Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/UxxT7qfJM7nCHIG7cDMKDL4hYZc.roa
File: UxxT7qfJM7nCHIG7cDMKDL4hYZc.roa (raw, json)
Hash identifier: LAFnt5pCnKamMVuSRtVWE00t3UztBbW1ZK6hdRBwPDw=
Subject key identifier: 53:1C:53:EE:A7:C9:33:B9:C2:1C:81:BB:70:33:0A:0C:BE:21:61:97
Certificate issuer: /CN=4bf203d6ae6698e09f255780b88accdcd94675a1
Certificate serial: 0186D50FEB971165058C9EF133A4560CD2FE
Authority key identifier: 4B:F2:03:D6:AE:66:98:E0:9F:25:57:80:B8:8A:CC:DC:D9:46:75:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_ID1q5mmOCfJVeAuIrM3NlGdaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/UxxT7qfJM7nCHIG7cDMKDL4hYZc.roa
Signing time: Sun 12 Mar 2023 09:03:55 +0000
ROA not before: Sun 12 Mar 2023 09:03:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36998
IP address blocks: 151.248.99.240/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d5:0f:eb:97:11:65:05:8c:9e:f1:33:a4:56:0c:d2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf203d6ae6698e09f255780b88accdcd94675a1
Validity
Not Before: Mar 12 09:03:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=531c53eea7c933b9c21c81bb70330a0cbe216197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:a3:6f:a7:bc:ff:d0:fc:36:b6:b1:70:5e:
ca:28:10:7a:fe:d3:ad:2e:e3:03:df:cb:ec:bd:cc:
3b:26:8f:c9:15:7c:89:f4:da:da:d4:ff:a9:1e:cc:
d8:94:be:61:2a:fb:37:11:cf:ec:88:65:76:ab:d9:
cd:c7:c6:0b:65:99:a1:c9:23:cf:ce:c3:17:b9:22:
4e:30:ca:79:a5:f1:67:ee:e6:4f:79:e4:02:34:58:
16:e6:e6:09:d2:34:2b:6f:86:97:5e:e6:f1:5c:1d:
9c:45:d5:13:2e:1c:8f:a6:f7:73:c6:e7:42:9f:aa:
88:ef:70:68:26:74:38:90:bc:b4:39:08:23:5a:cf:
41:58:af:62:ee:a2:65:e2:d1:76:ba:e4:6d:e0:46:
9c:11:d7:e6:73:d1:ad:55:52:35:bf:3c:a2:77:f0:
66:0f:c4:fc:9c:fb:19:03:f4:17:61:86:d3:10:f0:
f1:40:35:13:7e:88:90:e1:d6:c2:65:08:bd:64:4f:
d9:b7:7d:ac:85:e9:8f:57:15:91:56:b8:84:2e:ad:
e9:22:34:e7:ad:d7:12:94:28:52:28:11:b8:40:ca:
19:af:29:09:ef:85:28:7d:e9:5e:20:19:a2:c3:d6:
b5:6f:ff:c7:8c:da:03:ac:a1:47:a3:7f:7e:be:ae:
c0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1C:53:EE:A7:C9:33:B9:C2:1C:81:BB:70:33:0A:0C:BE:21:61:97
X509v3 Authority Key Identifier:
keyid:4B:F2:03:D6:AE:66:98:E0:9F:25:57:80:B8:8A:CC:DC:D9:46:75:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_ID1q5mmOCfJVeAuIrM3NlGdaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/UxxT7qfJM7nCHIG7cDMKDL4hYZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/S_ID1q5mmOCfJVeAuIrM3NlGdaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.99.240/29
Signature Algorithm: sha256WithRSAEncryption
05:8d:f0:2e:e2:b2:c8:77:8c:7f:73:91:48:62:59:ca:93:94:
5f:bb:37:c3:c9:69:d9:7c:ba:10:03:58:3e:a1:9f:60:79:d6:
d2:80:81:56:c2:f0:4b:ea:f8:40:e3:71:e3:f5:bd:18:96:9f:
20:12:a4:f2:e3:b6:34:25:9b:bb:3d:87:5c:06:76:aa:eb:35:
a4:ab:53:97:87:78:33:4b:cd:a2:cd:dc:44:50:52:c7:d9:22:
79:4e:fd:1f:ad:3a:4b:70:8f:b9:bc:9d:bf:0e:29:c5:4e:7b:
01:54:8b:d5:40:6a:d9:9a:a8:05:96:48:a6:a2:84:00:2f:9f:
c6:09:f5:bb:ae:2d:58:eb:47:47:6e:54:33:c5:86:6f:28:af:
17:38:f4:b9:98:37:34:3d:22:25:fd:98:21:86:96:1a:20:7a:
af:4c:36:83:bc:84:3f:de:2b:24:80:a6:af:db:57:8f:18:f6:
f7:d1:31:9c:b6:ff:56:aa:c2:b1:3e:83:ad:c1:da:42:c2:2f:
67:bc:d0:19:82:3c:31:c3:61:dd:74:54:ba:f3:73:c9:9c:9b:
17:cc:14:9b:8b:75:c7:0b:c7:f2:c0:bd:b7:c7:7e:d5:c2:79:
2c:06:e5:54:0f:5e:f2:a5:33:2d:91:ee:ed:61:4e:da:0e:1e:
f7:fe:8e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:33 2024 by rpki-client on console-fra.rpki-client.org