Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/uQK_a-_kBguHjWLjM8fNSXx58M0.roa
File: uQK_a-_kBguHjWLjM8fNSXx58M0.roa (raw, json)
Hash identifier: 4s/mafwAPA7IkPLaQpaxa3lQHjRhmY7/6LhfwrC0t5c=
Subject key identifier: B9:02:BF:6B:EF:E4:06:0B:87:8D:62:E3:33:C7:CD:49:7C:79:F0:CD
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018B96ADD473C9AF3A716DCEB97BEAB8F26B
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/uQK_a-_kBguHjWLjM8fNSXx58M0.roa
Signing time: Fri 03 Nov 2023 19:34:16 +0000
ROA not before: Fri 03 Nov 2023 19:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 81.31.246.0/24 maxlen: 24
185.84.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:ad:d4:73:c9:af:3a:71:6d:ce:b9:7b:ea:b8:f2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Nov 3 19:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b902bf6befe4060b878d62e333c7cd497c79f0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:c9:f6:46:7c:03:68:61:e2:b1:c6:43:11:
f7:df:db:8a:24:11:b5:81:d3:ce:3d:58:1e:ba:bc:
be:53:65:ca:79:0c:24:8a:89:3c:08:60:1a:1c:62:
af:68:0d:38:36:54:70:bd:07:7b:e3:4b:4e:a1:ab:
b7:b6:d4:18:7c:e9:06:7b:6b:d0:e8:34:43:48:30:
e7:00:db:6b:01:bd:b4:74:a0:35:f6:4f:dd:80:ad:
60:1b:ea:02:ba:35:15:90:5f:60:d9:00:0a:86:e2:
21:81:85:fe:3b:7f:ff:6b:30:86:07:08:9d:26:ba:
cb:b1:01:38:c0:ea:f5:aa:2e:8e:2d:08:f1:e1:0f:
d2:09:b5:75:61:7e:1b:b6:80:61:c2:e1:2b:95:e2:
6b:9e:86:c6:f7:7e:53:e4:de:89:c5:67:94:f5:8c:
c1:ae:bf:cb:fd:46:b5:89:eb:8c:7f:1c:da:22:f7:
96:9e:d7:84:d5:59:2e:8c:ef:48:23:19:df:42:d3:
65:ca:b5:e3:89:37:91:2b:b6:c1:4e:fa:79:b3:4d:
eb:33:aa:7a:00:3a:60:ed:6a:b8:79:b5:46:e3:66:
20:91:bb:d5:25:cc:18:a5:ee:8a:37:f1:3c:19:28:
6f:79:b7:4c:cc:1b:94:be:37:bd:b2:07:62:9b:88:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:02:BF:6B:EF:E4:06:0B:87:8D:62:E3:33:C7:CD:49:7C:79:F0:CD
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/uQK_a-_kBguHjWLjM8fNSXx58M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.246.0/24
185.84.162.0/24
Signature Algorithm: sha256WithRSAEncryption
13:40:92:d4:f5:f5:c6:92:40:05:08:23:32:b6:17:8f:f6:f4:
22:1b:6d:8b:68:06:4f:a7:62:99:c8:0f:85:af:65:46:76:7a:
32:6d:e9:69:40:55:94:c8:2f:3a:9d:19:c4:11:fb:7c:25:aa:
4f:a9:ca:c8:96:82:58:66:9e:cc:b2:9a:a7:ee:f2:43:21:77:
ab:26:4c:93:59:9e:83:f9:a2:8f:b7:e1:a9:8d:e3:86:1a:3b:
ee:0d:f1:12:3e:ec:66:a9:3f:81:5e:2f:58:c9:92:12:aa:31:
d4:de:19:ff:9c:66:ee:17:60:6d:e1:db:7d:a9:aa:41:3c:6b:
a1:4f:62:7f:39:93:e8:0d:69:21:1a:ac:1a:42:dd:66:97:66:
c9:ee:ec:bb:25:9a:40:dc:2b:1a:b4:47:24:de:b5:5a:70:61:
69:e4:20:4a:b7:b5:da:64:bf:fd:1e:28:c4:6c:dd:f7:71:4b:
c0:64:c0:3e:c1:75:69:2f:92:74:b1:87:ab:8e:8e:53:9a:e3:
e1:21:2a:9f:39:96:c8:20:74:a4:5b:24:f0:75:7b:18:c9:40:
27:09:40:29:c9:71:50:0a:42:53:c2:e2:7a:e5:ff:ea:e7:7b:
37:55:90:7f:0d:7a:46:4f:2d:fa:06:0e:27:ab:ca:da:a9:ac:
67:17:ce:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 09:28:11 2023 by rpki-client on console-fra.rpki-client.org