Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/uZQSKZxbCfep8d7gQSPj3WJWcNs.roa
File: uZQSKZxbCfep8d7gQSPj3WJWcNs.roa (raw, json)
Hash identifier: 8tDvR6RD97QZSu9OcFGSpajhDNl0HBwK/L4WFMXKkQM=
Subject key identifier: B9:94:12:29:9C:5B:09:F7:A9:F1:DE:E0:41:23:E3:DD:62:56:70:DB
Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial: 0187B2F398BE0026B87BC9B5836D92AEB614
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/uZQSKZxbCfep8d7gQSPj3WJWcNs.roa
Signing time: Mon 24 Apr 2023 11:08:41 +0000
ROA not before: Mon 24 Apr 2023 11:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211451
IP address blocks: 91.234.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:f3:98:be:00:26:b8:7b:c9:b5:83:6d:92:ae:b6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Validity
Not Before: Apr 24 11:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b99412299c5b09f7a9f1dee04123e3dd625670db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5a:87:0d:62:d8:3b:74:59:4e:63:8a:50:7e:
24:6e:21:b5:56:b7:69:2e:44:10:c2:02:f9:9b:dd:
fe:8c:1b:75:85:b5:89:f8:92:28:4f:1a:81:00:e1:
bb:5b:ee:b5:66:c9:2e:0f:29:52:20:98:d6:0b:c1:
2b:0a:a3:d2:72:c9:d5:c2:e8:4d:5d:22:fc:ff:97:
58:54:91:90:24:d8:4e:c9:a1:65:01:65:ae:dd:c8:
89:ce:3f:98:14:68:d4:8a:dd:62:f1:82:f0:b2:47:
2b:1e:b0:e5:8d:4b:d9:7c:57:9d:5d:9c:98:4b:f0:
e2:05:c7:b4:fe:39:6e:a0:aa:81:19:a3:c9:34:11:
3c:24:7b:0f:3b:b9:a8:7c:41:c0:f2:c3:06:c2:db:
97:53:01:9a:15:86:49:fb:7b:67:5a:8f:3f:74:09:
d5:13:d4:3c:f1:59:5c:33:b1:86:15:53:37:50:15:
8a:a5:02:33:62:f1:38:62:93:31:e2:1a:92:e9:f5:
79:f1:60:95:da:a1:a6:e8:13:a7:00:9d:60:02:d0:
2b:f2:9f:b2:51:fd:04:b1:b7:4d:ce:29:5d:fe:2b:
7a:7c:17:d5:53:9d:7b:ef:ec:b1:75:31:64:f3:93:
d1:ce:c7:6e:8e:48:cf:81:ad:3f:1b:fc:51:07:d9:
35:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:94:12:29:9C:5B:09:F7:A9:F1:DE:E0:41:23:E3:DD:62:56:70:DB
X509v3 Authority Key Identifier:
keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/uZQSKZxbCfep8d7gQSPj3WJWcNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.233.0/24
Signature Algorithm: sha256WithRSAEncryption
57:52:43:38:44:0e:e3:52:80:1a:ce:39:d5:d1:6e:f2:13:14:
ed:ee:e6:8f:09:51:b5:78:5d:78:4b:1b:dc:fd:d8:1c:c8:b2:
02:f5:6d:0d:ad:fa:3f:d6:d2:f0:c1:8f:50:2c:dc:ce:56:8b:
6d:20:aa:e4:28:07:73:91:35:27:4e:d7:6f:14:fb:76:93:ca:
5d:19:84:2d:9b:6d:3f:9c:9f:e3:35:54:c8:9b:50:22:b6:23:
9c:c7:23:fd:3b:1c:2b:5a:cc:40:ce:0e:d4:7e:7d:ac:ad:29:
90:1e:6e:e4:30:a4:dc:9f:3c:ae:45:0d:02:16:6d:20:aa:ae:
1f:46:b9:88:32:74:ba:72:1e:58:fb:b0:39:11:2e:86:6f:41:
bc:c6:7f:19:4b:f7:e1:c8:0e:42:61:f4:bb:dd:c5:e1:58:de:
4c:60:fb:44:4f:e6:a3:dc:1b:a3:b7:3e:70:8b:b5:b8:9a:03:
c3:eb:96:94:b5:f8:9d:cb:28:84:da:4b:6a:30:7e:83:61:ca:
3f:8b:f7:e3:88:f5:0f:01:b8:35:ff:93:93:aa:18:40:c7:18:
a5:7f:6b:62:06:1c:bf:e0:7b:19:b1:39:62:10:2a:ea:22:0a:
fc:a3:c0:7a:2e:89:2b:dd:bd:23:ef:79:a1:c4:5b:53:fb:1f:
28:08:a8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:47 2024 by rpki-client on console-ams.rpki-client.org