Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/uCJbqIQaYk8JXdbOEpvm9tMgoJA.roa
File: uCJbqIQaYk8JXdbOEpvm9tMgoJA.roa (raw, json)
Hash identifier: S25fgS696yrQc8NTQVlaolHYqmBVB7QwLd66874rjNA=
Subject key identifier: B8:22:5B:A8:84:1A:62:4F:09:5D:D6:CE:12:9B:E6:F6:D3:20:A0:90
Certificate issuer: /CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Certificate serial: 018570D4F79C90985E1E487BFE83D9E16A9C
Authority key identifier: 27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/uCJbqIQaYk8JXdbOEpvm9tMgoJA.roa
Signing time: Mon 02 Jan 2023 04:54:43 +0000
ROA not before: Mon 02 Jan 2023 04:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205780
IP address blocks: 185.206.98.0/24 maxlen: 24
185.206.96.0/24 maxlen: 24
185.206.97.0/24 maxlen: 24
185.206.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d4:f7:9c:90:98:5e:1e:48:7b:fe:83:d9:e1:6a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Validity
Not Before: Jan 2 04:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8225ba8841a624f095dd6ce129be6f6d320a090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5b:d0:39:9c:a2:06:db:72:3c:91:b8:f1:55:
8b:c5:18:fc:1a:14:4b:65:9a:af:15:59:c7:90:f0:
39:af:91:93:60:d6:76:00:23:29:aa:2d:d4:6b:2d:
f9:8e:f0:3d:85:6b:3e:8d:39:16:80:19:31:68:22:
e7:27:32:e4:81:d2:cc:1e:a1:91:e7:cf:ab:d4:05:
12:26:f5:f6:65:37:85:d9:e3:1a:80:59:bc:fa:f5:
fe:3f:18:5a:8e:81:45:d5:87:5a:e5:f3:9f:51:c5:
30:bd:5b:ea:73:45:89:a0:5c:39:1c:d1:02:7c:ec:
07:97:99:5c:09:99:ea:4f:a4:96:8f:5e:82:3e:6c:
e0:38:07:ba:fa:8a:21:82:dd:00:f4:a6:b1:a4:89:
84:d5:d3:d4:71:7f:f8:3e:3a:bf:65:7d:95:0e:31:
a4:27:fc:03:0e:d5:8a:2b:3e:1b:45:b7:be:e9:2f:
ea:85:56:20:5c:c4:63:b8:98:a4:5d:78:f2:dd:72:
01:59:d1:41:b5:d9:b3:c8:b0:fb:2f:c6:4d:16:37:
ed:bb:1a:ed:16:de:b1:cf:53:f6:53:1e:e7:d6:4c:
f2:f6:37:e1:bd:6b:01:50:b8:4a:e5:44:d8:60:1b:
2c:86:5d:9a:fa:59:f0:fe:a4:fe:66:71:98:e7:9d:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:22:5B:A8:84:1A:62:4F:09:5D:D6:CE:12:9B:E6:F6:D3:20:A0:90
X509v3 Authority Key Identifier:
keyid:27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/uCJbqIQaYk8JXdbOEpvm9tMgoJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.96.0/22
Signature Algorithm: sha256WithRSAEncryption
10:e1:5d:cd:94:c8:87:ab:97:21:26:50:12:90:a7:8c:3c:f1:
b8:90:b6:10:e9:d4:4c:92:10:2c:9d:ac:6f:05:3f:b2:f6:e8:
ba:e7:86:db:4e:d3:70:d9:db:4f:20:5f:e6:c6:a5:f0:ed:07:
62:46:d1:d3:6d:b8:40:40:46:49:06:6c:11:92:4a:ad:3a:b9:
a1:d3:4f:96:7a:97:23:0f:7f:88:a4:8b:1c:12:35:a9:a2:5b:
2d:9a:ea:27:f2:b5:ff:37:88:3b:74:d6:a2:2f:92:3e:12:2b:
d7:d9:28:30:d9:49:dd:07:85:4b:36:d4:e7:13:c9:62:65:16:
e8:1c:ff:b9:47:d5:fb:80:ba:d0:58:3a:23:f8:2c:51:c5:ec:
61:4d:6f:f6:44:ea:d6:16:88:47:1b:d3:89:74:ce:88:c7:6f:
62:4c:f6:d2:64:4c:7c:b1:da:ae:9c:45:53:bc:e0:49:3b:dc:
67:36:9f:49:ca:bd:9d:81:86:b4:0a:e4:ea:af:5a:b6:e3:22:
29:90:ad:04:bb:40:41:db:04:e6:57:02:c8:73:61:5a:9e:9f:
ea:c1:67:e9:e2:df:61:d5:9a:d2:66:42:31:b3:77:57:0b:a3:
92:89:a8:09:4b:8f:32:72:2d:6d:1a:05:b5:25:0f:d0:f4:7a:
b7:0a:d6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:51 2024 by rpki-client on console-ams.rpki-client.org