Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uHvrp8Ulum7YyrHUVhYEdjP3JvM.roa
File: uHvrp8Ulum7YyrHUVhYEdjP3JvM.roa (raw, json)
Hash identifier: q753x+TclMOVj/jMevjyFqhxc90QibMjv9qoNHnqoBI=
Subject key identifier: B8:7B:EB:A7:C5:25:BA:6E:D8:CA:B1:D4:56:16:04:76:33:F7:26:F3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B8B513267C5E2521E9C12BF3EF910FD2C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uHvrp8Ulum7YyrHUVhYEdjP3JvM.roa
Signing time: Wed 01 Nov 2023 14:37:16 +0000
ROA not before: Wed 01 Nov 2023 14:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49716
IP address blocks: 194.55.227.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:51:32:67:c5:e2:52:1e:9c:12:bf:3e:f9:10:fd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 1 14:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b87beba7c525ba6ed8cab1d45616047633f726f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:11:12:4b:4f:6f:65:ff:c1:d1:88:61:bd:7d:
9e:e2:bd:47:c3:e7:85:90:69:d2:bb:cd:73:86:d8:
85:7f:7c:13:5f:6d:d2:fc:ca:68:33:c4:29:8e:62:
12:16:d1:b6:e9:d0:c6:da:60:d2:1c:b3:e6:89:39:
d0:b5:16:ca:c9:70:61:e0:96:db:22:7c:50:e7:a1:
3f:67:c1:3a:09:49:d8:08:c2:3c:fe:32:f9:00:9a:
73:c2:8a:b4:14:af:85:21:b0:9f:d9:1e:45:9f:77:
76:06:9d:54:13:c4:b8:02:fb:63:60:fe:55:8d:0d:
b6:4c:45:14:3a:78:75:90:10:b0:48:11:7b:b9:10:
87:a5:f3:63:cd:15:21:fd:fd:15:b4:23:5a:66:70:
21:9a:c9:c1:62:ec:0f:36:9a:2d:19:ad:3a:de:f6:
49:c4:f2:e3:e8:8e:4c:6c:7a:0a:9a:7a:cc:67:35:
33:eb:14:cf:31:5b:7a:a4:13:d4:59:0b:18:47:9f:
94:80:48:c9:ab:23:25:eb:b3:a5:b1:1e:1c:a7:86:
3d:1a:e4:ef:ae:e2:89:a8:a2:2c:d0:12:8d:8a:bf:
36:96:1e:c6:ee:bc:dd:6e:23:03:58:fe:55:c2:16:
29:6d:8a:78:bd:04:ee:57:75:95:25:6a:22:a6:54:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7B:EB:A7:C5:25:BA:6E:D8:CA:B1:D4:56:16:04:76:33:F7:26:F3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uHvrp8Ulum7YyrHUVhYEdjP3JvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
194.55.227.0/24
Signature Algorithm: sha256WithRSAEncryption
82:8d:ed:92:57:81:1e:4e:c7:76:44:1a:fb:82:3e:90:52:c7:
26:8b:86:67:5c:da:6c:3a:81:b5:17:f2:3f:a1:09:2b:cb:6a:
8e:86:db:18:3c:4e:b0:35:8b:1a:19:5a:c5:f0:64:4a:82:bf:
03:ae:3b:9e:31:a6:82:1e:7e:20:0c:32:ec:a9:2b:b3:06:72:
6a:d2:e0:e3:f0:90:cc:65:95:f4:7d:b6:21:0b:26:06:71:eb:
9c:cf:8e:e9:4e:d8:fb:a7:3b:d1:eb:eb:c5:27:f6:ac:2e:8d:
25:3b:44:3d:13:6c:21:0d:95:f4:70:fc:a2:07:df:46:73:ee:
68:c2:23:a6:0d:d6:af:a4:cb:b7:a4:ff:b0:e2:59:cd:97:d3:
78:cb:71:ad:75:09:a7:e8:91:01:64:88:4e:a7:9a:da:12:77:
75:46:7b:f0:03:a8:e7:79:f5:f9:da:33:25:d4:ab:33:8a:97:
de:31:c8:e8:59:4a:d2:ff:90:26:37:2d:8f:9e:d7:81:30:3a:
68:52:c4:4d:51:6e:a5:0e:95:61:b9:b0:63:65:63:78:aa:52:
27:6b:1c:09:9e:d4:b3:93:b4:97:0f:cf:e0:51:af:be:9b:a1:
31:4f:0f:05:e3:ba:ad:5a:d7:0d:f0:de:90:12:80:48:02:11:
90:dd:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 07:08:21 2023 by rpki-client on console-ams.rpki-client.org