Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uixl30PH8Bz2OOXTh56-6gWVHbY.roa
File: uixl30PH8Bz2OOXTh56-6gWVHbY.roa (raw, json)
Hash identifier: eMRnlvHhT30oteKy4B86Y5g8KDRITzBu91wWcB84Nns=
Subject key identifier: BA:2C:65:DF:43:C7:F0:1C:F6:38:E5:D3:87:9E:BE:EA:05:95:1D:B6
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FFF05E07284BE5D05FDE2E00BD72D
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uixl30PH8Bz2OOXTh56-6gWVHbY.roa
Signing time: Mon 02 Jan 2023 17:38:14 +0000
ROA not before: Mon 02 Jan 2023 17:38:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205212
IP address blocks: 193.34.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:ff:05:e0:72:84:be:5d:05:fd:e2:e0:0b:d7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba2c65df43c7f01cf638e5d3879ebeea05951db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b9:64:34:6b:2d:0f:0b:cb:05:be:8a:4f:3f:
a0:04:fe:21:42:0e:43:87:b2:38:c3:07:7d:9f:a1:
1b:30:52:67:46:93:cc:30:fd:3e:06:ca:68:1a:ea:
47:99:b7:b2:a3:73:f6:a9:39:3f:c5:62:95:3a:4a:
8c:ce:d8:92:97:09:99:e2:f8:b0:9c:e8:28:48:48:
bf:0c:03:09:d0:6b:7d:28:5b:44:a8:6a:60:ca:ae:
60:22:21:32:99:6a:b0:8e:5d:9a:55:e8:1c:aa:79:
bc:29:be:03:bb:9a:ae:35:6d:b4:0d:0a:a6:f6:26:
2e:ed:e9:e1:1b:da:d0:b1:95:97:09:27:1a:46:2c:
9f:0e:4e:be:4a:1d:b3:41:61:03:ef:fd:59:54:75:
b5:a1:ad:54:5f:ba:6b:cc:57:0d:8f:32:06:89:ff:
bf:10:6c:e1:34:da:9a:a5:4a:94:d7:3a:db:65:1f:
7e:ea:11:d7:ee:36:1a:9f:3d:49:7b:31:27:2b:12:
23:e0:29:dc:ba:ad:9c:7c:b7:c4:40:8c:0c:4f:32:
46:d7:16:cf:dd:41:8b:1a:0a:df:fc:a5:93:37:d5:
1a:22:e2:a1:7f:ec:6a:7a:aa:9d:11:e8:0e:65:e2:
d0:8f:17:32:9f:88:3d:d9:9f:1e:0a:70:b2:5f:26:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2C:65:DF:43:C7:F0:1C:F6:38:E5:D3:87:9E:BE:EA:05:95:1D:B6
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uixl30PH8Bz2OOXTh56-6gWVHbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.76.0/24
Signature Algorithm: sha256WithRSAEncryption
71:1a:00:07:bf:8e:a7:f0:20:10:6d:7f:00:b8:cf:13:95:ef:
96:46:d3:c5:8b:fc:da:b5:38:fb:23:2a:34:d0:15:d1:71:04:
bd:62:9b:63:58:01:d2:87:8d:9d:23:e0:7a:32:04:62:c5:de:
f7:bd:b1:54:b6:83:8a:c9:f9:d1:79:2a:6f:11:4f:7a:6a:86:
b7:f7:46:ab:d3:70:b2:a3:a4:51:ca:c5:0d:ca:c2:ed:19:56:
4b:9a:5d:4a:84:de:e0:cd:67:1a:bb:ee:69:87:ab:92:fa:4e:
71:ed:7e:8b:7b:7c:88:7c:36:60:45:17:b6:10:d1:6d:d4:6a:
f2:96:5f:42:ba:da:57:dc:dd:e8:59:25:8f:0f:3f:73:5b:14:
a9:42:5c:1a:34:3e:23:bd:5a:bc:5a:cf:b3:e3:3a:12:1b:ea:
5e:5f:29:f4:3c:71:e1:62:ab:59:f6:e5:e7:bd:9a:2e:35:61:
f8:1f:19:24:1d:75:70:b6:e4:7d:e2:8a:72:04:d8:61:03:ff:
c5:14:dd:f6:d6:61:df:3f:60:8d:c5:63:80:9a:f3:2a:cc:c9:
a9:bb:99:93:22:11:09:d7:99:88:4f:f5:9f:a6:c9:55:b1:d0:
7f:9c:e0:8b:44:f3:fc:96:09:32:97:a0:75:21:00:64:b4:6b:
0d:33:06:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:21 2024 by rpki-client on console-fra.rpki-client.org