Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/UWIFoihXw4CkJtgDQF4b7-ZmA4M.roa
File: UWIFoihXw4CkJtgDQF4b7-ZmA4M.roa (raw, json)
Hash identifier: hXrOv9wPn6dU62zHTyTcp5ysOW5i59yrA6I2bvL+ZOQ=
Subject key identifier: 51:62:05:A2:28:57:C3:80:A4:26:D8:03:40:5E:1B:EF:E6:66:03:83
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 018E22FB2CFF855DDAFFB0271097CD49BBA9
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/UWIFoihXw4CkJtgDQF4b7-ZmA4M.roa
Signing time: Sat 09 Mar 2024 11:31:10 +0000
ROA not before: Sat 09 Mar 2024 11:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206314
IP address blocks: 45.89.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 11:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:22:fb:2c:ff:85:5d:da:ff:b0:27:10:97:cd:49:bb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Mar 9 11:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=516205a22857c380a426d803405e1befe6660383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:57:a6:0a:7d:de:ed:92:73:fd:48:f2:6b:
02:82:ef:fd:97:6a:7d:e0:d5:a8:67:5d:a7:cc:80:
0a:1e:df:50:c1:4b:1c:4f:bc:b2:9b:24:b6:af:36:
46:f8:60:40:2a:23:99:5b:e6:7f:f6:d4:11:65:61:
a6:ed:1c:26:f8:63:73:18:b9:4c:32:95:11:ac:a6:
8d:c6:8c:e0:5f:58:a9:d2:5d:27:49:f5:bc:0f:44:
7c:a0:6c:14:15:d9:30:35:e9:92:3b:72:b7:e6:39:
e9:40:7c:c3:ee:d0:93:98:46:a7:30:d4:a4:75:5d:
18:60:ad:d9:f3:89:d0:92:24:6d:6b:7c:54:97:84:
12:a4:a8:ca:a9:5a:1d:3a:44:d8:0b:55:8b:fc:b0:
da:74:33:82:7f:07:8a:74:d3:ff:15:42:bc:0f:95:
04:fe:ed:4c:9d:08:0e:9a:1b:5e:0d:e9:fb:c9:a2:
aa:49:a5:a6:ad:5e:e9:33:a7:c2:a0:9a:ed:b2:76:
61:9c:1a:54:96:ec:2e:e9:b3:7e:71:c6:69:b0:b2:
2a:aa:a4:0e:e7:d5:7b:ad:62:92:86:39:c3:35:47:
7a:11:25:c9:c6:ef:44:df:69:58:90:90:43:d6:76:
0e:43:41:ec:49:a9:a9:ae:c0:66:cd:50:13:02:98:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:62:05:A2:28:57:C3:80:A4:26:D8:03:40:5E:1B:EF:E6:66:03:83
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/UWIFoihXw4CkJtgDQF4b7-ZmA4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.10.0/24
Signature Algorithm: sha256WithRSAEncryption
59:bd:8c:dd:ce:a0:5d:1b:41:8c:98:61:50:88:5c:4f:d0:23:
18:92:31:aa:e6:9c:35:43:8f:79:f7:79:85:99:3b:a5:8c:4f:
45:52:d8:c8:97:35:71:53:d4:71:5e:29:6f:33:5a:11:6b:2b:
48:0e:61:e7:3e:cc:44:98:fc:14:cc:7b:06:7c:73:5a:ec:08:
25:e2:09:d9:a6:0c:1d:26:54:35:16:2a:6e:d6:aa:c7:f0:e1:
e7:0f:61:a9:bb:6f:25:37:c5:c3:d6:18:02:60:f2:84:b0:3f:
97:ac:c3:76:e0:a1:2c:77:56:55:db:46:cf:49:42:25:01:f8:
8f:d8:1d:2f:8f:cf:a7:e8:f5:6d:6b:35:1b:1e:c9:16:4b:69:
0f:c9:0b:fa:64:19:35:db:99:3c:33:71:12:51:29:69:f3:5c:
13:cd:2e:c7:22:2d:8b:85:66:f9:41:aa:bf:ca:f0:9a:ae:83:
7e:06:34:49:2e:cf:4e:77:40:63:20:32:81:24:c2:2a:c3:55:
3e:b1:ea:f9:56:19:51:7e:b4:14:3f:b3:c3:fb:1d:b0:91:28:
95:a5:f5:3b:22:a0:00:f1:47:0a:e1:44:c6:4f:24:07:97:1f:
46:25:e0:8d:8e:41:f7:27:de:01:eb:00:44:68:89:67:75:47:
a2:c6:86:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 15:17:45 2024 by rpki-client on console-ams.rpki-client.org