Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/uCin-n_xOpntIXjXuTglbHKwqKw.roa
File: uCin-n_xOpntIXjXuTglbHKwqKw.roa (raw, json)
Hash identifier: boXeOxOIvogzFLP68ICl78eDOdTSlRliqhaDLqZaeuU=
Subject key identifier: B8:28:A7:FA:7F:F1:3A:99:ED:21:78:D7:B9:38:25:6C:72:B0:A8:AC
Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial: 018570302FD280F730C38D9279D5587110A7
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/uCin-n_xOpntIXjXuTglbHKwqKw.roa
Signing time: Mon 02 Jan 2023 01:54:44 +0000
ROA not before: Mon 02 Jan 2023 01:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49367
IP address blocks: 176.105.252.0/24 maxlen: 24
176.105.254.0/24 maxlen: 24
2a0d:c740:1c::/48 maxlen: 48
2a0d:c740:1a::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:2f:d2:80:f7:30:c3:8d:92:79:d5:58:71:10:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Validity
Not Before: Jan 2 01:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b828a7fa7ff13a99ed2178d7b938256c72b0a8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:16:f9:d9:dc:84:73:45:1c:e5:67:a4:50:
c6:44:ea:12:bd:20:20:25:5f:37:dd:4a:0c:a8:d2:
1d:11:df:0a:e0:94:c4:5f:74:99:f7:30:dc:2f:fd:
87:3d:45:06:2c:ad:62:ab:39:1e:7d:55:a1:36:39:
33:f0:cb:78:9e:cd:5e:09:4b:fa:d8:d7:a5:24:50:
a1:11:32:ca:97:ab:52:bb:ae:3b:d6:9d:7d:2a:17:
0d:31:78:30:f2:20:75:fe:03:a3:ca:4f:d0:ab:38:
72:e1:c3:ef:27:84:99:63:ea:d4:f7:37:62:09:8d:
36:82:02:81:20:20:ad:05:71:ea:c2:9d:11:ba:00:
24:29:12:cd:3e:29:3b:2d:aa:68:35:62:9e:07:8f:
93:8e:c1:cf:ee:fa:bb:e4:bb:c1:4f:6c:71:80:4d:
6b:8e:dd:1b:c9:27:32:3e:44:bd:8f:cd:08:aa:11:
9f:30:c4:7c:3d:ca:b4:68:01:1f:04:d3:5f:e5:8c:
be:68:6d:b2:3a:6c:e1:43:66:1a:91:34:8d:14:8c:
ef:ff:ae:c1:09:29:17:36:00:6f:2a:3c:ab:17:4a:
84:1c:6c:5c:ea:81:aa:10:11:f6:66:2d:3d:2d:67:
86:a2:18:35:a8:0d:41:1e:24:6d:ca:39:de:c1:63:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:28:A7:FA:7F:F1:3A:99:ED:21:78:D7:B9:38:25:6C:72:B0:A8:AC
X509v3 Authority Key Identifier:
keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/uCin-n_xOpntIXjXuTglbHKwqKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.252.0/24
176.105.254.0/24
IPv6:
2a0d:c740:1a::/48
2a0d:c740:1c::/48
Signature Algorithm: sha256WithRSAEncryption
92:6d:32:6e:45:eb:e0:22:a1:92:4e:96:0f:ea:2c:9b:aa:81:
67:2f:8e:1e:7b:32:93:8e:cd:91:b4:e9:be:b1:9d:5e:e2:8b:
2d:05:64:43:e8:4d:c1:0e:72:90:4a:11:64:4e:39:d7:45:bc:
fa:c1:56:32:2d:0a:9b:5a:31:ad:de:91:ee:b4:57:12:94:d3:
44:d2:ac:d7:47:ec:d6:ce:8b:77:0f:21:50:59:95:75:ce:0b:
a2:f4:13:a3:10:68:a0:35:cc:8f:af:f1:0f:77:bb:80:73:6d:
d3:32:33:da:ec:4b:45:6d:01:8c:0e:16:10:de:60:3d:8a:aa:
60:99:6c:14:66:84:d3:fd:70:6f:8a:3b:00:f4:95:b8:e8:b6:
b9:35:84:7e:e4:6c:7b:01:e4:35:c1:03:27:eb:2f:3c:4c:89:
9b:60:73:19:56:5d:30:5e:23:bf:fa:19:36:c0:b4:ce:8b:f7:
b5:bc:e3:8a:1a:96:8f:65:f0:c9:73:05:d1:2c:e6:9f:37:ba:
1c:83:01:70:1e:f0:52:a7:4b:8f:ec:01:ff:d1:9d:00:56:a6:
b6:0f:56:a2:cb:f1:16:ca:52:00:2b:40:8c:82:6b:88:14:09:
af:24:dd:73:bc:89:55:3a:d4:9c:0f:6c:c8:19:bd:ca:53:a7:
1e:86:48:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:07 2024 by rpki-client on console-fra.rpki-client.org