Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uPgtpAMXXXDGQWZlSUhMG9bLSws.roa
File: uPgtpAMXXXDGQWZlSUhMG9bLSws.roa (raw, json)
Hash identifier: nGhtTaP+hp5bj11pw14zQ1iYna6TZZGi/GmCo2BfO8Q=
Subject key identifier: B8:F8:2D:A4:03:17:5D:70:C6:41:66:65:49:48:4C:1B:D6:CB:4B:0B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01870F9A17A4EE1B633F080548B6AE124A03
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uPgtpAMXXXDGQWZlSUhMG9bLSws.roa
Signing time: Thu 23 Mar 2023 17:52:49 +0000
ROA not before: Thu 23 Mar 2023 17:52:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 109.233.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0f:9a:17:a4:ee:1b:63:3f:08:05:48:b6:ae:12:4a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 23 17:52:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8f82da403175d70c641666549484c1bd6cb4b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:91:ac:05:5e:90:04:af:03:07:57:15:32:f1:
f1:8e:bf:15:7e:dd:96:cd:8e:3a:f2:48:6a:3f:93:
bd:2e:7f:b8:af:3d:1a:ad:9c:46:80:64:1b:21:75:
1f:be:08:dd:93:9c:64:98:eb:2c:38:2f:8f:6e:15:
be:9d:29:f7:a3:44:ef:7f:26:04:68:cb:a9:43:8e:
a6:44:49:84:3f:b1:9f:15:2c:5e:f1:de:1a:fe:9e:
44:c9:b8:2a:67:ac:18:61:b9:3e:65:75:33:5c:8a:
12:08:34:b3:37:70:c5:49:7d:ac:b7:38:fc:57:77:
bd:76:74:5e:b4:7c:98:0a:58:da:01:8c:48:cd:09:
84:1c:c0:66:8d:05:58:6c:1c:68:d9:65:93:65:31:
e0:af:ab:74:78:28:f8:ed:99:ff:d0:c4:0b:24:9c:
f8:1e:38:1c:9a:c9:86:fd:5a:ae:f4:b1:11:4b:56:
5e:bc:0e:75:f7:0c:ec:55:8a:03:30:eb:60:cb:af:
f6:60:83:01:dd:dc:a2:00:df:f2:25:36:0b:cb:4d:
c4:2e:6f:cb:b2:d6:59:8b:f2:07:89:db:c6:86:5a:
22:b8:2c:46:ef:19:e2:76:3b:57:fa:4f:bc:b1:20:
47:e7:45:27:61:f9:22:79:9c:09:7b:71:fa:ee:10:
ee:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F8:2D:A4:03:17:5D:70:C6:41:66:65:49:48:4C:1B:D6:CB:4B:0B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uPgtpAMXXXDGQWZlSUhMG9bLSws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.184.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:10:12:92:47:56:57:28:d4:a5:e7:87:78:d7:24:e4:62:e5:
77:8e:1e:16:96:9e:b8:9e:71:3a:4d:46:5c:8e:d7:ac:3a:64:
6a:20:65:1f:59:dd:2f:63:c9:f2:3b:bc:42:31:cb:32:f6:b1:
72:15:c6:24:38:9b:5f:03:f8:08:c8:3c:ae:4a:d6:cd:51:82:
6c:70:aa:73:f6:bf:e3:4e:f0:d3:32:cc:f7:96:de:b6:ba:63:
83:03:fc:63:d6:c4:c8:5b:95:64:5f:e8:5c:fe:ad:bb:57:19:
fa:75:f4:19:5f:2a:c2:41:9f:66:76:a3:db:15:45:91:b6:c5:
b7:97:e4:ee:ec:cd:3b:f2:3c:d8:0b:03:e5:c3:b8:5d:b2:8f:
b9:cc:f3:c3:a8:db:64:9d:fe:e6:0c:af:de:2a:b1:3c:92:2c:
99:6c:50:7a:16:36:57:fa:cc:bc:90:28:86:fb:92:e1:07:89:
18:99:81:20:1d:d0:e1:3a:1f:18:28:b4:ba:91:ba:8b:4b:c8:
74:64:75:b9:08:4d:e5:8e:68:7d:33:83:de:3a:f1:16:50:df:
b2:55:d7:ba:5e:d4:a9:27:d4:08:d8:af:fd:08:e4:98:39:64:
7e:91:c9:a8:d0:99:38:95:07:7f:00:29:42:60:d9:d9:ad:a1:
48:1f:70:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-fra.rpki-client.org