Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/uAYjar-PUhXbroIXLB294ZgzDks.roa
File: uAYjar-PUhXbroIXLB294ZgzDks.roa (raw, json)
Hash identifier: jxpVwyvDXvDtK6mPip8+J5p/kEbF532bUHTLR/abbyM=
Subject key identifier: B8:06:23:6A:BF:8F:52:15:DB:AE:82:17:2C:1D:BD:E1:98:33:0E:4B
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 01906FD3A0D12F2C65BB9245896EA9323C04
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/uAYjar-PUhXbroIXLB294ZgzDks.roa
Signing time: Mon 01 Jul 2024 19:44:18 +0000
ROA not before: Mon 01 Jul 2024 19:44:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198231
IP address blocks: 62.204.37.0/24 maxlen: 24
2a13:9300::/31 maxlen: 31
Validation: Failed, certificate revoked on Wed 28 Aug 2024 18:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6f:d3:a0:d1:2f:2c:65:bb:92:45:89:6e:a9:32:3c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jul 1 19:44:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b806236abf8f5215dbae82172c1dbde198330e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:ad:d5:aa:39:a3:fc:c7:14:21:ff:36:c4:
33:e7:5c:2a:76:f8:17:7e:db:85:bd:1a:6a:cc:49:
64:a6:89:8a:60:85:16:d0:21:71:5c:4b:08:9b:43:
5b:04:56:10:08:79:0f:30:f1:5e:bb:f3:f3:f6:6f:
5d:b5:99:e7:1f:db:31:ca:c6:1e:58:0b:c0:eb:cf:
72:9a:cb:5b:a5:2b:db:fd:21:fe:e8:c5:e1:f9:bf:
12:b2:5b:7a:e3:b8:b1:4b:1e:64:df:a2:f3:b8:2f:
d9:fa:81:1d:0d:d1:25:11:23:bb:dd:cf:e8:fa:62:
c2:0b:80:ee:55:dc:a6:c7:aa:73:dd:e6:87:1b:61:
90:de:b9:bd:70:36:3d:76:d8:f0:9d:69:d7:e6:47:
75:cf:d0:53:24:3c:6f:32:c1:81:eb:17:9e:0e:81:
82:74:90:f9:83:6b:46:47:e1:2f:c9:47:ce:be:54:
ed:4b:ab:74:7f:67:d4:7b:ce:6a:37:e9:cd:64:25:
fe:38:49:94:79:ca:c2:c9:fb:f1:ad:e8:aa:a2:a7:
39:99:9d:75:19:ea:e9:bf:9f:ee:64:68:e1:cf:21:
75:94:eb:94:e1:6b:70:dd:b6:9a:85:99:c7:0e:f1:
75:e8:bf:4e:88:f4:52:07:a4:50:47:1e:b0:00:c7:
f9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:06:23:6A:BF:8F:52:15:DB:AE:82:17:2C:1D:BD:E1:98:33:0E:4B
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/uAYjar-PUhXbroIXLB294ZgzDks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.37.0/24
IPv6:
2a13:9300::/31
Signature Algorithm: sha256WithRSAEncryption
04:4a:dd:cf:8f:27:28:f3:44:ad:12:f1:28:d9:e8:fd:28:ea:
ac:ee:55:c8:c6:15:59:e8:83:9d:d5:43:cf:c4:13:54:b6:55:
f2:f1:9c:09:33:cf:f0:1c:56:e5:61:06:00:70:dd:6c:37:74:
a9:48:9b:7f:71:cf:a1:3f:9a:80:be:77:52:c2:d3:9f:22:bd:
25:09:19:5b:a0:bc:6c:4c:35:18:f4:d2:f5:16:12:d0:b2:25:
6b:67:2e:04:75:59:54:d5:a9:cb:2d:89:e0:eb:ee:16:77:6f:
9c:d6:dd:bf:b1:9b:95:1a:c4:e3:1c:e6:ee:ba:9e:03:33:10:
74:62:73:75:fb:db:02:59:5a:72:ee:2c:26:05:a3:9d:2a:6f:
d2:78:71:be:d5:1a:5c:c5:dd:32:2a:90:e4:02:48:31:fb:2b:
01:8d:c3:61:f3:8a:d2:3a:03:c4:fb:6c:98:14:be:a4:64:2d:
f9:87:24:ad:46:75:a2:b8:14:b8:9f:1d:7a:47:e9:1e:e1:75:
c8:96:eb:2c:01:43:6e:89:f7:51:87:48:2c:79:ea:87:89:c6:
54:c2:8c:1e:ab:ba:6e:ed:14:d4:e8:08:b8:a0:85:d2:48:3d:
61:8a:6b:60:27:b5:48:52:00:8d:5f:5f:7b:64:04:16:1c:64:
d2:f9:f0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 19:38:56 2024 by rpki-client on console-fra.rpki-client.org