Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/uG60h_1hETmaEF5oMMlMFnnE-Ng.roa
File: uG60h_1hETmaEF5oMMlMFnnE-Ng.roa (raw, json)
Hash identifier: PJ+5NIDGeJUr/6Y1USGAUti8mE3UcrPXy5rmelkJtxo=
Subject key identifier: B8:6E:B4:87:FD:61:11:39:9A:10:5E:68:30:C9:4C:16:79:C4:F8:D8
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01857039A78D1E1DB21F44B4DA85DE298344
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/uG60h_1hETmaEF5oMMlMFnnE-Ng.roa
Signing time: Mon 02 Jan 2023 02:05:04 +0000
ROA not before: Mon 02 Jan 2023 02:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136796
IP address blocks: 194.163.80.0/22 maxlen: 24
195.180.150.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:a7:8d:1e:1d:b2:1f:44:b4:da:85:de:29:83:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 02:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b86eb487fd6111399a105e6830c94c1679c4f8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:ae:15:b9:2b:e1:81:f7:e7:19:12:62:97:
9f:f3:7f:77:0c:43:34:1a:9a:27:a3:42:d5:24:72:
07:54:11:eb:47:88:17:ae:93:cb:4c:64:6e:6a:15:
fd:b9:70:39:1e:06:63:cd:6c:32:59:9a:10:cb:44:
77:b9:bd:12:0c:6a:88:d9:ec:a9:ad:ba:62:4f:a5:
f2:83:aa:3b:58:0b:09:24:88:f4:24:fb:ea:9a:50:
93:18:53:94:9d:77:d9:c5:6b:0c:9d:94:b6:2d:04:
f6:91:dd:22:9d:00:7f:d1:51:32:18:40:b1:ea:b1:
c4:a2:34:c5:b5:14:85:8b:a4:38:9a:7c:4a:ed:12:
38:21:24:f8:42:3d:65:dd:45:6f:b6:46:c6:1f:2e:
a1:6a:0c:d3:97:de:6d:ca:53:93:58:e6:e8:40:32:
3c:d9:80:9c:24:18:5b:5a:83:af:2c:b8:37:56:d9:
88:ee:a6:ad:57:3a:a1:51:d7:98:c6:fa:d1:8a:a4:
3f:03:c0:d3:6d:9d:96:ad:6c:53:84:d1:8f:b3:65:
cc:5d:9c:26:50:ca:da:db:29:8c:29:4a:66:18:1f:
1a:38:a4:bb:5f:83:1f:66:51:de:17:c9:00:fd:e8:
9e:6e:bc:ae:a5:68:d0:ac:74:a0:b2:d6:54:75:c5:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6E:B4:87:FD:61:11:39:9A:10:5E:68:30:C9:4C:16:79:C4:F8:D8
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/uG60h_1hETmaEF5oMMlMFnnE-Ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.80.0/22
195.180.150.0/23
Signature Algorithm: sha256WithRSAEncryption
89:5c:67:78:67:0a:0e:3b:5e:1c:39:57:bb:30:05:e2:3d:a9:
4b:0e:42:e8:64:9d:5b:57:74:74:44:3e:d7:e9:94:7d:ee:07:
9d:16:14:96:21:41:1d:d1:09:4c:23:d9:bc:4b:45:93:b7:57:
21:10:30:a2:8a:f6:4b:ec:2d:7e:db:89:7b:b4:e1:23:65:5d:
d4:22:01:25:69:3c:8c:93:89:ff:1d:ba:8c:f2:7d:cc:c0:62:
52:5b:6c:37:ca:23:c7:51:41:f5:d5:e2:05:f1:01:00:26:47:
32:5b:01:1d:6b:4e:3c:db:72:49:3e:86:6a:36:eb:2f:a5:2f:
0c:b4:0e:ef:d5:4a:8c:2e:30:28:f2:43:85:fe:0f:99:7c:2b:
81:66:00:01:c9:15:3b:1d:95:72:9e:e0:65:66:bd:5d:9f:00:
47:e2:6f:f3:5c:3f:9c:56:c4:ea:66:c0:f4:f8:07:54:32:2a:
dd:81:a4:98:86:2e:cf:4e:57:48:1e:c4:9b:d4:8e:ed:68:72:
a1:e8:d5:df:13:24:d1:e7:41:1e:cb:ae:70:e7:89:ca:53:5a:
2d:33:f3:c0:6d:e6:92:1a:17:c5:ed:1e:03:96:79:b1:2e:8a:
f2:dc:1b:c8:3d:02:35:27:78:59:88:5c:fd:e4:e1:4d:56:9d:
e0:04:5a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:28 2024 by rpki-client on console-ams.rpki-client.org