Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/uYMeJ0nk04RKZZmRcHkopMtIbzk.roa
File: uYMeJ0nk04RKZZmRcHkopMtIbzk.roa (raw, json)
Hash identifier: aKuqskY3fbEUT0enYp08kSIU+89ZcRozTCFC3TrPHrw=
Subject key identifier: B9:83:1E:27:49:E4:D3:84:4A:65:99:91:70:79:28:A4:CB:48:6F:39
Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial: 018571BA04825BB0FEAEDCDCBA846E1F94AF
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/uYMeJ0nk04RKZZmRcHkopMtIbzk.roa
Signing time: Mon 02 Jan 2023 09:04:54 +0000
ROA not before: Mon 02 Jan 2023 09:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 85.92.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:04:82:5b:b0:fe:ae:dc:dc:ba:84:6e:1f:94:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Validity
Not Before: Jan 2 09:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9831e2749e4d3844a659991707928a4cb486f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:85:60:dc:76:11:b7:85:94:25:aa:3f:d6:
00:52:f3:ba:4b:0a:be:8a:ca:6a:b7:b6:51:09:61:
43:c1:a4:80:27:a2:80:62:c7:53:a9:c2:c4:fe:a0:
3d:25:c5:27:2e:af:d1:e5:f4:f1:75:9a:d3:00:13:
dc:a4:4a:27:dd:c9:d8:c0:c1:fa:61:83:75:70:df:
66:96:f5:53:df:92:67:ba:98:90:df:58:71:76:65:
53:00:ea:0b:eb:1c:4a:53:17:f3:b9:e9:65:bf:3a:
c3:7b:91:be:f2:3a:3c:ac:dc:27:01:f8:7a:1d:c1:
6f:ba:cb:6e:a6:0a:d2:d4:06:ca:29:f1:24:d5:e3:
d5:9a:94:22:b1:71:28:92:90:bb:4b:ac:5a:c7:c9:
e2:4e:00:33:57:c8:21:fd:93:18:f9:5b:11:e5:8f:
8a:a7:f8:ea:97:5a:97:9c:43:6e:b7:c7:4a:33:67:
d9:25:9e:50:c6:2a:15:04:d2:be:0a:4a:be:15:61:
68:4b:91:ec:1c:49:32:6d:42:25:b2:f1:13:b9:4a:
4f:f6:33:8e:5e:6d:52:61:0f:5e:85:2a:0f:b7:3c:
1b:ff:2a:92:73:be:a8:e1:fb:71:ee:b0:f4:74:81:
38:5d:b1:67:57:01:f3:60:f3:2b:2c:73:97:92:45:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:83:1E:27:49:E4:D3:84:4A:65:99:91:70:79:28:A4:CB:48:6F:39
X509v3 Authority Key Identifier:
keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/uYMeJ0nk04RKZZmRcHkopMtIbzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.101.0/24
Signature Algorithm: sha256WithRSAEncryption
19:72:b3:92:99:57:66:1c:4f:49:32:98:4e:c6:d4:0a:d3:ef:
36:08:7c:19:74:66:4a:a6:77:bf:08:e5:db:81:ce:65:e8:d3:
58:30:c0:ba:c7:4f:8c:60:d1:d2:da:5d:04:9f:0b:87:29:dc:
2d:6e:06:7c:0c:4d:51:ed:09:91:0a:86:e7:4f:2a:6b:40:9b:
66:06:78:74:b9:0e:fe:0a:05:bc:65:7c:43:bc:c3:3c:88:61:
8a:98:fe:cf:b7:4a:53:ad:d3:2b:c2:ab:77:4e:fd:1f:1e:1c:
ef:4f:3b:ec:8b:f5:50:a6:1e:68:2d:cf:2b:fd:21:35:d4:9d:
0f:8d:92:8f:b9:c3:21:ea:1d:02:79:ef:c7:ee:2f:fa:be:7c:
bd:bf:fd:96:51:d5:49:5d:8a:9b:55:65:ab:84:99:4a:85:ea:
6b:a4:0a:3f:08:e3:fb:05:46:a8:20:69:ae:fd:62:3a:9a:31:
a6:c2:0e:24:e6:38:54:e1:ac:7f:91:e3:83:91:6a:09:66:0e:
80:72:dd:a9:07:af:e3:9c:70:c4:74:09:fa:8b:cf:fd:c4:96:
bc:24:64:6b:26:b5:7f:8d:25:5c:4f:aa:08:3e:18:ec:3a:ac:
bc:f7:5d:09:e0:cb:f4:59:58:a6:f6:e0:dc:a2:65:6d:ab:14:
76:49:14:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:55 2024 by rpki-client on console-fra.rpki-client.org