Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/ulbh0Eabn9kElkLl8XrrvSMMYUw.roa
File: ulbh0Eabn9kElkLl8XrrvSMMYUw.roa (raw, json)
Hash identifier: qQJ4mbLVJq7NlfNcY6NNeF+U2oSWxS/Wm81JFJPGbTY=
Subject key identifier: BA:56:E1:D0:46:9B:9F:D9:04:96:42:E5:F1:7A:EB:BD:23:0C:61:4C
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01875236C960A46748EFB9550CB86A5CE166
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/ulbh0Eabn9kElkLl8XrrvSMMYUw.roa
Signing time: Wed 05 Apr 2023 16:18:54 +0000
ROA not before: Wed 05 Apr 2023 16:18:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 46.19.68.0/24 maxlen: 24
46.19.69.0/24 maxlen: 24
37.220.84.0/24 maxlen: 24
37.220.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:36:c9:60:a4:67:48:ef:b9:55:0c:b8:6a:5c:e1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Apr 5 16:18:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba56e1d0469b9fd9049642e5f17aebbd230c614c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a3:06:61:18:16:34:a9:53:51:0e:e1:97:ab:
c2:32:f7:90:5a:93:fc:38:8a:6b:4a:2f:c9:a5:dd:
4b:d1:ce:1f:b6:49:a0:03:8b:39:05:59:75:e1:44:
4a:fe:53:02:99:27:bb:43:48:3f:a9:9a:4e:4b:ba:
99:3d:72:c9:d7:c8:03:ff:f1:12:f8:2d:95:3f:3b:
42:8a:05:2e:9f:29:e0:5c:22:36:12:ab:60:86:37:
e5:2d:1a:15:54:de:b5:f5:88:9e:4a:8e:cc:e7:ce:
17:1f:44:0b:84:3e:44:24:63:6f:71:f2:4d:72:03:
7b:49:1b:cc:b8:df:4e:ba:ad:f5:a5:0e:1f:9f:44:
a1:bc:8b:e2:35:82:fe:d3:9a:56:6c:f7:d5:74:84:
9a:f6:9e:2b:8e:e4:17:70:ec:32:78:b9:57:e9:13:
73:c7:83:cf:01:93:53:64:d4:0c:e4:c4:d4:10:99:
f4:b0:3d:88:ee:5c:88:38:c6:4c:08:0d:cc:90:8c:
3f:af:a4:15:b2:c5:70:1c:57:aa:5e:cc:45:bd:7f:
e4:c7:52:64:1e:74:8c:d5:d1:1f:b8:d0:d5:18:cb:
98:8c:b6:79:88:34:01:79:ff:a7:ee:b0:d1:a4:84:
b5:c6:97:d1:4c:dc:f5:f9:4d:08:26:ff:55:74:b1:
93:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:56:E1:D0:46:9B:9F:D9:04:96:42:E5:F1:7A:EB:BD:23:0C:61:4C
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/ulbh0Eabn9kElkLl8XrrvSMMYUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.84.0/23
46.19.68.0/23
Signature Algorithm: sha256WithRSAEncryption
11:16:aa:1d:4d:da:18:27:3f:80:b6:06:75:2c:e9:73:d1:e7:
9a:c6:94:13:32:24:cf:8b:a2:f6:cc:8b:4b:27:b4:82:2a:1a:
a2:8f:d4:16:32:fb:c1:f4:79:46:da:a8:b6:79:51:ed:5d:e2:
ff:e1:3b:2f:b4:c4:fe:ab:21:b2:a6:1e:7f:5c:77:f9:4e:e1:
6b:7d:5b:9a:fd:14:20:db:e3:05:9a:a2:99:c0:93:27:7d:19:
f1:7e:eb:32:15:8f:e4:67:c9:da:b1:1a:fc:ef:a8:93:3e:30:
2f:22:38:92:08:c3:b1:b6:82:68:d3:13:3b:78:bb:85:a4:ee:
0b:ff:8d:ad:2e:2b:ec:82:70:de:4b:83:6e:33:3e:78:0c:01:
86:3e:d8:42:de:8e:47:c2:6e:dd:c7:33:b5:85:b2:8f:79:63:
e9:34:bb:b8:43:0b:47:cb:de:5b:19:02:04:94:59:48:ac:55:
d5:9b:98:23:de:3c:57:de:a9:64:fa:cd:60:8d:5c:19:1a:46:
6c:1a:ad:06:27:22:00:9a:c4:9d:4e:ce:ef:c8:af:7b:22:9d:
a6:88:c6:12:10:09:68:c2:e3:cb:b3:e6:b2:cd:bb:fc:8e:9b:
46:a1:37:38:33:0b:3e:ee:cd:00:dd:27:d0:69:e4:0a:4a:2e:
23:88:0a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org