Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/uXr93A76xsnrdSCOqVDGc77MOUY.roa
File: uXr93A76xsnrdSCOqVDGc77MOUY.roa (raw, json)
Hash identifier: ZQIKCrsQ68PpmE7OGUiiw34vyCdlPe7g1SAm179yVA4=
Subject key identifier: B9:7A:FD:DC:0E:FA:C6:C9:EB:75:20:8E:A9:50:C6:73:BE:CC:39:46
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0186CC02FD96B9BC82294F367F93D9600194
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/uXr93A76xsnrdSCOqVDGc77MOUY.roa
Signing time: Fri 10 Mar 2023 14:53:13 +0000
ROA not before: Fri 10 Mar 2023 14:53:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51248
IP address blocks: 81.25.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:02:fd:96:b9:bc:82:29:4f:36:7f:93:d9:60:01:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 10 14:53:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b97afddc0efac6c9eb75208ea950c673becc3946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:da:4f:08:e8:ec:30:a3:f8:1d:40:36:25:a9:
b8:ce:52:0c:ee:66:e3:b2:59:98:ba:fb:cb:09:e2:
dd:5d:dc:8d:a0:9e:61:5b:04:5f:7e:fc:5a:09:63:
34:36:4f:38:e2:84:7f:13:d5:b8:33:9c:a9:4f:fa:
8c:a6:2a:54:28:6d:9f:79:a1:ad:c3:ed:81:d1:64:
f9:51:fa:16:4b:6e:60:d2:db:b3:72:de:dd:d7:21:
47:81:d0:0e:79:29:ce:98:93:f0:24:2e:7f:a7:dd:
da:27:95:5e:76:c8:60:d3:a4:04:23:60:7c:2c:21:
36:20:76:13:99:1d:dc:4f:08:28:8a:3a:64:c8:44:
fe:05:f2:14:09:d9:5f:90:2d:e8:30:e2:5d:3e:68:
d9:eb:e2:1b:86:f1:c0:f8:db:dc:1b:c5:8d:c2:0b:
c4:1f:55:ef:39:25:d9:a0:fc:26:a7:8c:3b:7e:42:
f5:05:a6:97:5e:76:e7:d9:88:9a:48:31:08:72:da:
22:ec:0c:a6:1f:1c:cf:a5:26:e8:b1:e3:cf:89:bd:
68:42:68:89:c6:c8:fa:c4:74:c4:ee:6d:18:e5:c6:
76:27:b9:bb:52:b5:f9:55:a4:c3:6e:78:04:9c:7d:
54:94:e7:d8:32:66:ed:90:a6:d0:22:f9:e5:7e:1d:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7A:FD:DC:0E:FA:C6:C9:EB:75:20:8E:A9:50:C6:73:BE:CC:39:46
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/uXr93A76xsnrdSCOqVDGc77MOUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.71.0/24
Signature Algorithm: sha256WithRSAEncryption
58:30:5c:fb:f2:a2:da:68:6f:96:1c:bb:f7:ef:7a:eb:1d:25:
41:c1:84:65:5f:24:ce:3c:64:58:6f:49:61:85:d8:d3:8c:88:
20:0f:ef:d2:b0:2b:37:3b:f2:bc:99:e2:e3:f9:2a:36:41:c0:
55:03:b8:80:bb:71:b4:14:2b:a4:52:a2:e3:f8:72:c6:7e:91:
23:96:76:4c:7b:48:c1:11:e4:fb:b0:ab:93:5e:39:8d:aa:e0:
37:41:ba:c4:ac:d2:89:84:71:c8:47:54:a4:ba:46:89:e5:9e:
6a:a2:1b:2b:47:b1:80:60:3c:cb:3d:d6:0c:3c:83:b5:7a:1d:
91:be:6e:0a:f1:8f:bf:f1:01:1c:fe:97:78:b7:32:1c:a5:6f:
87:84:68:8c:8e:bf:03:f8:c8:4d:18:8e:fd:58:35:06:c8:15:
75:72:5a:6e:ef:78:12:fa:ff:ba:3c:19:f8:2d:c0:bc:38:60:
47:c6:5e:b6:c8:39:61:b5:21:5c:ea:b3:3c:e7:e8:fb:3d:89:
c9:06:e9:77:5e:52:85:71:e5:a2:ef:cd:0b:a9:b0:f6:18:f7:
39:dc:a1:fd:7a:fc:c0:a2:89:13:c6:bf:8f:14:b0:28:6e:e5:
32:cc:c7:53:08:22:06:ba:99:f3:3f:92:f2:5e:44:40:5a:b9:
3e:ea:b3:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbMAv2WubyCKU82f5PZYAGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjMwMzEwMTQ1MzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTdhZmRkYzBlZmFjNmM5ZWI3NTIwOGVhOTUwYzY3M2JlY2MzOTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdpPCOjsMKP4HUA2Jam4zlIM7mbj
slmYuvvLCeLdXdyNoJ5hWwRffvxaCWM0Nk844oR/E9W4M5ypT/qMpipUKG2feaGt
w+2B0WT5UfoWS25g0tuzct7d1yFHgdAOeSnOmJPwJC5/p93aJ5Vedshg06QEI2B8
LCE2IHYTmR3cTwgoijpkyET+BfIUCdlfkC3oMOJdPmjZ6+IbhvHA+NvcG8WNwgvE
H1XvOSXZoPwmp4w7fkL1BaaXXnbn2YiaSDEIctoi7AymHxzPpSbosePPib1oQmiJ
xsj6xHTE7m0Y5cZ2J7m7UrX5VaTDbngEnH1UlOfYMmbtkKbQIvnlfh1UdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLl6/dwO+sbJ63UgjqlQxnO+zDlGMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvdVhyOTNBNzZ4c25yZFNDT3FWREdjNzdNT1VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURlHMA0G
CSqGSIb3DQEBCwUAA4IBAQBYMFz78qLaaG+WHLv373rrHSVBwYRlXyTOPGRYb0lh
hdjTjIggD+/SsCs3O/K8meLj+So2QcBVA7iAu3G0FCukUqLj+HLGfpEjlnZMe0jB
EeT7sKuTXjmNquA3QbrErNKJhHHIR1SkukaJ5Z5qohsrR7GAYDzLPdYMPIO1eh2R
vm4K8Y+/8QEc/pd4tzIcpW+HhGiMjr8D+MhNGI79WDUGyBV1clpu73gS+v+6PBn4
LcC8OGBHxl62yDlhtSFc6rM85+j7PYnJBul3XlKFceWi780LqbD2GPc53KH9evzA
ookTxr+PFLAobuUyzMdTCCIGupnzP5LyXkRAWrk+6rNU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org