Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/uhiEaaQYZV8AbG6Kds36m0dikfI.roa
File: uhiEaaQYZV8AbG6Kds36m0dikfI.roa (raw, json)
Hash identifier: JJPFT87CsRnJvYFK9hodbsK6Fi72PKCjMgtSPy7F2rU=
Subject key identifier: BA:18:84:69:A4:18:65:5F:00:6C:6E:8A:76:CD:FA:9B:47:62:91:F2
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018F2947CD78594DB585646DA91A0086C515
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/uhiEaaQYZV8AbG6Kds36m0dikfI.roa
Signing time: Mon 29 Apr 2024 09:55:22 +0000
ROA not before: Mon 29 Apr 2024 09:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.200.221.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 21:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:29:47:cd:78:59:4d:b5:85:64:6d:a9:1a:00:86:c5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 29 09:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba188469a418655f006c6e8a76cdfa9b476291f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:3c:0c:09:cb:24:05:a3:91:85:9e:8d:1c:
aa:7c:92:63:bc:7d:f7:03:26:0a:b0:9c:2a:a8:c3:
69:82:93:76:2f:a0:f7:80:e7:db:fe:1b:2d:97:05:
d3:ed:5c:b7:0a:ab:62:32:c2:aa:54:ea:c5:30:3c:
af:5d:7e:8a:66:9e:1d:ae:c4:11:6f:41:e7:12:c5:
6c:ec:e3:2b:73:40:3d:aa:80:e8:02:c3:4d:0c:86:
ab:2d:02:a4:09:a0:51:d2:99:c1:8f:71:6d:3b:56:
80:e9:13:f5:de:fa:94:ff:4f:78:d5:1a:85:a4:0b:
99:e5:1c:1a:16:ae:39:42:04:d2:dd:a0:39:bb:38:
24:59:68:4b:80:78:a7:f7:f5:1c:82:62:06:2f:41:
7b:04:8c:72:6e:7f:02:75:9a:87:54:06:39:c7:07:
57:4c:5d:bc:b7:99:d8:76:47:66:25:a8:9d:61:10:
ee:fc:a9:25:5c:42:70:70:a0:cb:af:2e:84:02:b6:
b3:c9:34:6f:0e:15:9f:0d:c9:a8:90:c0:c0:06:a2:
18:ee:ef:87:52:d2:9e:f0:f2:26:f6:64:dc:53:dc:
c4:32:7a:cf:c2:90:89:bb:1d:11:52:90:07:1c:b8:
d3:86:7b:bf:48:f1:de:32:ca:bb:80:a2:bb:24:ba:
44:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:18:84:69:A4:18:65:5F:00:6C:6E:8A:76:CD:FA:9B:47:62:91:F2
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/uhiEaaQYZV8AbG6Kds36m0dikfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.221.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e8:13:48:d8:88:cd:fd:4b:0f:c2:5d:78:63:02:31:f0:d8:
f3:44:4e:38:12:b9:da:bd:6e:b9:c1:6e:bc:1f:50:1d:6d:d3:
b7:1a:aa:4a:97:a3:42:89:35:31:9a:13:69:d6:9c:9b:6b:b2:
cc:f3:c4:b5:37:79:2c:d5:6e:d7:d2:26:7b:f1:29:ee:db:96:
23:74:0a:78:ce:8a:a5:03:99:7b:fa:c0:90:94:44:9d:3e:06:
ad:21:14:39:b5:a1:ad:c0:a5:08:f0:75:87:0a:e8:15:58:9f:
b1:6d:1b:a6:7d:3c:1d:1e:17:43:0f:4a:5f:51:40:73:6f:f0:
a9:8a:02:14:ab:63:94:be:4c:f9:86:54:8e:1a:b4:54:44:ad:
a9:2f:e9:9d:29:d2:0b:84:98:7b:e3:b6:3e:87:6a:9d:b4:cb:
66:ae:8e:aa:15:a2:38:5a:bb:25:2d:83:5f:6f:5c:3f:14:2d:
33:f8:45:1e:4e:98:f2:3e:96:0d:b6:fd:78:ab:d7:e4:f1:0f:
13:73:a4:ad:3d:2f:48:10:e1:5c:28:97:85:1e:55:82:13:3d:
67:e8:15:63:4d:45:18:f2:6b:e5:ad:1d:35:7d:02:45:c4:b9:
7f:2c:62:f9:cb:d3:ca:b4:72:04:f1:ef:e2:f8:71:bb:32:66:
6c:b7:b5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org