Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/UBlViNNlMepGUx-8I4h3AdHfh_8.roa
File: UBlViNNlMepGUx-8I4h3AdHfh_8.roa (raw, json)
Hash identifier: u3pp9RuF+mK2NTwxWF8Y7+ybHnVv8tzDoce8O9ZDQts=
Subject key identifier: 50:19:55:88:D3:65:31:EA:46:53:1F:BC:23:88:77:01:D1:DF:87:FF
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 01856E6FCDA26CD46635A05CF887A150B20D
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/UBlViNNlMepGUx-8I4h3AdHfh_8.roa
Signing time: Sun 01 Jan 2023 17:44:58 +0000
ROA not before: Sun 01 Jan 2023 17:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199524
IP address blocks: 91.202.245.0/24 maxlen: 24
91.202.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 22 Feb 2023 14:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:cd:a2:6c:d4:66:35:a0:5c:f8:87:a1:50:b2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Jan 1 17:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50195588d36531ea46531fbc23887701d1df87ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:b2:16:19:1a:9f:e2:80:fb:f9:fb:a9:3f:
b7:16:0a:b0:d1:c3:e1:a4:81:fd:19:d1:ac:fe:9e:
fc:ac:8e:b9:be:31:48:63:64:5a:03:16:49:20:e6:
8e:6e:1c:6b:14:0b:4c:eb:05:bb:2f:a5:24:8c:55:
85:af:a1:15:12:12:e1:3a:df:fb:7b:35:fa:77:f9:
5c:25:c4:22:cb:76:72:04:4b:3b:62:e2:dd:3c:27:
bd:c5:8d:47:4e:26:cd:da:b4:4d:27:26:25:00:c9:
d3:54:c8:c5:28:07:f8:12:54:7a:2b:03:92:33:3f:
e6:a9:1e:72:66:e0:bc:91:ef:20:9d:5d:97:df:e8:
55:b0:2c:ad:49:bd:28:1d:9b:f9:f3:f1:a0:3c:79:
1f:64:ef:92:a2:e8:2f:4a:6b:61:d9:96:bb:16:aa:
64:3a:e4:4c:24:f7:89:1f:af:b9:fd:5f:cf:6a:ba:
26:14:a7:d5:1f:96:91:6a:27:90:be:89:47:67:81:
1b:3e:de:f2:bf:5c:1e:a6:82:3a:52:8c:cc:ce:ab:
a2:eb:16:cf:20:23:c9:d2:7f:b5:85:31:3f:e1:d5:
1f:65:94:09:d5:a8:a8:23:e6:13:4e:45:ec:89:4c:
47:d1:3f:37:7c:b8:3b:1e:c0:f4:dd:b2:9f:68:fc:
98:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:19:55:88:D3:65:31:EA:46:53:1F:BC:23:88:77:01:D1:DF:87:FF
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/UBlViNNlMepGUx-8I4h3AdHfh_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.245.0-91.202.247.255
Signature Algorithm: sha256WithRSAEncryption
9b:b1:35:ca:ff:91:ad:cd:a7:71:d3:3f:13:dd:06:69:24:ad:
b5:d3:01:d0:94:ac:d3:1d:67:bc:c4:31:fd:ab:a9:e3:83:20:
f4:eb:fb:88:ee:64:b7:5c:ca:d4:ee:c0:02:35:a4:2a:2b:58:
ac:1e:7a:c7:19:40:8c:5d:49:1b:f7:f2:52:0b:17:69:52:cf:
b4:d8:60:d0:2a:03:41:7f:30:65:51:ac:f0:09:6e:ed:05:55:
22:3b:7d:38:f0:13:e8:d3:38:b4:d9:ae:c3:df:36:f2:56:26:
f5:37:08:62:15:c5:dc:07:ec:4a:4c:2f:22:a9:16:6d:b1:65:
ce:44:ca:55:83:f4:62:43:6d:33:a1:3a:fe:d2:98:80:f8:59:
65:63:df:3d:22:82:4c:b4:df:ad:0c:3f:51:a0:b2:03:01:87:
69:05:3c:2e:4f:6d:75:40:61:6e:23:47:f2:7b:6b:02:30:7b:
71:cb:47:cf:d2:6a:ef:78:7d:ca:f9:4e:4d:fa:4f:ce:2d:90:
33:42:b8:ae:44:26:ca:a7:91:a0:46:3a:f2:8b:82:ff:c5:30:
2e:bd:21:56:71:54:2a:cc:7c:5f:c8:f6:7a:88:d2:84:40:42:
42:d2:24:ea:e3:7b:b0:cd:ab:48:b6:f6:6a:d0:8c:05:87:fb:
4e:11:da:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:23 2024 by rpki-client on console-ams.rpki-client.org