Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/uLMwRgT9OODwk2zl4vftBVOj82k.roa
File: uLMwRgT9OODwk2zl4vftBVOj82k.roa (raw, json)
Hash identifier: SqrLoG/DQdx9wY/kjRDHgE9hSFZHFwNbG2VJSRu2KWU=
Subject key identifier: B8:B3:30:46:04:FD:38:E0:F0:93:6C:E5:E2:F7:ED:05:53:A3:F3:69
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018572BA8E9615C563B4EF845111C29D22A6
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/uLMwRgT9OODwk2zl4vftBVOj82k.roa
Signing time: Mon 02 Jan 2023 13:45:06 +0000
ROA not before: Mon 02 Jan 2023 13:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212917
IP address blocks: 212.91.6.0/23 maxlen: 32
Validation: Failed, certificate revoked on Tue 03 Oct 2023 12:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:8e:96:15:c5:63:b4:ef:84:51:11:c2:9d:22:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 13:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8b3304604fd38e0f0936ce5e2f7ed0553a3f369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:b6:0b:02:f5:62:1a:c0:88:34:88:e3:bc:
16:7e:7e:26:89:14:62:07:c2:11:b6:47:88:a0:ef:
0e:23:54:f3:e5:f6:a9:80:d2:dd:20:5f:b8:f6:f5:
f2:84:86:86:a6:e9:1b:75:82:20:9e:ee:09:a3:c2:
af:e5:e5:54:ca:8d:32:9b:cf:2d:ec:20:d2:cc:d4:
3c:3a:2d:73:30:ff:6f:f5:e1:98:38:30:d6:fc:c7:
c3:1c:04:4e:ae:61:7d:53:6c:24:1a:e3:c9:31:66:
ca:b0:81:e7:af:43:fa:e3:c3:17:8b:65:a6:7c:41:
91:4f:3e:ab:ec:fd:ce:ea:97:80:bc:f3:9f:65:c4:
88:fd:17:06:87:c6:22:7c:16:79:54:d6:15:64:42:
16:a8:62:a0:87:44:34:45:c5:94:fd:8b:8e:bf:a9:
36:e5:42:eb:f3:cf:a5:4a:52:9e:8e:a8:f0:9f:62:
e8:a0:97:37:7b:46:6b:97:e8:b3:ef:41:97:d4:5c:
db:27:77:14:28:6b:69:7d:c0:70:1d:15:83:20:c2:
fc:7a:82:73:d6:d8:65:9a:c0:62:84:b3:90:b9:b3:
70:00:cc:6d:25:3e:07:f1:64:38:0b:12:e3:04:96:
f5:c9:a7:39:d1:75:bb:09:e0:4f:75:53:c1:89:98:
05:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B3:30:46:04:FD:38:E0:F0:93:6C:E5:E2:F7:ED:05:53:A3:F3:69
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/uLMwRgT9OODwk2zl4vftBVOj82k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.6.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:28:ad:a1:97:f9:c3:3f:b8:43:b9:73:62:63:7f:26:9d:cf:
86:2a:d0:12:de:f8:ef:ac:f5:ef:d6:4b:05:34:62:ed:6e:6e:
21:35:c4:e0:61:0f:13:31:6c:4a:60:a0:84:7c:5c:80:60:bb:
d1:09:d9:23:e0:d2:57:4b:d6:de:03:4b:99:ba:d2:db:ae:aa:
2d:29:4d:7e:76:d6:43:7a:2a:0a:f3:ae:8c:de:a8:fd:a3:a3:
c4:a1:1c:d1:de:2d:57:ac:a5:c3:49:ac:f5:1c:7b:28:8a:16:
36:e3:e4:6e:87:52:61:f3:1f:01:c9:a3:55:49:f4:ad:80:db:
01:fe:f9:16:56:0c:cc:46:ad:db:61:91:00:fa:a8:12:aa:c3:
fc:84:2d:a6:b0:af:ae:8d:e6:bd:36:08:be:4b:96:4b:cf:f5:
30:68:fb:be:c8:91:eb:b7:27:76:af:9e:80:d2:5f:07:63:0b:
db:11:56:ba:66:0c:1e:2c:3a:7a:3f:23:93:1b:ac:12:ab:c1:
b7:eb:85:71:f9:5d:e8:72:d2:18:70:e3:9a:9c:79:4f:23:b5:
0a:81:f4:45:f2:8e:8c:94:e3:38:9c:4b:8a:67:90:97:70:5d:
58:93:93:54:6d:86:f8:43:2b:2f:be:0e:ce:33:f2:44:e4:62:
5e:64:20:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:52 2024 by rpki-client on console-ams.rpki-client.org