Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ugiJ6yg1U2h4srYBaDQ0GwCMJUs.roa
File: ugiJ6yg1U2h4srYBaDQ0GwCMJUs.roa (raw, json)
Hash identifier: yZr97quXSzw6hkHQlmPLGNIY6ib8ufh61NCPOVtyJ3g=
Subject key identifier: BA:08:89:EB:28:35:53:68:78:B2:B6:01:68:34:34:1B:00:8C:25:4B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81F0392FA3F0790F09D92DBAD8D3E3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ugiJ6yg1U2h4srYBaDQ0GwCMJUs.roa
Signing time: Sun 01 Jan 2023 13:25:10 +0000
ROA not before: Sun 01 Jan 2023 13:25:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48917
IP address blocks: 91.92.106.0/23 maxlen: 23
87.121.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:f0:39:2f:a3:f0:79:0f:09:d9:2d:ba:d8:d3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba0889eb2835536878b2b6016834341b008c254b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:8f:67:ed:4b:c5:26:dc:e0:c5:6c:7d:3a:
bc:bc:4a:ba:56:b6:a4:56:d3:19:ef:c7:05:61:12:
ab:a7:94:18:66:3e:1f:aa:5e:0c:44:5e:b0:61:44:
05:b4:8f:ac:4f:c2:40:04:2d:58:ae:02:9d:cf:59:
1f:3b:77:18:2f:c9:22:ae:7e:65:69:1a:ab:e8:fc:
9d:ba:b7:ba:04:b9:70:50:b6:bd:75:dd:cb:7b:2c:
74:ac:7c:7b:51:12:46:73:7c:31:86:7a:77:b0:c8:
b7:3d:73:f3:a8:3e:04:8c:ed:73:f1:4e:ec:24:b0:
35:5d:33:85:a5:9c:98:93:de:93:22:9e:0b:85:58:
94:94:e6:8b:88:2e:4d:09:d1:ab:52:97:2a:f5:e8:
b1:5f:7b:23:dd:16:67:40:3b:9b:99:fe:7e:f6:f7:
b0:ec:e6:b4:47:60:b7:bc:ff:93:dd:67:e4:83:72:
9c:ea:cf:f1:6f:83:24:ba:83:2a:67:c5:85:0d:5e:
a1:fd:7b:66:e9:b7:73:8e:39:3b:b4:39:c2:3a:8c:
f0:a0:b8:d2:02:34:0a:2d:8c:11:ad:68:db:59:a2:
2c:f9:3f:92:b7:5e:13:2c:f8:99:41:6f:01:36:91:
db:59:77:97:e7:24:ba:94:20:07:06:24:5c:c7:89:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:08:89:EB:28:35:53:68:78:B2:B6:01:68:34:34:1B:00:8C:25:4B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ugiJ6yg1U2h4srYBaDQ0GwCMJUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.119.0/24
91.92.106.0/23
Signature Algorithm: sha256WithRSAEncryption
47:7e:a6:7a:74:23:f6:21:fe:bd:a4:e2:c3:31:d1:ed:70:5e:
55:fd:58:02:e0:2c:d4:27:6c:29:29:9e:f2:a8:4f:63:46:9b:
ee:3e:3b:67:80:36:72:18:5b:a0:d0:24:f0:92:71:da:9c:e9:
7b:c0:88:e2:70:7e:f8:8b:7c:27:22:6e:91:73:81:0e:97:a4:
a6:93:28:93:ef:cb:63:92:d6:b0:e4:d0:8a:c2:61:ac:3e:8d:
61:2b:b9:34:f9:7d:67:11:34:47:20:e1:9a:d9:d7:6f:4e:8a:
51:bb:c7:db:03:4e:3f:b3:0a:0b:44:77:a5:48:7a:5d:19:08:
6b:24:78:21:d4:f4:03:9a:07:02:0f:4a:d6:e5:4d:01:6b:d8:
df:ff:9c:38:ac:95:38:41:44:f9:76:6d:97:e2:28:8f:1c:1d:
ef:d1:06:ed:e0:9c:a3:4a:13:35:cd:6b:dd:e8:9e:fa:fc:e4:
d7:7c:e2:c7:78:37:e7:51:ef:d4:66:df:72:a2:66:09:69:99:
52:19:0a:10:02:5c:59:8a:ea:e1:e4:ee:7c:43:24:98:8c:be:
c3:a1:9a:9a:bf:41:4b:a1:4d:2b:20:5f:cf:28:08:de:0e:fb:
bd:4f:ae:7f:e8:14:32:ba:14:98:0e:d1:d5:57:ad:f0:ec:24:
ba:76:8e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:49 2024 by rpki-client on console-fra.rpki-client.org