Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/UHRCx6oRFM4kjm7SzeQQNHtlV08.roa
File: UHRCx6oRFM4kjm7SzeQQNHtlV08.roa (raw, json)
Hash identifier: 4jAzQGRQS9Ul2c0AHaGuAe73XNGhqjqb8RGzsCk5gqw=
Subject key identifier: 50:74:42:C7:AA:11:14:CE:24:8E:6E:D2:CD:E4:10:34:7B:65:57:4F
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 0187C17E2352FF4507D5DEF004D32C4D335C
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/UHRCx6oRFM4kjm7SzeQQNHtlV08.roa
Signing time: Thu 27 Apr 2023 06:54:41 +0000
ROA not before: Thu 27 Apr 2023 06:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142032
IP address blocks: 45.145.230.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 27 Apr 2023 07:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:7e:23:52:ff:45:07:d5:de:f0:04:d3:2c:4d:33:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Apr 27 06:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=507442c7aa1114ce248e6ed2cde410347b65574f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:1e:46:b7:e1:54:3b:17:cc:43:2e:52:d5:
5c:16:40:a6:d7:d1:95:8f:fb:34:17:71:e4:04:6a:
e6:2f:ef:16:5a:85:cc:ee:99:ba:d4:a7:64:1c:cd:
fb:fd:af:f0:ca:e8:ec:02:db:99:e5:c7:a7:e6:75:
50:a7:12:c4:fa:d9:a0:80:23:40:9a:f6:0f:b2:21:
cf:d9:08:2a:97:1f:4a:5c:52:a4:b7:0d:89:25:8a:
00:47:c0:ad:63:41:1d:6f:67:b9:bb:7f:c6:98:6f:
f3:31:c7:1f:df:07:9b:45:30:ff:0f:06:f5:b9:c3:
15:d5:dd:d7:ea:90:5f:e1:0b:49:54:33:57:25:35:
1b:6f:48:fa:ee:ab:97:5e:10:93:e3:f8:fe:e3:d2:
87:a8:c2:6b:40:8c:fb:51:b5:ea:1c:85:8c:19:b1:
4d:95:0b:58:09:9b:21:26:5b:72:b4:e0:67:86:66:
f4:78:1f:ef:8e:85:6d:82:c0:ba:6c:2f:7c:ac:3e:
8b:68:54:04:e0:e0:21:c1:2b:8d:9d:ad:9f:29:d0:
53:00:44:22:53:5d:08:fd:66:86:5d:bd:ae:d6:27:
03:01:23:7d:71:9f:b2:b8:1f:e8:42:62:f4:d8:45:
cd:0c:f2:d8:e9:c8:ec:29:3c:a7:f4:9d:dc:43:2d:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:74:42:C7:AA:11:14:CE:24:8E:6E:D2:CD:E4:10:34:7B:65:57:4F
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/UHRCx6oRFM4kjm7SzeQQNHtlV08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.230.0/23
Signature Algorithm: sha256WithRSAEncryption
75:5d:80:7d:13:ee:70:e1:b6:f8:9b:ff:3e:36:33:0a:b7:b9:
2d:c9:bc:f9:f6:0f:9e:99:65:48:8a:33:08:3f:b8:bf:d6:86:
16:21:f2:9d:09:7f:8b:7d:1d:11:38:84:52:2c:96:06:75:69:
6d:3a:a3:5b:ec:17:6c:15:77:0f:14:5d:52:ee:e8:c8:29:92:
87:b2:b3:77:99:36:24:8a:aa:dd:45:54:48:e4:fb:bd:a3:6d:
61:3f:ff:6a:13:3f:9c:89:d2:75:08:36:9e:6e:e7:f8:6e:e3:
6f:46:c3:99:2f:26:53:b6:1a:24:cc:1f:56:ac:2f:76:99:7f:
f3:5b:8e:68:d4:df:e5:d5:ae:ae:88:eb:e8:ec:a5:3d:fe:34:
f1:54:85:0b:f0:fa:d1:fa:0a:ae:74:7d:c4:51:62:40:aa:1f:
16:a7:81:ae:58:5b:73:f4:15:df:35:73:5e:b3:86:4b:eb:ff:
70:b6:62:03:c9:8c:4c:76:68:61:1e:3d:cf:b7:60:b7:70:33:
90:c3:65:09:bc:74:e5:29:f1:3b:a9:d5:20:07:d3:ad:f5:6d:
8e:ae:53:53:f8:33:12:7a:55:d2:e8:ac:56:90:20:9a:73:8f:
e2:19:ca:c2:f0:eb:51:07:67:8b:2d:25:d5:cf:f7:58:77:0c:
45:f4:e8:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfBfiNS/0UH1d7wBNMsTTNcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzM2MWZiYTg0MDkxNzRmYjNjNDgyYjhjYTI2ZjIzNWVi
ZDIyYzIwHhcNMjMwNDI3MDY1NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDc0NDJjN2FhMTExNGNlMjQ4ZTZlZDJjZGU0MTAzNDdiNjU1NzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYUeRrfhVDsXzEMuUtVcFkCm19GV
j/s0F3HkBGrmL+8WWoXM7pm61KdkHM37/a/wyujsAtuZ5cen5nVQpxLE+tmggCNA
mvYPsiHP2Qgqlx9KXFKktw2JJYoAR8CtY0Edb2e5u3/GmG/zMccf3webRTD/Dwb1
ucMV1d3X6pBf4QtJVDNXJTUbb0j67quXXhCT4/j+49KHqMJrQIz7UbXqHIWMGbFN
lQtYCZshJltytOBnhmb0eB/vjoVtgsC6bC98rD6LaFQE4OAhwSuNna2fKdBTAEQi
U10I/WaGXb2u1icDASN9cZ+yuB/oQmL02EXNDPLY6cjsKTyn9J3cQy3zhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFB0QseqERTOJI5u0s3kEDR7ZVdPMB8GA1UdIwQY
MBaAFDMzYfuoQJF0+zxIK4yibyNevSLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpOaC02aEFrWFQ3UEVncmpLSnZJMTY5SXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xMWUxM2YtNGNlYS00NGFmLTgxZjkt
YjJjY2NmMGVhZGFiLzEvVUhSQ3g2b1JGTTRram03U3plUVFOSHRsVjA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xMWUxM2YtNGNlYS00NGFmLTgxZjktYjJjY2NmMGVhZGFi
LzEvTXpOaC02aEFrWFQ3UEVncmpLSnZJMTY5SXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZHmMA0G
CSqGSIb3DQEBCwUAA4IBAQB1XYB9E+5w4bb4m/8+NjMKt7ktybz59g+emWVIijMI
P7i/1oYWIfKdCX+LfR0ROIRSLJYGdWltOqNb7BdsFXcPFF1S7ujIKZKHsrN3mTYk
iqrdRVRI5Pu9o21hP/9qEz+cidJ1CDaebuf4buNvRsOZLyZTthokzB9WrC92mX/z
W45o1N/l1a6uiOvo7KU9/jTxVIUL8PrR+gqudH3EUWJAqh8Wp4GuWFtz9BXfNXNe
s4ZL6/9wtmIDyYxMdmhhHj3Pt2C3cDOQw2UJvHTlKfE7qdUgB9Ot9W2OrlNT+DMS
elXS6KxWkCCac4/iGcrC8OtRB2eLLSXVz/dYdwxF9Ohs
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:32 2024 by rpki-client on console-ams.rpki-client.org