Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/UbgSm0SIl72YjsbxjR5gmNqOKvg.roa
File: UbgSm0SIl72YjsbxjR5gmNqOKvg.roa (raw, json)
Hash identifier: SXfFxR//xqYUasbJGYTT21Y2OgPLMTGtMVCsway7D5M=
Subject key identifier: 51:B8:12:9B:44:88:97:BD:98:8E:C6:F1:8D:1E:60:98:DA:8E:2A:F8
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF972417341FBDC02F90273778B92C4
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/UbgSm0SIl72YjsbxjR5gmNqOKvg.roa
Signing time: Mon 02 Jan 2023 00:54:56 +0000
ROA not before: Mon 02 Jan 2023 00:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43718
IP address blocks: 82.147.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:72:41:73:41:fb:dc:02:f9:02:73:77:8b:92:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51b8129b448897bd988ec6f18d1e6098da8e2af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:36:6e:0a:55:1d:c2:b4:d7:6e:88:eb:c5:6f:
dc:88:b2:1f:70:17:e7:2f:f7:ad:c5:a5:db:53:b6:
71:f1:89:7c:67:e5:13:a3:e8:9f:7b:68:ec:4f:18:
5d:87:c1:d0:a4:6e:d8:14:4b:e5:33:13:ef:36:60:
6e:69:71:84:e6:d6:43:43:95:f9:f6:4f:26:0e:d5:
fe:e3:d9:25:44:cd:a4:19:6f:0a:1d:dd:b0:16:4b:
bc:53:1a:1f:91:e2:83:b5:c8:1b:72:5b:85:a4:00:
1e:30:09:95:e3:1b:a5:4d:1e:03:ee:5e:60:aa:c9:
b9:47:5b:02:00:ee:7d:44:99:33:4a:cc:0c:ab:dd:
e7:6d:93:34:61:e7:a3:cb:92:03:6c:04:d8:f3:7b:
4d:42:e4:59:76:e2:f8:15:25:e7:67:90:70:99:72:
4b:25:84:35:f2:60:e2:a7:06:1c:9e:b0:93:17:b8:
d5:8e:f3:6f:e2:22:30:99:51:b1:82:e9:3d:5f:02:
6c:55:42:10:93:87:21:32:be:2f:bf:55:55:e8:c5:
cc:61:df:a9:4d:6a:c8:11:76:b4:80:ed:c9:ae:82:
f0:c2:e2:da:56:1a:b5:5e:f4:4e:dc:75:c2:b4:80:
f9:1c:e4:54:59:1c:ec:0d:81:44:a8:12:26:44:72:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B8:12:9B:44:88:97:BD:98:8E:C6:F1:8D:1E:60:98:DA:8E:2A:F8
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/UbgSm0SIl72YjsbxjR5gmNqOKvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.147.135.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f6:e9:91:7c:e6:70:fc:bb:3a:77:6c:df:f2:f8:1a:4c:0d:
f5:33:37:77:74:4d:40:43:5f:4e:45:e0:ff:7e:38:57:93:e7:
57:32:c6:1c:26:2e:c1:f0:7a:4c:bd:92:78:c5:ec:48:c2:f8:
7e:59:ad:01:46:49:25:0b:fa:bb:05:93:70:e8:ea:a7:77:5b:
53:70:4d:47:71:8f:10:b4:6e:c3:a5:c0:f3:49:0e:b0:c8:54:
59:de:61:ce:f4:c5:83:49:d4:5c:50:1f:00:cb:05:77:00:4c:
42:5e:e1:bc:78:ba:c3:57:85:f6:ff:3e:d0:a7:d1:06:c3:03:
ce:99:f8:09:9d:7a:54:3a:a0:eb:c8:ab:56:b7:d2:e9:14:a7:
ef:bb:e1:2c:3f:23:c6:7d:af:06:0f:d6:2d:a2:dd:09:9f:2f:
b8:93:44:cd:61:c9:eb:b5:f9:9d:42:00:86:f0:b6:65:50:0f:
0e:10:b5:cf:db:87:c5:44:38:12:f3:67:c3:ef:eb:2e:33:6f:
01:66:1d:bc:a2:88:01:c4:53:d2:f1:ea:04:fd:54:b7:4d:f8:
e1:28:68:2d:82:d5:30:94:79:a8:58:f8:ad:7f:26:9b:17:89:
9f:9b:eb:86:4f:e6:7a:b0:af:1d:71:d5:da:26:dc:20:77:5f:
6d:eb:91:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:00 2024 by rpki-client on console-fra.rpki-client.org