/23 maxlen: 23
45.149.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:8d:97:0c:1b:b1:d0:36:d2:a5:cf:94:95:44:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Jan 2 02:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9e3df5588aa1ee56dcf79fbcee4b87d2b21887f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:fd:15:ed:7d:f2:77:59:c3:28:3d:e4:17:
e7:e6:b4:ac:e6:86:2e:04:64:64:9c:bd:64:3f:fc:
f9:4d:d4:8a:ae:9f:90:eb:30:54:2a:88:d3:ad:02:
83:fc:96:df:ba:0b:5d:a1:b1:d2:54:d0:50:5a:91:
d3:43:8f:e6:30:56:2e:f6:a6:b6:29:a2:2b:55:7a:
30:9f:69:1e:de:fd:6f:24:9b:70:07:6e:66:87:d2:
23:a9:49:54:62:2a:ad:10:45:e5:03:2b:e4:b5:62:
6e:f9:53:e7:ff:14:5e:9a:4e:78:1c:05:39:09:1a:
d0:c8:22:56:ea:4a:a4:19:ca:85:ad:b5:fc:85:a0:
06:cc:d6:5d:94:1c:23:68:cf:2a:1c:15:e8:ba:79:
77:18:ba:52:8d:05:ad:2e:44:eb:0b:7a:73:5e:5a:
3f:6a:4c:b2:f7:cd:8e:26:96:d2:ea:c8:11:68:75:
40:8e:f1:4b:f8:81:50:2a:04:54:34:ae:ec:19:74:
e3:43:1e:fe:19:14:95:fd:3e:02:66:44:d2:c1:5f:
ad:b0:b8:73:54:f1:2c:cf:36:25:12:a4:74:12:d1:
2d:4e:8d:2e:3b:0b:b1:21:93:59:bd:77:3d:7e:f7:
53:e4:18:a6:18:cf:43:b1:bb:66:1d:93:ca:6e:d9:
09:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E3:DF:55:88:AA:1E:E5:6D:CF:79:FB:CE:E4:B8:7D:2B:21:88:7F
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/uePfVYiqHuVtz3n7zuS4fSshiH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.248.0-45.149.250.255
Signature Algorithm: sha256WithRSAEncryption
6d:44:59:47:05:56:4d:53:13:c6:be:11:6e:40:7c:7e:15:48:
b7:84:82:ad:60:91:7d:fe:15:37:3f:1b:af:8b:46:09:34:a4:
25:8c:57:a8:41:ba:b7:65:89:0b:b2:32:36:6d:ef:c4:b9:2b:
ee:14:b3:92:ad:76:9f:69:85:06:b9:f5:3a:ff:54:63:a0:ea:
b2:02:90:87:fe:48:bf:4b:49:5c:96:bf:63:7e:10:d2:b4:ce:
ce:d4:b4:d6:70:ed:8f:6d:5f:5d:62:89:e1:f7:58:3d:bf:1b:
37:90:78:3f:d8:e0:40:57:2c:fe:ff:56:f7:06:1d:47:4c:be:
dc:d1:cb:1d:0a:95:70:8e:69:88:f4:9a:da:04:4b:66:ed:40:
db:b9:1e:88:71:53:ee:4e:8f:cd:fe:d3:fc:c0:a1:78:69:32:
ce:c6:a3:39:e1:59:5d:47:76:fa:6b:63:fe:60:ea:27:dd:6f:
18:80:c2:14:66:49:85:85:bd:27:a1:40:21:ce:d9:29:3f:ca:
47:59:1c:95:cf:92:8d:67:91:fb:56:8d:75:fa:fa:f5:0c:a8:
1f:5b:92:8c:6f:ef:83:00:0a:6a:74:06:bb:c0:8e:80:c2:36:
56:94:8c:c1:6c:04:34:52:cb:d6:2d:33:1e:a9:a6:e7:9a:89:
52:ab:de:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:15 2024 by rpki-client on console-fra.rpki-client.org