Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/UgZoU0yuOa5Swep2LbcueC8KAcs.roa
File: UgZoU0yuOa5Swep2LbcueC8KAcs.roa (raw, json)
Hash identifier: 81HrX/qxbfyS0uQKhaR6kvv9LPHyGs+lwkXXh54MSvQ=
Subject key identifier: 52:06:68:53:4C:AE:39:AE:52:C1:EA:76:2D:B7:2E:78:2F:0A:01:CB
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 01856D53DBEAA7AEFE4DFBE9B51F39A04520
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/UgZoU0yuOa5Swep2LbcueC8KAcs.roa
Signing time: Sun 01 Jan 2023 12:34:50 +0000
ROA not before: Sun 01 Jan 2023 12:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 45.56.224.0/21 maxlen: 21
45.56.236.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:db:ea:a7:ae:fe:4d:fb:e9:b5:1f:39:a0:45:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Jan 1 12:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=520668534cae39ae52c1ea762db72e782f0a01cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:33:ca:96:36:2d:b2:c2:00:bb:b7:0d:d0:05:
4c:c9:f4:f0:df:e4:11:07:f8:ff:a0:92:89:e7:ad:
b4:ec:6d:5c:d4:44:d6:e3:37:36:8d:a7:ea:7e:a0:
7c:e6:80:a8:a6:c4:ea:3c:f0:35:29:03:94:70:07:
ab:9c:67:fe:c8:8b:b9:e1:e3:1e:72:45:ff:f9:c4:
3e:eb:38:97:a1:5b:2b:8a:ff:2b:76:01:f4:25:b3:
7e:16:d1:cb:f7:c0:37:7b:22:3c:1f:1f:dc:27:1e:
ae:a6:55:7f:20:82:b3:03:19:2c:2b:3a:5d:75:29:
47:e3:48:df:2e:df:79:b4:f1:8e:99:1d:72:fe:19:
4a:7b:e4:c7:5a:82:66:b6:49:f8:2e:72:46:cb:30:
3b:e8:f4:44:72:29:68:e1:a0:13:2b:7d:4a:f8:0e:
a7:dd:f5:36:c0:47:c4:d2:59:59:db:2c:0f:8a:82:
12:5b:05:2e:fd:ad:4c:56:bf:c1:c1:88:74:35:31:
9b:dd:09:c4:76:33:b1:ad:01:99:99:c9:7c:67:97:
2f:f0:32:ca:ef:ee:a7:ff:75:4d:33:51:20:20:c4:
5e:80:7a:b3:f0:58:e6:61:47:b2:23:95:c2:ee:7e:
43:6d:f5:85:75:f6:11:fe:00:f7:75:64:d1:c8:60:
54:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:06:68:53:4C:AE:39:AE:52:C1:EA:76:2D:B7:2E:78:2F:0A:01:CB
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/UgZoU0yuOa5Swep2LbcueC8KAcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.56.224.0/21
45.56.236.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:63:7b:85:d1:51:75:50:be:2f:b8:87:21:a2:88:9b:91:2c:
3a:bb:15:3e:7a:d3:a8:45:a9:7b:17:1f:eb:ba:e3:d2:83:95:
15:1e:9b:69:aa:77:28:97:35:38:f0:98:24:d2:a4:83:f7:93:
5b:00:44:63:7b:72:b0:a4:75:95:92:b0:ae:5c:73:a3:76:6d:
43:1a:72:69:24:b3:00:9b:a8:52:c0:04:ca:70:2d:d1:e7:e9:
6f:96:a6:5b:71:f2:35:65:02:a6:07:bf:ec:2a:17:30:8b:77:
be:8e:e5:47:be:0b:44:56:6c:4f:bf:3b:39:bf:47:a4:63:42:
f1:85:9a:9a:7d:58:75:36:65:61:00:51:47:99:30:ca:ad:ae:
f7:c8:f8:fd:c3:72:e1:72:cc:67:56:3e:7b:da:d5:3f:ef:d4:
80:e8:88:56:d6:be:5f:50:26:fc:43:17:0b:8c:4d:1a:e3:31:
44:46:9d:da:2b:2b:70:bb:c3:6b:45:c2:77:73:f6:a4:46:cb:
25:8e:6b:e0:57:67:5f:8e:5f:c6:5a:a6:48:f5:43:b7:8b:93:
4a:77:46:11:3b:1c:07:1e:4a:1f:f1:c4:88:e1:98:31:e3:38:
1c:39:ec:8f:b3:0d:be:b7:f5:fc:30:72:cc:d2:60:f0:18:62:
ae:4c:6d:b2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVtU9vqp67+TfvptR85oEUgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzIxNjQxYmRiY2ZhYzI0YzU0YjZhNDg1OTQ4M2M1ZTQx
NjQwYjYwHhcNMjMwMTAxMTIzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjA2Njg1MzRjYWUzOWFlNTJjMWVhNzYyZGI3MmU3ODJmMGEwMWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTPKljYtssIAu7cN0AVMyfTw3+QR
B/j/oJKJ56207G1c1ETW4zc2jafqfqB85oCopsTqPPA1KQOUcAernGf+yIu54eMe
ckX/+cQ+6ziXoVsriv8rdgH0JbN+FtHL98A3eyI8Hx/cJx6uplV/IIKzAxksKzpd
dSlH40jfLt95tPGOmR1y/hlKe+THWoJmtkn4LnJGyzA76PREcilo4aATK31K+A6n
3fU2wEfE0llZ2ywPioISWwUu/a1MVr/BwYh0NTGb3QnEdjOxrQGZmcl8Z5cv8DLK
7+6n/3VNM1EgIMRegHqz8FjmYUeyI5XC7n5DbfWFdfYR/gD3dWTRyGBUBwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFIGaFNMrjmuUsHqdi23LngvCgHLMB8GA1UdIwQY
MBaAFMrCFkG9vPrCTFS2pIWUg8XkFkC2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUt
OGFiZjVlZTZjNGFkLzEvVWdab1UweXVPYTVTd2VwMkxiY3VlQzhLQWNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUtOGFiZjVlZTZjNGFk
LzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLTjgAwQB
LTjsMA0GCSqGSIb3DQEBCwUAA4IBAQAeY3uF0VF1UL4vuIchooibkSw6uxU+etOo
Ral7Fx/ruuPSg5UVHptpqncolzU48Jgk0qSD95NbAERje3KwpHWVkrCuXHOjdm1D
GnJpJLMAm6hSwATKcC3R5+lvlqZbcfI1ZQKmB7/sKhcwi3e+juVHvgtEVmxPvzs5
v0ekY0LxhZqafVh1NmVhAFFHmTDKra73yPj9w3LhcsxnVj572tU/79SA6IhW1r5f
UCb8QxcLjE0a4zFERp3aKytwu8NrRcJ3c/akRssljmvgV2dfjl/GWqZI9UO3i5NK
d0YROxwHHkof8cSI4Zgx4zgcOeyPsw2+t/X8MHLM0mDwGGKuTG2y
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:56 2024 by rpki-client on console-ams.rpki-client.org