Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/UORUhkPQoSPEgPnoqWbCXn5_FWA.roa
File: UORUhkPQoSPEgPnoqWbCXn5_FWA.roa (raw, json)
Hash identifier: oFQ2ejmECjG1Z+rdMUlOXjmp3c4uV1NZ48HsqHgilWY=
Subject key identifier: 50:E4:54:86:43:D0:A1:23:C4:80:F9:E8:A9:66:C2:5E:7E:7F:15:60
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 01857169DB682A7BDA6F6A95D499BD4F61F1
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/UORUhkPQoSPEgPnoqWbCXn5_FWA.roa
Signing time: Mon 02 Jan 2023 07:37:20 +0000
ROA not before: Mon 02 Jan 2023 07:37:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35478
IP address blocks: 45.8.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:db:68:2a:7b:da:6f:6a:95:d4:99:bd:4f:61:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Jan 2 07:37:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50e4548643d0a123c480f9e8a966c25e7e7f1560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:a5:45:17:9c:73:54:2b:74:0a:42:27:1f:
40:38:8a:c7:3b:4c:3d:fb:50:49:b7:5d:d1:6a:1f:
d6:6a:e8:10:63:ac:ba:1f:b6:e6:0e:fc:bf:c7:d9:
16:ac:06:ac:bd:50:78:21:1e:88:af:c1:ad:45:f7:
68:6f:d5:c5:51:17:83:7f:6c:42:40:79:27:e9:20:
fc:2c:16:96:ea:eb:7a:e9:44:47:b4:fd:4e:dd:ae:
86:ce:7a:28:86:90:d0:eb:17:57:39:9c:ee:f9:bc:
d3:44:15:ed:bd:7b:92:96:0a:53:e3:43:1e:7f:e6:
57:03:02:61:82:e1:49:5b:24:b8:1d:7c:ee:05:57:
2f:d0:af:4f:1f:f0:02:69:fe:16:7f:d6:5c:36:b7:
5f:81:ad:02:ff:33:8c:44:c8:9f:a9:90:ec:18:b3:
74:b8:46:10:1b:9d:5e:c0:30:74:b8:7c:83:7d:7c:
fd:62:d7:46:8a:67:0b:99:cb:1a:1d:98:c1:69:2a:
04:e5:67:1b:37:4d:76:b9:6b:18:91:f1:23:6f:00:
1e:fc:0e:ac:74:67:a3:7e:34:63:c1:f2:24:20:ca:
40:50:04:c9:1d:fa:ab:8f:7a:3c:cb:10:dd:89:ef:
c3:99:d9:c1:64:4f:a4:7a:ff:08:55:d2:f8:09:3f:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E4:54:86:43:D0:A1:23:C4:80:F9:E8:A9:66:C2:5E:7E:7F:15:60
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/UORUhkPQoSPEgPnoqWbCXn5_FWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.44.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:70:bf:df:20:15:f1:16:df:95:9d:f2:ab:77:29:cd:21:c8:
36:d0:2f:80:2e:16:76:f2:50:68:ee:2e:f5:93:c5:5e:4f:00:
fa:c2:bf:97:b2:94:c5:25:16:92:88:4d:b1:f4:5b:f7:9b:e7:
95:7b:6c:19:af:c6:b2:ff:8c:df:58:54:e8:01:81:cf:3a:66:
46:8d:7e:73:d1:a3:7b:42:25:bc:c2:12:fe:70:c3:17:de:22:
27:02:9a:16:04:16:76:0f:df:43:f8:5c:c0:0d:3d:60:b2:fb:
c3:02:5d:a4:54:e5:d6:79:1a:6e:09:a3:96:a2:2e:15:dc:de:
a3:48:bb:f7:e3:67:dc:30:ba:de:83:68:be:ed:47:a4:82:ff:
40:a0:0b:24:b3:d3:8b:a1:6e:c6:46:8e:29:95:16:a9:bb:7c:
c6:31:ed:4b:d2:1f:60:25:b9:ca:d1:9e:5e:e8:2c:ca:0f:6b:
54:3d:b9:90:b0:fc:56:d2:c5:5a:97:cf:2f:3f:4d:c9:62:c7:
82:ba:c9:27:53:21:72:c1:d5:5e:99:3e:ce:9b:fc:e4:12:ef:
ad:5d:14:db:d3:57:a2:34:7e:ab:39:3e:63:8d:c9:69:0a:69:
45:f2:56:13:f5:08:65:2e:62:ce:17:2a:56:83:9b:8f:4f:59:
31:90:fe:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:02 2024 by rpki-client on console-fra.rpki-client.org