Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/bUPP2W_WyRpSYWmob5uDLB8HyO4.roa
File: bUPP2W_WyRpSYWmob5uDLB8HyO4.roa (raw, json)
Hash identifier: YT0jf5Rw3joyW5Xe5WT6qmEEOoVBkx/RK4Eynsjjm88=
Subject key identifier: 6D:43:CF:D9:6F:D6:C9:1A:52:61:69:A8:6F:9B:83:2C:1F:07:C8:EE
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 01857139B4AD95CEA5A14484FA42D41146D0
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/bUPP2W_WyRpSYWmob5uDLB8HyO4.roa
Signing time: Mon 02 Jan 2023 06:44:45 +0000
ROA not before: Mon 02 Jan 2023 06:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212271
IP address blocks: 152.89.171.0/24 maxlen: 24
152.89.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:b4:ad:95:ce:a5:a1:44:84:fa:42:d4:11:46:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 2 06:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d43cfd96fd6c91a526169a86f9b832c1f07c8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d1:91:22:b0:6e:7a:d2:b7:17:70:bc:85:3a:
82:cd:00:8b:84:8a:b0:94:09:1b:8c:01:91:c3:c5:
93:ea:a9:c0:34:86:5e:46:dc:42:22:06:3d:e6:ab:
2e:23:6e:91:91:d3:1e:4f:fc:ea:fe:99:8e:a3:ce:
5f:64:5a:e0:17:92:3b:28:d8:47:dc:46:a4:f1:97:
e2:ae:dd:b6:9e:dd:c7:46:33:37:a8:04:cb:55:76:
c8:70:4f:ba:ad:d0:a5:68:6d:be:28:aa:86:17:79:
21:a4:3c:b8:4e:7b:ec:0f:e9:d9:95:23:10:b2:f5:
50:88:30:b6:33:42:ed:c6:6d:2b:81:4c:eb:8a:b3:
56:9e:0c:64:b9:24:c6:a4:66:0c:83:f1:ca:34:7f:
f4:12:c2:2c:c5:90:a5:c3:0f:78:74:13:3e:a1:52:
82:4e:8e:4e:90:b2:7a:b0:d9:c4:40:4a:6e:3f:30:
1f:4c:b6:1f:07:59:b0:f8:66:ce:93:5d:77:77:59:
f9:af:17:64:62:47:b8:72:50:40:ce:ec:e4:f4:a8:
89:9f:76:3a:b7:0c:84:58:b8:dd:6d:1a:0a:f5:99:
35:8d:6b:26:91:ff:0d:4b:9b:01:1c:27:ec:44:ae:
24:03:8c:dc:06:9e:03:22:ab:3d:4c:0b:93:e2:1b:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:43:CF:D9:6F:D6:C9:1A:52:61:69:A8:6F:9B:83:2C:1F:07:C8:EE
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/bUPP2W_WyRpSYWmob5uDLB8HyO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.170.0/23
Signature Algorithm: sha256WithRSAEncryption
09:20:52:fe:7b:03:43:dd:81:14:32:b9:18:6d:1f:ef:ea:11:
56:40:b6:63:f7:f8:03:8e:11:4c:57:ba:f5:04:91:b7:96:f8:
ea:44:ae:1a:8c:59:0d:af:1b:cb:3a:7b:39:1c:53:c4:95:0f:
65:a6:92:68:70:8d:e3:06:a1:f0:41:c1:bd:d7:21:b0:ea:e9:
91:26:f8:f8:3d:e4:5c:c1:d3:c5:c1:94:2f:70:b6:8e:8a:3a:
5a:2b:79:09:09:b4:70:6e:d2:3d:c6:52:a8:6f:17:96:23:2a:
49:5d:c0:a1:8f:94:34:7f:96:3f:18:b0:55:e3:c6:f8:01:87:
4c:32:47:18:3a:85:91:e0:4e:01:35:c5:96:ae:b0:97:46:fb:
c4:a8:e6:52:c9:5f:81:98:cf:c6:d3:c4:5d:cb:0f:e5:d9:82:
60:d3:08:e8:c4:98:1d:ac:df:3b:d6:a8:db:7c:51:5e:8d:f0:
ce:1a:e2:8f:68:76:81:d2:72:df:29:7b:3c:ca:5f:fe:8a:4d:
e4:0b:2d:3a:66:d9:c3:5b:09:36:90:63:7f:a6:1c:c2:2a:c3:
d5:3b:7b:de:21:9b:9d:52:12:b3:38:d1:e2:21:e9:69:2e:da:
ce:3c:54:89:a8:ff:b7:3a:a9:20:51:d0:6a:48:36:52:b6:34:
42:b2:de:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:25 2024 by rpki-client on console-ams.rpki-client.org