Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0a7b25-a8fe-4af4-9283-081cc5b8af6d/1/uhvZpSln_LCGeEiPw4uFQFlZZaA.roa
File: uhvZpSln_LCGeEiPw4uFQFlZZaA.roa (raw, json)
Hash identifier: JVXY8HaSa6m8mMUUzyDuD8jxW0JhIA5J0gATBs6jmxA=
Subject key identifier: BA:1B:D9:A5:29:67:FC:B0:86:78:48:8F:C3:8B:85:40:59:59:65:A0
Certificate issuer: /CN=d21c92b72678c6f87fd9bf8fba2be19fac064b58
Certificate serial: 01856F7987E0EEF9582CD4D6A4E6C0E6B1F4
Authority key identifier: D2:1C:92:B7:26:78:C6:F8:7F:D9:BF:8F:BA:2B:E1:9F:AC:06:4B:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hyStyZ4xvh_2b-Puivhn6wGS1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0a7b25-a8fe-4af4-9283-081cc5b8af6d/1/uhvZpSln_LCGeEiPw4uFQFlZZaA.roa
Signing time: Sun 01 Jan 2023 22:35:13 +0000
ROA not before: Sun 01 Jan 2023 22:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49943
IP address blocks: 176.100.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:87:e0:ee:f9:58:2c:d4:d6:a4:e6:c0:e6:b1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21c92b72678c6f87fd9bf8fba2be19fac064b58
Validity
Not Before: Jan 1 22:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba1bd9a52967fcb08678488fc38b8540595965a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:b3:b0:46:5c:c6:7c:15:70:69:bd:59:a5:
7d:91:5f:39:fe:1a:f6:2e:90:6f:c8:ea:fd:d1:8e:
b8:bd:05:08:3a:59:a0:fc:3d:aa:b5:44:e7:f3:21:
4b:e0:e6:2a:bf:73:03:fd:cd:18:78:64:40:3a:ff:
e5:74:de:55:20:03:8d:da:dd:cf:82:a0:56:08:63:
65:d3:ab:52:25:fb:4f:ca:9b:99:cc:1b:5e:68:a0:
83:3c:c8:cf:0f:6d:15:05:29:a5:e8:f4:a9:71:5e:
8a:0d:05:9d:5c:0b:15:73:02:0c:70:d0:66:7b:20:
fb:67:20:3b:0d:ff:ee:77:ea:6d:23:34:1b:e3:64:
4a:53:4e:fe:b0:19:f5:fe:5e:a8:a8:d3:3f:05:bc:
a9:cb:b0:38:78:52:ce:7c:17:33:c7:53:87:d4:75:
06:f6:3d:b2:6a:f7:ff:ea:db:b4:8c:88:26:b3:9f:
69:66:28:b8:21:49:d2:a0:4a:79:2d:9c:4b:aa:4c:
7f:62:c0:47:76:78:d1:54:32:83:7a:db:aa:61:c0:
c9:29:25:0d:f3:91:67:99:85:47:84:c3:c7:46:c5:
35:46:f1:da:fd:0d:0f:14:89:4e:86:ce:27:0b:2e:
07:cf:05:e9:48:c8:69:65:2b:26:9f:a2:06:08:18:
a4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1B:D9:A5:29:67:FC:B0:86:78:48:8F:C3:8B:85:40:59:59:65:A0
X509v3 Authority Key Identifier:
keyid:D2:1C:92:B7:26:78:C6:F8:7F:D9:BF:8F:BA:2B:E1:9F:AC:06:4B:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hyStyZ4xvh_2b-Puivhn6wGS1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0a7b25-a8fe-4af4-9283-081cc5b8af6d/1/uhvZpSln_LCGeEiPw4uFQFlZZaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0a7b25-a8fe-4af4-9283-081cc5b8af6d/1/0hyStyZ4xvh_2b-Puivhn6wGS1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.42.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a1:fd:fb:ff:ed:3a:36:0b:60:09:3d:68:48:5f:88:1d:dd:
d8:44:6b:68:51:8f:31:3f:6b:84:d0:d3:0c:45:0f:31:46:e6:
f8:2e:77:0a:54:13:42:30:dc:f1:cd:82:3e:c9:66:62:01:02:
8c:42:34:ee:be:9b:8f:13:65:f9:75:b8:33:65:19:d7:4c:b6:
1a:1d:13:47:25:90:8e:c3:31:51:55:88:64:1c:75:94:15:06:
4d:68:c8:5f:c1:40:c2:a8:c9:e6:9d:b1:59:ff:aa:c7:10:04:
aa:d3:18:b8:52:f5:94:8e:7c:81:ec:e6:9c:a1:0c:4c:78:f2:
e7:7b:b7:eb:c8:00:0b:21:d8:33:67:eb:fb:a5:78:68:a9:f7:
8c:8d:91:1b:e3:a4:b6:33:73:bc:28:b0:b0:25:7a:61:6d:2b:
a7:a1:8e:2b:12:67:a1:f0:ba:93:36:93:f1:52:12:9a:84:41:
38:14:49:bc:23:d4:3e:5b:0e:cb:76:b7:1a:d5:92:23:5f:2b:
b7:93:04:1b:8b:c3:4f:04:4a:66:a9:c8:a0:64:58:32:4c:4f:
28:cc:13:ce:ff:82:e9:7f:79:79:91:f3:30:a0:c4:9d:e2:f8:
ef:24:b5:f7:57:29:72:7d:c2:d0:31:2d:76:83:26:63:78:bc:
fb:90:0a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:24 2023 by rpki-client on console-ams.rpki-client.org