Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/umQ4hYow1Ty27-b6D4Men0miRF8.roa
File: umQ4hYow1Ty27-b6D4Men0miRF8.roa (raw, json)
Hash identifier: r42Cl5ojl5DGZHjAqkRIpBRjlWJJ4ba8D679wntXqHk=
Subject key identifier: BA:64:38:85:8A:30:D5:3C:B6:EF:E6:FA:0F:83:1E:9F:49:A2:44:5F
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 018DF9A7ED555929AB95DCC6AD415A7C37C8
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/umQ4hYow1Ty27-b6D4Men0miRF8.roa
Signing time: Fri 01 Mar 2024 10:55:48 +0000
ROA not before: Fri 01 Mar 2024 10:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215415
IP address blocks: 45.8.176.0/24 maxlen: 24
45.142.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 14:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:a7:ed:55:59:29:ab:95:dc:c6:ad:41:5a:7c:37:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Mar 1 10:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba6438858a30d53cb6efe6fa0f831e9f49a2445f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:96:17:c6:62:90:f0:ed:38:38:88:bf:36:
a3:3c:23:fb:86:11:02:b2:22:f3:fb:85:13:e1:01:
37:53:37:3d:e1:11:e1:c7:11:e9:22:5c:88:80:4b:
f6:c7:92:c7:18:d3:cd:9d:9f:5b:23:17:5e:b5:2f:
10:2e:49:91:60:aa:ce:c5:4d:88:68:cf:b7:b5:ff:
a1:bd:9e:1c:66:72:0d:b6:70:4b:27:94:32:54:ef:
0b:c0:34:ca:ea:14:da:80:88:13:20:a1:51:78:2c:
25:dd:4c:04:36:75:a6:17:d7:2f:ec:bb:a2:c2:b6:
37:c9:d8:70:f8:22:dd:80:46:f5:45:50:c9:38:38:
4e:37:1f:a5:1a:95:b7:52:6b:b4:17:79:63:9a:c4:
1c:13:31:0a:75:7d:5b:ae:18:1e:e1:9f:6b:fb:da:
35:05:e9:f9:41:23:85:7c:93:16:d3:2e:da:5a:09:
56:0b:5a:df:f8:9f:c5:a3:45:32:ef:21:1c:7c:fb:
6c:ef:8d:ac:11:92:45:ea:2b:70:21:e5:d8:32:45:
f2:cd:c5:53:84:18:d4:dd:24:09:8a:a5:90:58:50:
b9:e2:e5:e2:16:1e:f1:92:9f:2f:48:9b:37:f3:64:
f5:43:3a:b1:34:9e:54:99:2d:92:f1:b3:c6:fc:fb:
41:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:64:38:85:8A:30:D5:3C:B6:EF:E6:FA:0F:83:1E:9F:49:A2:44:5F
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/umQ4hYow1Ty27-b6D4Men0miRF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.176.0/24
45.142.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f2:e1:14:46:aa:68:1a:70:56:1f:70:12:32:45:62:fd:0a:
b5:0e:74:9c:bf:be:d3:20:96:5a:41:cb:5b:14:f0:5f:ab:ef:
8c:00:a7:74:d4:31:01:00:c6:77:c5:29:ba:c6:9c:86:35:cc:
1b:a6:b7:41:a1:fb:b1:4f:ec:d3:26:0c:1a:f1:13:d9:05:6d:
ed:0a:ca:51:ce:7f:b2:18:46:d9:a2:fa:65:6f:f1:b8:47:a6:
4c:b6:d3:2d:1e:a9:79:6a:dd:9d:67:d2:8e:ed:7a:33:14:ad:
70:89:62:bb:b1:06:70:79:15:95:99:ca:b5:59:e8:ad:4d:55:
82:59:95:04:10:f5:13:22:60:a0:02:7c:d2:d5:78:33:ec:51:
08:ca:0b:e2:34:05:09:06:53:1e:b0:f5:4a:0c:0c:9b:4a:26:
51:51:44:51:cb:62:dd:b5:81:51:e5:29:3b:ce:5e:c2:00:d8:
6b:7a:7b:1a:34:54:81:12:dd:0d:46:9c:15:70:7e:22:0b:ea:
7c:28:f2:99:55:cf:7c:03:29:57:89:fe:8b:13:81:c0:d1:a9:
b1:76:40:ab:dd:79:9a:c6:3f:06:5e:e9:77:ed:f0:e1:3e:4b:
a5:0d:de:ce:be:9a:ad:56:b2:a3:06:34:cf:e1:7d:c7:93:5a:
27:51:01:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 19:08:31 2024 by rpki-client on console.sobornost.net