Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UyVSibBpJmuUVr4yvxeleyem6sw.roa
File: UyVSibBpJmuUVr4yvxeleyem6sw.roa (raw, json)
Hash identifier: tVwiID6t0Ost97S9L7HTtz3JWPEjnrVYI2rFoeyezhs=
Subject key identifier: 53:25:52:89:B0:69:26:6B:94:56:BE:32:BF:17:A5:7B:27:A6:EA:CC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185CAD8CE090D39FAEA9E7A9B324FBC3A0A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UyVSibBpJmuUVr4yvxeleyem6sw.roa
Signing time: Thu 19 Jan 2023 16:24:44 +0000
ROA not before: Thu 19 Jan 2023 16:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16097
IP address blocks: 84.54.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ca:d8:ce:09:0d:39:fa:ea:9e:7a:9b:32:4f:bc:3a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 19 16:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53255289b069266b9456be32bf17a57b27a6eacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:52:26:3a:44:bb:9f:53:2d:0f:a6:e2:d8:f3:
82:eb:c8:03:7a:33:21:46:23:c3:84:0b:8f:c0:61:
42:ad:fa:80:f4:db:1c:0f:45:12:c4:85:86:db:1e:
8b:60:5c:fa:ce:8e:cc:59:9d:7b:f6:70:12:41:d6:
b7:55:1b:1d:10:c9:6c:79:2b:26:01:70:08:04:29:
26:f3:d1:62:0b:37:10:a5:e8:a1:a2:8d:81:e1:ab:
af:53:ce:e1:86:1f:f1:64:6d:6b:43:f3:5b:b5:54:
97:c9:7e:ab:3f:7f:31:05:fd:86:9e:fb:53:ca:22:
e5:5c:10:8f:43:6e:8b:da:bc:a8:84:4c:95:ee:3d:
f3:58:ba:8c:3f:78:00:cd:4a:de:b2:d1:ed:74:c4:
4a:32:ba:5a:5b:e6:92:69:b6:58:a6:9c:af:69:d8:
d7:b1:90:e6:fa:75:e5:3e:3d:c8:68:17:9d:64:73:
6b:ca:c4:a1:63:f2:35:95:90:dd:eb:77:5f:fd:9d:
7e:e6:8e:b0:d3:b2:9f:f9:fa:0d:0f:98:81:69:9c:
b1:43:8f:cb:f8:53:94:cc:9b:22:ae:4c:2a:25:dd:
8e:44:06:01:99:a3:88:d8:e1:4a:57:ea:82:36:49:
4a:36:21:18:21:fb:3f:16:5c:14:0c:59:d6:5b:f8:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:25:52:89:B0:69:26:6B:94:56:BE:32:BF:17:A5:7B:27:A6:EA:CC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UyVSibBpJmuUVr4yvxeleyem6sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.48.0/24
Signature Algorithm: sha256WithRSAEncryption
30:3e:7f:f0:a8:ef:f9:d5:7b:26:fb:7d:de:c3:a3:53:4b:bb:
16:0c:b5:fd:44:63:a6:f5:1b:dc:6a:9b:fd:12:c6:ea:a2:eb:
85:68:7c:87:7a:a0:65:52:69:d1:9c:de:8e:af:e6:3d:fd:31:
a9:6f:4d:fe:62:f5:02:de:15:de:b7:58:39:48:d4:49:b5:6b:
44:c9:82:46:ce:3f:0e:22:17:95:8d:44:47:54:aa:7c:87:58:
e1:aa:5f:3b:87:c8:84:d8:67:31:87:87:89:1e:81:d9:a1:ed:
f7:40:87:4b:2c:0a:b7:93:a5:cc:37:ad:cc:f6:e4:37:bb:d8:
e9:fa:27:db:a6:75:39:dd:8c:28:71:a3:f6:aa:5d:9b:4f:da:
f1:c3:37:5d:0f:6f:12:f3:55:bd:17:04:e0:f0:2f:56:3d:ac:
21:a7:0c:60:83:0f:7c:c1:25:8b:01:21:d5:08:f9:12:08:47:
29:5e:60:2b:af:c4:68:01:43:c0:39:d0:25:36:a6:5c:7a:7e:
9f:57:81:68:0f:be:e4:f7:59:81:10:f3:76:3e:06:17:e2:36:
3b:88:4f:90:7e:0b:ab:db:dd:01:66:42:b2:9b:56:74:55:32:
a2:76:50:2c:57:67:85:b7:64:03:a1:ad:c1:2f:91:91:fd:2e:
d6:11:2b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:11 2024 by rpki-client on console-ams.rpki-client.org