Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Uapq4juC4USo2fzjBd8SNT9noSM.roa
File: Uapq4juC4USo2fzjBd8SNT9noSM.roa (raw, json)
Hash identifier: cMdtk7F4W1Cn+BWyzzDBmsCS8xWbpW/voDcvGX9zrYM=
Subject key identifier: 51:AA:6A:E2:3B:82:E1:44:A8:D9:FC:E3:05:DF:12:35:3F:67:A1:23
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7ABC53C993BF7824B55E6E7C7B9E1
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Uapq4juC4USo2fzjBd8SNT9noSM.roa
Signing time: Mon 02 Jan 2023 08:44:51 +0000
ROA not before: Mon 02 Jan 2023 08:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202822
IP address blocks: 185.147.50.0/24 maxlen: 25
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:ab:c5:3c:99:3b:f7:82:4b:55:e6:e7:c7:b9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51aa6ae23b82e144a8d9fce305df12353f67a123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:32:97:c1:92:5c:ff:33:72:f4:2b:83:e2:61:
ca:69:e8:b5:bf:4d:ed:ac:af:3a:8a:47:26:c3:9b:
77:18:9d:30:74:75:93:7f:b2:e4:ee:9e:00:ae:b2:
48:ac:15:19:4f:ee:7a:3f:ce:c1:e5:d9:49:ee:27:
f9:87:39:0a:67:f7:35:1f:d7:95:c1:c6:56:37:37:
51:74:7d:8d:44:97:a3:b0:94:8b:43:58:29:e1:8e:
c7:62:8a:a8:b4:68:43:10:17:6b:d6:a9:5d:bf:74:
2c:4e:13:e8:54:05:2f:37:5b:94:80:f1:5c:2b:8d:
67:5c:60:1f:f4:4e:f9:f6:1f:d2:5d:5a:b9:dc:8f:
1e:df:7d:2d:53:64:3f:c4:a1:00:85:0e:0e:79:5f:
6e:e5:2e:c9:31:b6:14:dc:5d:98:4f:c2:16:19:2a:
5d:ec:f0:76:57:3f:81:17:41:10:6f:e4:cc:7f:d1:
d1:a3:6a:8b:fe:fd:fc:36:9f:43:a9:2e:77:a4:d2:
2c:fb:03:1f:77:e2:13:8f:1c:17:b2:25:89:d3:d3:
27:44:8a:e8:5a:cc:ee:fc:39:c4:e1:ce:ec:45:6f:
c6:00:9a:2c:5d:cb:c4:d9:42:75:e0:af:35:fb:d8:
46:2e:75:21:75:e8:76:bb:70:9f:df:a0:b9:e8:18:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AA:6A:E2:3B:82:E1:44:A8:D9:FC:E3:05:DF:12:35:3F:67:A1:23
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Uapq4juC4USo2fzjBd8SNT9noSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.50.0/24
Signature Algorithm: sha256WithRSAEncryption
87:bb:a3:ac:ce:86:03:bc:40:e7:0d:f7:7c:99:0f:bb:e5:e3:
03:f8:7d:6d:24:42:d8:34:3b:05:e9:7d:18:d7:14:ec:46:db:
aa:65:a9:d2:21:47:9c:91:da:32:7f:02:fe:77:aa:4c:b6:c7:
ce:8a:5d:26:d1:01:54:5e:1c:93:f7:ee:51:41:ad:1a:8c:82:
69:82:f0:a0:3f:fa:ab:af:b5:56:bf:94:24:3c:a9:aa:ca:d9:
50:f6:60:c7:3a:e5:30:d1:69:8a:5e:4b:e3:ee:3d:41:9d:50:
cd:e4:32:bb:10:c0:74:4c:38:d3:92:b3:e2:f7:d9:f5:0d:d3:
59:d3:48:07:e7:65:71:4d:79:b6:8f:35:80:f3:62:a9:9d:7a:
d6:71:26:d6:2b:60:90:76:71:16:99:ac:05:8b:e4:d1:08:12:
13:ca:38:67:f0:b8:98:6a:c8:5f:f2:4d:12:fe:3e:89:c0:c0:
16:ca:08:1e:68:60:58:fb:f0:19:88:89:ee:49:ad:1e:98:16:
5a:76:02:46:05:c6:e2:44:93:b2:4b:cb:2b:d9:57:5f:9e:a2:
98:fd:f9:63:df:f1:aa:d8:65:7f:97:49:03:65:4b:1e:7b:b3:
04:a1:c2:5f:21:e3:c9:3c:91:35:b4:0b:68:1f:11:32:bd:88:
c3:46:f4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org