Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/UyoD_hBqXIksiKQeQh07Cl8VU78.roa
File: UyoD_hBqXIksiKQeQh07Cl8VU78.roa (raw, json)
Hash identifier: lagnw6tXyM3gnJdPrjeiED9KHXPtcxjFGfZMs2ocXYU=
Subject key identifier: 53:2A:03:FE:10:6A:5C:89:2C:88:A4:1E:42:1D:3B:0A:5F:15:53:BF
Certificate issuer: /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Certificate serial: 01856E8B4A2FC3FEF4684B7FFBD05F79FB0B
Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/UyoD_hBqXIksiKQeQh07Cl8VU78.roa
Signing time: Sun 01 Jan 2023 18:15:00 +0000
ROA not before: Sun 01 Jan 2023 18:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137
IP address blocks: 151.97.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:4a:2f:c3:fe:f4:68:4b:7f:fb:d0:5f:79:fb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Validity
Not Before: Jan 1 18:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=532a03fe106a5c892c88a41e421d3b0a5f1553bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1e:3b:35:e2:47:2a:0f:64:c4:f9:46:60:7d:
2f:ac:a3:f6:ab:83:40:c3:d8:c8:ca:99:43:b9:2f:
4d:61:ac:55:5b:d4:05:f6:43:3d:9b:97:8e:23:df:
72:ff:29:6b:7d:25:83:28:2b:8b:51:39:c8:38:a3:
d0:93:a5:f4:69:ce:96:89:dd:e7:37:2b:88:87:bd:
22:bf:51:fb:67:96:2e:ce:87:bf:0e:16:ec:6d:ce:
59:ae:ae:a8:df:74:53:c5:ef:07:79:78:f4:8b:42:
9e:09:f2:ab:7d:71:ca:d6:56:1b:18:af:0d:bf:e3:
19:f3:9d:70:21:7e:c4:c3:a4:bb:ac:6b:c7:1a:04:
27:9e:4b:1c:cc:c6:d4:36:e5:20:36:3b:38:bd:0f:
b3:a0:7f:89:c1:ef:fa:e4:7e:70:82:21:cb:65:8b:
75:12:b0:12:9f:0a:f1:5a:00:f2:96:85:70:30:93:
2f:6b:6b:90:ba:b8:f4:60:c7:80:e3:07:9d:95:f7:
4a:ee:b9:a6:7c:9e:d9:9a:c2:57:42:27:ee:16:05:
bd:58:f3:b9:af:7d:8a:99:90:71:8f:d3:23:bc:ed:
f7:7a:29:9a:cf:35:b6:4e:b5:60:3a:91:2a:c2:c8:
a7:2f:3a:e5:d0:47:1d:6d:20:c1:32:31:65:2b:08:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2A:03:FE:10:6A:5C:89:2C:88:A4:1E:42:1D:3B:0A:5F:15:53:BF
X509v3 Authority Key Identifier:
keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/UyoD_hBqXIksiKQeQh07Cl8VU78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.97.0.0/16
Signature Algorithm: sha256WithRSAEncryption
44:aa:8e:1f:01:53:2a:0c:a5:22:bb:d8:a8:46:0b:29:2e:96:
4f:5f:f4:b9:34:17:9c:8a:2f:cc:db:b0:86:21:58:92:ef:57:
5a:8f:8b:e4:d1:94:43:42:17:e8:30:e7:d0:ae:6d:ad:85:3b:
63:6c:6f:2c:de:a2:dd:18:76:34:d4:76:bb:09:a1:65:63:a7:
81:89:7b:50:76:98:7b:6b:be:2c:32:8b:f9:0a:04:4f:99:95:
0f:66:d7:8c:15:7f:02:c4:38:11:3c:41:04:e2:d3:e8:b4:69:
73:02:f2:cd:8f:26:87:41:f5:d7:88:c7:fc:51:df:a8:71:24:
09:90:04:84:9f:f8:61:0b:47:62:f6:cc:42:d4:7c:ff:c6:89:
37:2b:74:5b:c7:ae:b0:4b:f2:00:76:c6:4a:d2:f4:2e:f2:78:
66:ac:e8:b8:2b:a7:1b:02:ef:0b:cd:54:09:9b:89:6c:a2:2b:
43:67:65:6a:5b:6c:5e:1e:d9:6f:2f:25:d7:39:e0:69:86:69:
c6:fa:0f:8f:33:88:6e:c4:80:cc:6a:eb:8c:eb:c2:ff:c9:48:
7a:70:b6:6b:0a:43:b1:e3:27:59:4c:40:08:d4:b2:d5:ac:c6:
ee:c3:f1:01:22:cb:f9:33:e4:53:18:83:ef:bf:d6:0a:98:6a:
25:41:c0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:01 2024 by rpki-client on console-ams.rpki-client.org