Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/UqzPOVo34QfiIYMZz6UnktWqxq8.roa
File: UqzPOVo34QfiIYMZz6UnktWqxq8.roa (raw, json)
Hash identifier: s5BU2ba1UlpfL4l4DpRJ1pa8aprlRcwQmbdeCdz4BhU=
Subject key identifier: 52:AC:CF:39:5A:37:E1:07:E2:21:83:19:CF:A5:27:92:D5:AA:C6:AF
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 01856D13C97085BD82DD9D2706B09CF24E67
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/UqzPOVo34QfiIYMZz6UnktWqxq8.roa
Signing time: Sun 01 Jan 2023 11:24:51 +0000
ROA not before: Sun 01 Jan 2023 11:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134196
IP address blocks: 2a0d:2480::/29 maxlen: 29
2a0c:f480::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:c9:70:85:bd:82:dd:9d:27:06:b0:9c:f2:4e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 1 11:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52accf395a37e107e2218319cfa52792d5aac6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:0d:a1:f5:85:24:57:5e:95:f5:75:2b:f7:
91:65:bc:16:5a:a9:31:e4:a7:2e:e9:0e:cd:45:05:
c7:7b:cd:54:e9:d2:ff:6d:e1:73:d5:9b:e5:a4:29:
38:f7:0e:7f:3b:29:de:6e:ac:f3:5b:b3:a8:1f:a8:
aa:91:4f:bc:27:5d:b0:8b:01:01:ce:cb:30:89:9a:
2e:d6:93:bf:f5:f4:69:40:59:87:b1:8a:15:cc:10:
a4:69:5f:8a:1a:1f:70:f4:ef:27:2e:83:da:d5:21:
3e:fc:2e:66:4d:57:0d:ca:02:22:e7:01:f2:11:c8:
62:9b:36:9b:cd:e8:3f:00:b5:44:f6:5e:b5:51:89:
c1:d9:2f:d8:29:00:3c:63:fe:01:7f:6a:e0:ab:9c:
15:b2:b4:8f:20:6e:fa:ab:61:42:e6:d0:c8:af:a8:
35:05:17:43:43:75:38:76:2a:69:f3:6b:b9:f7:5b:
0d:11:d5:6d:3e:43:30:dc:a4:ad:79:7e:c5:23:19:
4f:9b:d1:cd:cc:30:b4:16:1d:9b:29:dd:b0:bb:41:
54:39:d5:aa:64:e3:63:98:b8:2a:83:f8:7a:2f:d5:
60:e2:58:fb:7c:9d:d2:8a:18:ce:34:fb:7e:24:2c:
d4:f0:83:8c:f0:ed:b5:c7:d6:d4:a4:d2:e0:4b:c5:
25:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AC:CF:39:5A:37:E1:07:E2:21:83:19:CF:A5:27:92:D5:AA:C6:AF
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/UqzPOVo34QfiIYMZz6UnktWqxq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:f480::/29
2a0d:2480::/29
Signature Algorithm: sha256WithRSAEncryption
a1:90:36:b2:d6:5e:09:5a:bf:13:cb:36:7f:e5:9b:da:73:45:
18:ed:5b:aa:f1:e2:3c:c5:5d:48:48:51:61:3f:9e:f2:89:9d:
42:a9:72:29:31:fb:69:bd:97:4d:87:cd:92:67:f4:41:90:4e:
58:70:09:02:f0:d8:39:01:41:4b:42:58:cb:b6:ea:3b:f4:c2:
ff:9d:b5:10:b0:30:94:02:39:53:28:84:3a:1b:5f:31:70:8a:
98:77:d3:90:d8:44:a7:dd:12:40:e1:6d:67:47:b9:d0:e9:32:
45:a4:c4:8a:72:49:38:ff:9f:3d:fc:03:ee:00:16:38:92:e1:
e6:10:83:3b:45:8d:b0:7f:3b:09:c7:58:c4:46:92:b9:b4:e0:
3b:2d:de:94:5f:11:3c:ad:21:0a:51:0d:5e:55:b9:f3:0c:0a:
39:db:99:f0:78:04:b1:21:6f:51:2d:e5:89:1a:c6:62:cf:04:
1d:ec:fd:ff:53:aa:a5:11:00:7f:71:f0:e6:00:50:7f:d6:4e:
9f:cb:a1:c6:ed:8a:39:bc:01:61:f0:7d:aa:29:8f:91:2e:34:
80:be:c5:55:79:da:f4:cb:8e:c0:b5:bd:09:48:03:64:7c:8c:
41:4b:7d:49:28:93:83:97:c2:c3:e3:1a:12:01:9f:05:f1:38:
0e:b7:13:a9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVtE8lwhb2C3Z0nBrCc8k5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4
Y2RhNmUwHhcNMjMwMTAxMTEyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmFjY2YzOTVhMzdlMTA3ZTIyMTgzMTljZmE1Mjc5MmQ1YWFjNmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIANofWFJFdelfV1K/eRZbwWWqkx
5Kcu6Q7NRQXHe81U6dL/beFz1ZvlpCk49w5/OynebqzzW7OoH6iqkU+8J12wiwEB
zsswiZou1pO/9fRpQFmHsYoVzBCkaV+KGh9w9O8nLoPa1SE+/C5mTVcNygIi5wHy
Echimzabzeg/ALVE9l61UYnB2S/YKQA8Y/4Bf2rgq5wVsrSPIG76q2FC5tDIr6g1
BRdDQ3U4dipp82u591sNEdVtPkMw3KSteX7FIxlPm9HNzDC0Fh2bKd2wu0FUOdWq
ZONjmLgqg/h6L9Vg4lj7fJ3SihjONPt+JCzU8IOM8O21x9bUpNLgS8UlMwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFKszzlaN+EH4iGDGc+lJ5LVqsavMB8GA1UdIwQY
MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt
NjUzMzJiNDdmNWViLzEvVXF6UE9WbzM0UWZpSVlNWno2VW5rdFdxeHE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi
LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgz0gAMF
AyoNJIAwDQYJKoZIhvcNAQELBQADggEBAKGQNrLWXglavxPLNn/lm9pzRRjtW6rx
4jzFXUhIUWE/nvKJnUKpcikx+2m9l02HzZJn9EGQTlhwCQLw2DkBQUtCWMu26jv0
wv+dtRCwMJQCOVMohDobXzFwiph305DYRKfdEkDhbWdHudDpMkWkxIpySTj/nz38
A+4AFjiS4eYQgztFjbB/OwnHWMRGkrm04Dst3pRfETytIQpRDV5VufMMCjnbmfB4
BLEhb1Et5YkaxmLPBB3s/f9TqqURAH9x8OYAUH/WTp/Locbtijm8AWHwfaopj5Eu
NIC+xVV52vTLjsC1vQlIA2R8jEFLfUkok4OXwsPjGhIBnwXxOA63E6k=
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:55 2024 by rpki-client on console-ams.rpki-client.org