Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/uCP6W2Wm2aUqcUockIsKNQG0Pcw.roa
File: uCP6W2Wm2aUqcUockIsKNQG0Pcw.roa (raw, json)
Hash identifier: a1FJ0dO56cNkirSHVpg0R8x2zjqX4Q2EYdERlGdJdGc=
Subject key identifier: B8:23:FA:5B:65:A6:D9:A5:2A:71:4A:1C:90:8B:0A:35:01:B4:3D:CC
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01894941BC9BC506FF17AD5DBB0CA9E6860F
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/uCP6W2Wm2aUqcUockIsKNQG0Pcw.roa
Signing time: Wed 12 Jul 2023 08:39:52 +0000
ROA not before: Wed 12 Jul 2023 08:39:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 194.15.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:41:bc:9b:c5:06:ff:17:ad:5d:bb:0c:a9:e6:86:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jul 12 08:39:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b823fa5b65a6d9a52a714a1c908b0a3501b43dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9d:a2:47:de:1b:08:30:d5:e1:90:3e:87:aa:
16:4e:d4:67:b2:cb:d8:c2:63:66:f2:de:40:0d:10:
c4:4c:c3:ea:e9:8c:26:b4:dd:a5:10:76:6c:93:f6:
fb:67:cd:5c:59:7d:0b:ba:30:3e:7b:e9:13:54:fe:
8c:7d:42:4c:cb:8d:1d:d2:a0:53:4d:04:67:02:a0:
8e:3c:62:9e:79:37:e5:ac:83:74:7f:47:40:67:13:
6d:2b:71:d2:66:65:6e:7b:63:3d:b2:61:f5:91:89:
fa:ca:c9:2e:55:25:5f:28:51:d5:97:5c:49:84:c3:
e5:e4:8a:7c:32:f8:e2:06:95:cd:3b:33:25:92:37:
0c:9f:69:d0:45:8e:0c:6e:db:27:77:86:56:82:ba:
ad:c9:8c:15:e1:da:0e:ad:5f:de:c7:0f:99:c4:29:
ec:02:32:1a:fa:88:61:46:8b:a5:1c:97:09:25:b4:
72:49:e7:6e:99:42:fe:e2:2f:11:5d:3b:4a:70:cd:
b9:82:01:d4:85:92:5c:dd:61:cf:cb:ff:17:5b:e7:
24:9b:32:7d:26:1b:6b:c4:46:f2:64:10:ec:52:da:
09:17:6e:4a:82:07:ab:88:a4:ed:51:4b:16:df:c2:
fc:c5:d8:50:e8:d2:3d:82:dd:cd:1d:1a:bb:13:e5:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:23:FA:5B:65:A6:D9:A5:2A:71:4A:1C:90:8B:0A:35:01:B4:3D:CC
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/uCP6W2Wm2aUqcUockIsKNQG0Pcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.96.0/24
Signature Algorithm: sha256WithRSAEncryption
68:15:6e:cc:cf:4d:1d:31:82:3d:be:3d:f4:cc:e2:6c:e3:0e:
c3:34:b7:08:38:9f:d7:fa:30:9b:38:80:1d:ea:68:09:3d:ba:
3a:d2:6e:1d:01:fc:9c:97:29:82:95:6e:9a:27:25:5f:a2:df:
53:e6:f8:d7:9b:1a:4f:ee:d3:f4:6d:95:69:7a:9b:44:ef:7e:
d1:07:e4:d8:dc:19:ac:41:b6:d4:65:2b:fc:27:e3:f3:e7:16:
d3:05:e7:ee:43:e3:29:53:87:48:0d:15:99:6d:06:48:e7:67:
36:01:fb:56:03:c6:a4:1b:b6:6a:29:d2:52:30:fd:81:19:98:
36:66:29:56:e1:fd:43:da:a4:f7:6a:45:17:54:e2:5a:f5:35:
11:01:29:9d:52:97:e1:b1:63:d7:ce:70:6d:be:5f:93:a2:a7:
3d:53:89:34:cd:97:cd:40:9d:ae:5a:21:45:97:91:ef:91:14:
03:0f:7d:df:9c:b8:ec:fe:27:7c:03:47:0a:00:a4:a9:6e:0d:
e5:78:21:c2:ba:88:74:59:6b:2c:fb:74:10:39:e3:0f:15:30:
87:92:51:ae:d6:cc:60:52:7e:58:9f:85:a2:4c:db:7a:a5:4a:
2c:4c:7a:33:ec:3c:4e:8b:13:55:ff:39:9e:d0:73:57:e3:18:
d9:db:91:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 05:00:53 2023 by rpki-client on console-fra.rpki-client.org