Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Ucaz1pkTuBftwH1yTFPvWLnHDYY.roa
File: Ucaz1pkTuBftwH1yTFPvWLnHDYY.roa (raw, json)
Hash identifier: vR4gZGmXPKgtn1m6YX8RcJ3qrvV3A2edCxKZXlNFJzk=
Subject key identifier: 51:C6:B3:D6:99:13:B8:17:ED:C0:7D:72:4C:53:EF:58:B9:C7:0D:86
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018E3E10FFD1784920C7DF0E0579FE79420B
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Ucaz1pkTuBftwH1yTFPvWLnHDYY.roa
Signing time: Thu 14 Mar 2024 17:44:45 +0000
ROA not before: Thu 14 Mar 2024 17:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201670
IP address blocks: 79.98.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 09:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3e:10:ff:d1:78:49:20:c7:df:0e:05:79:fe:79:42:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 14 17:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51c6b3d69913b817edc07d724c53ef58b9c70d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:93:0f:c1:c8:f7:fb:84:db:13:4f:bd:1e:
bc:68:73:a6:9e:1c:06:1e:87:3a:43:67:73:ac:e5:
93:d1:4b:ab:cd:b9:e8:20:5b:ed:f7:ae:6e:55:c6:
e5:81:c5:74:b4:e3:98:d1:1f:d7:73:1d:70:7e:5b:
fe:70:fb:5d:64:f7:d1:1d:ae:2a:fe:58:5e:db:c6:
c0:72:5d:6f:0a:91:16:c7:4b:59:cf:b1:ad:72:3c:
58:77:68:c1:f6:a4:20:30:df:0e:3e:8f:d6:0f:f7:
24:8e:7d:9a:77:cb:23:6e:1f:bb:c5:b7:82:6d:27:
d1:db:14:2b:c2:9e:28:fb:cc:4b:38:4f:ee:0b:6f:
66:2e:cb:e8:b7:7a:35:db:78:a9:18:3b:b0:39:d9:
4b:57:66:1c:e3:21:d0:a1:23:bb:2d:e1:d1:09:45:
4d:28:8d:cb:e5:a5:be:82:4c:30:5c:36:25:67:2c:
78:d2:f3:c9:42:ec:14:d9:53:66:85:7e:3a:d7:ff:
88:f7:f0:c7:d5:59:cd:ee:e0:92:68:5b:7c:dd:56:
b3:54:fe:15:a1:84:51:e2:0d:7a:94:bb:2a:da:f9:
58:a5:28:0e:21:63:7f:94:5f:3d:23:d8:ae:ac:2d:
b6:a4:38:ac:99:25:17:51:55:b3:47:f9:67:48:55:
d0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C6:B3:D6:99:13:B8:17:ED:C0:7D:72:4C:53:EF:58:B9:C7:0D:86
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Ucaz1pkTuBftwH1yTFPvWLnHDYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.246.0/24
Signature Algorithm: sha256WithRSAEncryption
53:19:d1:02:1d:46:e4:16:5c:87:aa:0b:a9:61:08:4f:d3:b6:
77:5d:c6:c2:a9:df:a2:e4:18:22:63:32:4c:72:52:44:8e:96:
46:b0:6f:ff:85:e8:f7:2c:f9:df:55:91:9a:09:e7:e1:61:74:
9e:31:f6:ec:fc:96:1c:92:61:f9:d0:5f:17:b1:81:f9:f0:7c:
e1:34:e1:f6:e1:15:44:9f:70:ee:f4:ba:39:fd:d7:7e:68:4b:
2c:e4:f9:32:13:ec:51:3f:2f:d1:c5:7f:87:e0:0f:3e:18:10:
e0:e6:da:f0:e9:15:8c:f2:1e:16:7e:64:01:c3:ad:41:6a:c8:
6c:77:2e:d2:b7:9c:6d:9a:a8:db:34:93:9c:30:b2:ce:56:46:
0d:6c:9a:c3:a0:2d:35:63:e7:1a:c1:fc:df:05:7b:ff:9d:8a:
6f:f8:fe:76:66:45:3e:5b:be:bd:c6:1d:25:72:29:78:d8:98:
0d:70:05:09:c9:a0:f3:61:91:87:7c:99:29:b9:86:69:6e:21:
3c:84:cc:74:8e:63:73:1a:11:a0:7a:11:3f:9d:70:27:2e:26:
fc:4b:b9:8f:ab:68:76:30:4f:69:cf:db:72:ac:7e:d1:5b:0d:
a2:9d:aa:d6:ff:10:ea:29:bc:12:ab:40:a3:7c:38:d9:57:a5:
22:9f:51:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4+EP/ReEkgx98OBXn+eUILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjQwMzE0MTc0NDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWM2YjNkNjk5MTNiODE3ZWRjMDdkNzI0YzUzZWY1OGI5YzcwZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHGTD8HI9/uE2xNPvR68aHOmnhwG
Hoc6Q2dzrOWT0UurzbnoIFvt965uVcblgcV0tOOY0R/Xcx1wflv+cPtdZPfRHa4q
/lhe28bAcl1vCpEWx0tZz7GtcjxYd2jB9qQgMN8OPo/WD/ckjn2ad8sjbh+7xbeC
bSfR2xQrwp4o+8xLOE/uC29mLsvot3o123ipGDuwOdlLV2Yc4yHQoSO7LeHRCUVN
KI3L5aW+gkwwXDYlZyx40vPJQuwU2VNmhX461/+I9/DH1VnN7uCSaFt83VazVP4V
oYRR4g16lLsq2vlYpSgOIWN/lF89I9iurC22pDismSUXUVWzR/lnSFXQOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFHGs9aZE7gX7cB9ckxT71i5xw2GMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvVWNhejFwa1R1QmZ0d0gxeVRGUHZXTG5IRFlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT2L2MA0G
CSqGSIb3DQEBCwUAA4IBAQBTGdECHUbkFlyHqgupYQhP07Z3XcbCqd+i5BgiYzJM
clJEjpZGsG//hej3LPnfVZGaCefhYXSeMfbs/JYckmH50F8XsYH58HzhNOH24RVE
n3Du9Lo5/dd+aEss5PkyE+xRPy/RxX+H4A8+GBDg5trw6RWM8h4WfmQBw61Bashs
dy7St5xtmqjbNJOcMLLOVkYNbJrDoC01Y+cawfzfBXv/nYpv+P52ZkU+W769xh0l
cil42JgNcAUJyaDzYZGHfJkpuYZpbiE8hMx0jmNzGhGgehE/nXAnLib8S7mPq2h2
ME9pz9tyrH7RWw2inarW/xDqKbwSq0CjfDjZV6Uin1H2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org