Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/uJD1qCsUvoE0FqPHoe3usYcyKdg.roa
File: uJD1qCsUvoE0FqPHoe3usYcyKdg.roa (raw, json)
Hash identifier: yDkcXOTrMWcKQXTFpDXJ1Ww241iSDaAN/GmlG82jyVs=
Subject key identifier: B8:90:F5:A8:2B:14:BE:81:34:16:A3:C7:A1:ED:EE:B1:87:32:29:D8
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 0186072CF09A2EE4131966C275B8E2813790
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/uJD1qCsUvoE0FqPHoe3usYcyKdg.roa
Signing time: Tue 31 Jan 2023 09:33:50 +0000
ROA not before: Tue 31 Jan 2023 09:33:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58329
IP address blocks: 45.155.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:2c:f0:9a:2e:e4:13:19:66:c2:75:b8:e2:81:37:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 31 09:33:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b890f5a82b14be813416a3c7a1edeeb1873229d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3e:ef:cc:a9:9e:0d:d7:ab:8b:6e:7a:81:6e:
d9:c3:e6:2e:43:70:8d:40:c0:84:2d:b1:a0:3b:39:
12:29:1c:ef:07:ea:f5:c5:ba:2d:51:57:8f:30:e8:
ea:59:20:00:ac:fe:98:f9:5d:98:6e:23:e3:3a:6b:
1e:16:ad:8c:1d:b3:1c:de:bc:33:44:9b:1f:34:6f:
d7:2a:50:15:50:1e:d1:8b:ae:cd:52:de:28:5e:04:
33:5c:68:02:2c:2b:56:23:f2:27:08:e8:51:7d:a4:
d8:97:34:84:95:5c:68:3d:5b:d3:33:a6:ee:a4:5b:
c6:f0:86:cc:57:96:2c:a4:95:8b:a2:fd:8b:da:3a:
c1:f7:b7:a2:67:e3:a6:bc:d2:36:75:5b:c5:89:71:
17:07:cf:3d:46:19:fc:39:dd:eb:c9:db:d5:fc:04:
a9:6b:fa:75:76:77:43:36:ac:1d:f0:ea:f9:e9:c3:
68:ee:cb:6f:c6:d2:33:ff:c1:41:f3:50:b6:7f:74:
fb:43:61:c4:61:8c:5c:6d:bc:d7:62:0c:67:10:d6:
e4:cc:c3:93:cf:36:26:49:69:28:d8:94:76:83:40:
cc:56:65:78:e9:d3:bf:d4:27:76:bc:62:f7:46:d8:
68:b3:89:90:33:04:68:3c:cb:d6:e3:d0:4c:98:60:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:90:F5:A8:2B:14:BE:81:34:16:A3:C7:A1:ED:EE:B1:87:32:29:D8
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/uJD1qCsUvoE0FqPHoe3usYcyKdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.249.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:eb:e5:07:14:2f:21:71:dc:a9:29:5c:9a:c6:2f:09:46:d8:
ee:95:0b:4a:08:4f:2f:5a:e2:d2:46:1d:28:bd:24:12:de:2c:
e7:a4:01:a2:c8:45:98:59:30:0d:ec:3f:d3:70:19:e2:c4:24:
28:75:6a:d4:48:ca:f8:02:82:6f:43:cd:45:85:3b:eb:d8:6c:
56:16:64:24:cc:e6:34:b6:aa:16:5c:ba:dd:4a:b7:d7:00:a0:
eb:62:db:82:04:98:51:0c:51:ee:28:f2:c9:21:98:d8:51:2d:
08:fc:07:da:a3:3a:6b:25:a5:97:5e:ab:0a:16:5a:4d:bb:08:
f9:d7:c0:c4:42:b3:12:94:db:9d:92:63:f2:59:90:f1:99:1b:
68:2d:53:82:43:73:31:ab:98:72:9f:23:60:ac:a4:12:ce:7a:
cf:2f:a1:c7:05:5f:30:8d:69:28:2d:90:5b:9c:9e:10:b4:54:
74:b5:ec:c9:c0:21:cd:3c:45:b1:ba:de:f5:8a:ad:1a:1b:c9:
11:44:df:41:39:75:21:6f:88:9a:65:5b:41:a9:d1:da:e4:44:
b6:73:48:fb:55:3a:c8:6c:9d:61:10:e9:38:46:ca:a9:05:21:
b3:fe:85:9b:15:af:b5:0f:a8:ec:df:87:c2:90:63:9c:ec:60:
3d:23:96:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:19 2024 by rpki-client on console-fra.rpki-client.org