Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/uiK2Y5g2qqS8uSbjgW5E5H-UmbA.roa
File: uiK2Y5g2qqS8uSbjgW5E5H-UmbA.roa (raw, json)
Hash identifier: B5aIy7JSWmtg92AQ6b/DI14x8Y2kswIFji+kbBQl3qI=
Subject key identifier: BA:22:B6:63:98:36:AA:A4:BC:B9:26:E3:81:6E:44:E4:7F:94:99:B0
Certificate issuer: /CN=991c934e08f57a03ef4eba36b5a4da798a252207
Certificate serial: 018A8D2F6CC1904BE5B312831A698F9B7E8E
Authority key identifier: 99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/uiK2Y5g2qqS8uSbjgW5E5H-UmbA.roa
Signing time: Wed 13 Sep 2023 06:16:50 +0000
ROA not before: Wed 13 Sep 2023 06:16:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33930
IP address blocks: 193.104.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:2f:6c:c1:90:4b:e5:b3:12:83:1a:69:8f:9b:7e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991c934e08f57a03ef4eba36b5a4da798a252207
Validity
Not Before: Sep 13 06:16:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba22b6639836aaa4bcb926e3816e44e47f9499b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:9f:8a:d5:a6:f5:74:41:2e:bb:bd:eb:d5:
67:ae:fb:96:53:23:d3:cc:16:b1:97:d9:a1:6a:80:
1f:80:ed:6b:83:3a:62:ce:86:30:1a:95:7b:e8:68:
92:e0:d5:c2:87:6c:64:90:2b:b0:5f:e7:a2:4c:77:
5f:76:d6:42:64:24:14:3f:13:a9:07:96:57:80:8b:
a5:55:6e:6a:bd:71:a7:f7:91:95:14:74:b3:5a:22:
a4:3a:17:5e:5e:56:cf:d8:75:dc:79:c8:73:da:d7:
0d:8d:6f:f4:c9:b6:0f:f0:f0:cf:95:73:bd:b7:e8:
de:ee:7b:55:68:94:e6:a0:69:f6:8c:1d:57:0f:da:
ea:10:a0:00:27:43:76:c4:3c:df:7b:54:ac:65:ff:
87:21:af:84:a9:50:b1:1a:c1:04:b9:9f:3d:49:11:
be:c8:6d:62:27:5d:d3:bd:fd:c1:5d:86:14:04:ca:
31:6b:9e:9c:bc:fb:e4:9c:3b:79:82:00:4f:5d:a7:
01:36:2d:40:33:bd:c1:2c:6a:27:70:23:24:69:e8:
d4:43:14:92:64:47:cb:29:0b:60:43:d7:7a:90:f8:
a7:d5:c0:ed:3d:2a:eb:f2:2b:09:da:bc:71:ad:6b:
f8:87:e0:76:dd:d6:b4:f5:cd:1a:d7:31:db:39:12:
90:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:22:B6:63:98:36:AA:A4:BC:B9:26:E3:81:6E:44:E4:7F:94:99:B0
X509v3 Authority Key Identifier:
keyid:99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/uiK2Y5g2qqS8uSbjgW5E5H-UmbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.158.0/24
Signature Algorithm: sha256WithRSAEncryption
35:4f:74:8e:bc:32:8f:1e:dd:b3:e1:a0:14:f9:4f:28:49:3d:
4f:95:16:f4:6a:72:b4:4b:14:c6:cd:b5:57:ae:d0:87:ef:f6:
b6:04:74:1a:53:30:a0:09:e2:ab:3c:c4:2e:a0:bd:cc:1e:1f:
44:92:5b:e0:07:99:94:d8:03:05:3d:15:59:70:74:08:d0:be:
9a:b4:6a:ea:4a:bd:5f:d1:dd:0e:e4:f8:82:42:b7:2c:a6:94:
26:24:07:31:e4:da:df:72:6c:fa:45:2f:ac:64:04:9d:b5:75:
56:de:cc:ff:98:8b:1d:f8:67:86:98:8e:81:88:f0:a2:9c:3b:
a5:0e:8f:35:00:63:39:82:0d:16:98:78:0a:60:c1:09:1f:22:
24:b9:7e:7a:79:34:a4:2d:4e:2f:91:1a:ad:f2:e8:75:bc:44:
bb:8a:02:83:12:70:69:57:ff:ee:c9:f3:cf:62:25:22:ba:5b:
46:9c:43:dd:e3:c7:f6:7c:8a:8a:00:be:5e:b1:c7:a5:c4:6c:
6a:28:d1:74:e4:43:19:c1:ec:61:9a:a4:d8:ef:9d:eb:fa:d3:
18:4e:da:88:54:b9:47:0c:2a:20:25:6f:29:a3:5a:83:c7:4e:
f6:3c:f4:66:93:c1:8e:1c:79:bb:b3:4f:b9:3f:1e:06:f4:ec:
45:a6:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 12:16:37 2023 by rpki-client on console-fra.rpki-client.org