Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/uc-igEb84mvv9aAqJ3HSOYCMSrk.roa
File: uc-igEb84mvv9aAqJ3HSOYCMSrk.roa (raw, json)
Hash identifier: OfDWnvH0U8lgqKZEhBskOb+UR+9nmU3MW0WNyye2eis=
Subject key identifier: B9:CF:A2:80:46:FC:E2:6B:EF:F5:A0:2A:27:71:D2:39:80:8C:4A:B9
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 018AB2FF1952D06453E3310FEAEBA66B12A5
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/uc-igEb84mvv9aAqJ3HSOYCMSrk.roa
Signing time: Wed 20 Sep 2023 14:29:37 +0000
ROA not before: Wed 20 Sep 2023 14:29:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 217.169.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b2:ff:19:52:d0:64:53:e3:31:0f:ea:eb:a6:6b:12:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Sep 20 14:29:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9cfa28046fce26beff5a02a2771d239808c4ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:72:d3:55:95:dc:5f:0f:01:82:00:f1:76:
1f:88:e5:bc:68:fe:17:3b:5b:55:3e:45:62:c7:94:
27:8c:06:0a:6a:13:af:5d:86:ca:3d:e5:16:a9:03:
4f:3d:6d:93:3d:52:6c:50:da:e1:16:84:d0:c5:72:
03:4d:87:0c:d7:28:53:60:c3:df:e5:b0:84:ea:b9:
5b:0b:42:5a:bc:7d:e2:3d:48:62:cc:5b:94:d5:76:
82:2f:2d:a0:07:b6:45:ca:97:64:e5:3a:62:f9:d1:
62:9e:38:2c:d9:71:74:65:eb:18:50:5a:32:5a:7a:
4a:82:b1:e0:a6:a6:11:87:f1:b8:7e:ff:5c:cb:8e:
47:19:d7:28:67:b7:c5:04:d7:4e:63:e2:72:e3:f7:
57:51:0d:7a:32:bf:ca:f5:49:ac:4b:04:0c:41:9a:
a7:61:b6:69:d4:3b:42:eb:2b:3e:a0:35:23:84:c4:
83:c2:c5:f3:6f:18:75:9d:3c:1a:e6:ec:d2:3a:6e:
9a:b2:37:ae:f7:38:07:59:c1:1c:86:32:a6:cd:ae:
31:69:16:1a:08:dd:64:13:d8:a1:ef:9e:83:a6:3d:
cb:13:0d:d3:39:c6:80:65:6d:af:51:70:8e:06:1b:
f6:e5:7d:71:ff:30:23:5f:0c:a1:48:03:8b:66:98:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CF:A2:80:46:FC:E2:6B:EF:F5:A0:2A:27:71:D2:39:80:8C:4A:B9
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/uc-igEb84mvv9aAqJ3HSOYCMSrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.203.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e7:80:c8:ce:57:16:a6:1a:51:b9:7a:b9:3b:9e:4f:26:65:
08:b1:09:6b:cd:1e:d1:55:52:a7:3e:bd:32:10:ab:02:f0:2f:
60:e0:ac:3f:14:56:af:fd:ec:02:7e:e9:fc:c9:4e:87:2b:21:
cc:da:ac:b3:ad:cf:ce:a2:38:ab:64:f0:0a:a4:0b:6d:b1:dc:
b0:ea:f5:ca:d6:26:c2:bc:9c:26:25:9f:e7:20:5a:24:fc:85:
e4:89:9a:78:93:eb:f6:ab:02:72:28:de:34:73:3d:58:46:40:
37:7a:b3:cc:cd:b9:02:25:70:94:bb:84:30:60:e6:e2:8e:72:
40:9d:7c:2e:36:af:2b:bc:5d:f7:c8:4e:9e:7e:76:ba:0a:32:
10:e7:ab:39:da:ac:71:84:56:39:32:f9:41:e8:58:ee:a1:58:
e1:3d:f5:1e:7a:d6:4f:47:da:90:9b:71:33:bd:02:61:06:c2:
de:01:26:83:a4:43:5c:50:b5:84:b9:18:4d:c5:b9:1c:6f:3a:
76:43:ea:bc:40:26:de:6b:4c:25:6d:ab:09:90:3a:82:cd:97:
0b:9a:61:52:b8:c2:6e:5c:8c:41:c8:3f:ec:e9:b0:78:b8:5e:
11:8b:55:af:50:35:47:51:99:19:5a:79:15:90:be:8c:a7:37:
ce:31:e2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 13:48:34 2023 by rpki-client on console-ams.rpki-client.org