Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bUjRU1lQMo-MEARH9qEyQnxw9GI.roa
File: bUjRU1lQMo-MEARH9qEyQnxw9GI.roa (raw, json)
Hash identifier: 7KeGVTXkhZCbyJ+L2If5C5HrSlcnZioO3qM5bCHvnls=
Subject key identifier: 6D:48:D1:53:59:50:32:8F:8C:10:04:47:F6:A1:32:42:7C:70:F4:62
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A4BB54203DE4C0226BF5F08A4170F9A93
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bUjRU1lQMo-MEARH9qEyQnxw9GI.roa
Signing time: Thu 31 Aug 2023 13:08:04 +0000
ROA not before: Thu 31 Aug 2023 13:08:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 45.8.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Sep 2023 20:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:b5:42:03:de:4c:02:26:bf:5f:08:a4:17:0f:9a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 31 13:08:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d48d1535950328f8c100447f6a132427c70f462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:78:e5:53:7e:6b:3a:41:98:2c:61:a5:bc:
cc:a1:fa:a7:24:e4:44:30:2c:08:1e:65:cb:bc:d8:
43:94:e7:a8:c0:ae:a9:85:87:0f:d7:66:3a:19:e4:
4a:54:14:1b:e0:47:2d:df:2f:b1:bf:91:fe:b1:c1:
ce:8a:c2:f9:a0:5d:0c:6f:cf:e1:e4:72:fa:f9:f6:
17:8f:44:1d:b0:49:a2:86:ce:01:7d:e5:36:57:ca:
4e:25:34:5e:49:c4:f9:96:1d:cc:7e:74:82:1f:10:
cd:4f:a5:ee:6e:da:b7:37:aa:fb:b8:fd:1d:d8:f7:
25:c1:a7:0d:75:0d:20:6f:0b:51:88:c0:51:b0:d1:
ce:d6:5f:e4:0c:24:13:b9:f7:16:ae:6e:73:1a:f8:
6d:e0:02:44:2a:9c:de:d3:ab:11:f3:4a:76:2b:1a:
ae:5e:02:68:b1:75:4d:4a:e3:a1:e1:05:b6:bf:6a:
94:f6:5a:cc:2a:da:91:d3:32:91:85:c2:76:e1:d4:
56:c4:44:3a:0e:ea:66:d1:9c:13:37:7e:8b:6f:15:
b6:19:76:56:d8:cc:ca:35:37:d9:b0:c0:34:82:fe:
09:6a:50:38:ad:75:e5:13:f0:0d:79:73:8c:5d:4c:
e2:55:b1:e9:1a:8f:4d:8b:42:5b:3d:31:e2:2b:a7:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:48:D1:53:59:50:32:8F:8C:10:04:47:F6:A1:32:42:7C:70:F4:62
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bUjRU1lQMo-MEARH9qEyQnxw9GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.22.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:d7:e9:55:7c:40:8e:ad:60:91:d0:4d:12:01:d6:d7:8c:5a:
64:7a:29:92:34:6d:9d:ee:a9:c3:38:55:d0:e9:6c:47:fc:2c:
be:ec:c8:45:38:e3:14:b3:c4:ce:28:dd:78:50:1b:98:13:bb:
07:3d:75:6e:d1:80:ab:93:24:b9:1f:da:a9:b9:6f:3d:e9:81:
50:b2:d1:f4:9a:a7:7d:b8:0e:6d:40:68:82:39:c5:3c:b8:f8:
ae:12:22:09:83:46:d4:26:99:40:27:53:a5:5c:f2:41:01:f6:
73:50:3f:a1:4c:a4:46:0b:c9:e1:23:48:20:d5:7b:f4:5d:e5:
ab:4b:4d:5a:2f:b9:5e:28:ec:d9:94:d9:5b:de:65:06:16:08:
44:07:de:1b:00:32:76:ac:84:7d:ee:00:3b:b4:65:85:10:d9:
c1:37:a3:d4:e1:08:55:b8:47:e5:07:cb:1d:4d:24:36:ae:a9:
e9:68:f3:c4:be:cd:00:57:06:23:7b:3a:50:a1:69:f8:c5:a9:
3e:8d:0b:4f:4c:d4:c9:9c:51:ae:5b:99:ea:b0:5c:db:da:0e:
5b:96:95:6a:7d:d7:d8:80:cc:9b:73:57:f3:50:e3:3a:59:22:
83:ed:ba:4a:30:81:ee:4e:4f:6f:55:2e:ba:24:37:24:f8:b0:
ce:8d:12:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org