Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/uVWhQ4KG8ZjyGRK2C3rn6s6Pt1E.roa
File: uVWhQ4KG8ZjyGRK2C3rn6s6Pt1E.roa (raw, json)
Hash identifier: TZo0P1KiRR5MELesWwUWP5UWU0RThJTqjLjzWsPKboo=
Subject key identifier: B9:55:A1:43:82:86:F1:98:F2:19:12:B6:0B:7A:E7:EA:CE:8F:B7:51
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018610F58AD091FAF32A08AB434C53BA4E4D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/uVWhQ4KG8ZjyGRK2C3rn6s6Pt1E.roa
Signing time: Thu 02 Feb 2023 07:09:32 +0000
ROA not before: Thu 02 Feb 2023 07:09:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43350
IP address blocks: 85.122.82.0/24 maxlen: 24
194.102.168.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:10:f5:8a:d0:91:fa:f3:2a:08:ab:43:4c:53:ba:4e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 2 07:09:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b955a1438286f198f21912b60b7ae7eace8fb751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:91:06:16:62:59:93:bc:95:73:2f:2d:c6:07:
82:11:36:fd:19:c6:10:e4:58:b2:3e:44:ce:b4:5c:
af:70:87:cd:c8:34:31:d8:a1:04:c1:98:99:11:91:
e0:6c:5e:cb:ce:2e:61:e8:6c:53:67:51:bc:c1:a6:
81:b2:a5:f3:64:ca:56:00:60:6e:58:fc:48:b7:85:
da:74:2d:77:5f:f7:6b:b3:11:6e:49:ae:ff:1c:8b:
aa:6a:d0:ea:9c:36:76:20:af:32:a6:1f:a4:ca:20:
30:07:30:cb:d3:a3:8f:5a:b4:ba:88:38:56:69:a2:
8f:50:0b:3d:a2:d7:9c:92:f9:09:4d:4a:d2:43:b5:
ee:4b:f5:e0:fd:65:c8:fe:29:da:dd:46:03:dc:c6:
96:0f:e3:ef:cd:9d:76:74:99:ad:9a:06:cc:0c:c0:
6b:8d:fb:64:4c:0c:c2:be:b7:5a:e4:36:5d:de:01:
f7:2f:6a:b3:fa:4a:ab:9b:ff:eb:e2:c4:c3:4b:86:
1f:44:f4:fd:11:80:58:eb:42:db:bc:fd:f3:03:7c:
ec:d1:39:e3:90:59:e7:bc:36:86:fe:99:63:67:57:
45:0d:3c:4d:fb:a7:e6:74:f5:ab:79:ba:b6:37:70:
52:15:99:0a:89:72:bd:c3:8f:49:be:b9:65:10:e9:
09:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:55:A1:43:82:86:F1:98:F2:19:12:B6:0B:7A:E7:EA:CE:8F:B7:51
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/uVWhQ4KG8ZjyGRK2C3rn6s6Pt1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.122.82.0/24
194.102.168.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:87:f3:44:f2:e0:12:6d:7f:c4:9d:07:d4:ac:2d:88:46:6b:
39:63:77:7f:8c:1d:b2:d3:95:35:72:d0:47:11:0f:0b:31:88:
51:80:2d:48:72:07:7c:ff:c8:da:a9:fc:8a:fb:ad:d1:98:e0:
92:4d:f0:ad:3c:4b:03:f3:62:eb:7a:2d:2c:dd:ef:40:30:55:
1c:f8:db:49:d7:3c:96:2c:fd:cb:58:85:f4:f1:cf:cf:de:05:
16:f4:22:fa:5c:b5:3f:64:cd:db:7f:48:8e:2d:68:05:72:65:
ee:5c:9e:f5:1a:b5:62:e5:59:27:bf:7c:5e:f8:cd:63:75:87:
a6:ca:93:52:42:54:70:10:74:fd:8c:e2:e8:3f:30:b6:40:ad:
c3:cc:90:4b:5d:e8:20:e6:7d:67:77:b9:ac:0e:16:b9:e8:23:
45:66:93:be:9f:67:e0:ba:bb:2c:1c:a9:24:4b:fc:8a:4d:c1:
66:bc:be:1c:5a:6a:b3:c4:48:51:ed:8c:29:74:ed:bb:f4:c4:
b3:3a:ce:81:ef:c9:1b:02:01:94:79:ca:dc:31:5c:40:c7:24:
bc:e7:df:57:83:a5:24:01:74:bd:36:af:4c:be:bc:59:d0:e3:
09:83:5b:61:c5:fd:1b:24:25:f1:88:90:4c:a5:55:da:fe:73:
30:b1:fb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-ams.rpki-client.org