Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/UF8RIVM7yXe_uz_JS-fCWqS0JsY.roa
File: UF8RIVM7yXe_uz_JS-fCWqS0JsY.roa (raw, json)
Hash identifier: AM912Klo2ZKpB/hbBc+BfOXjj3GwbqkphAfZFfDuarI=
Subject key identifier: 50:5F:11:21:53:3B:C9:77:BF:BB:3F:C9:4B:E7:C2:5A:A4:B4:26:C6
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 018571150F9B1DE3E9F3E7377269ED97FF6A
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/UF8RIVM7yXe_uz_JS-fCWqS0JsY.roa
Signing time: Mon 02 Jan 2023 06:04:43 +0000
ROA not before: Mon 02 Jan 2023 06:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.128.112.0/24 maxlen: 24
185.128.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:0f:9b:1d:e3:e9:f3:e7:37:72:69:ed:97:ff:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Jan 2 06:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=505f1121533bc977bfbb3fc94be7c25aa4b426c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:72:41:e4:84:f0:8f:96:07:48:26:fe:b5:e5:
17:e9:66:00:04:da:94:3a:d8:6b:84:70:eb:a0:8b:
ce:fe:a6:54:98:af:c1:bf:6b:28:a0:63:2b:43:52:
d6:6c:59:3f:c9:f8:17:14:a9:38:75:31:fb:7e:cf:
8f:f6:f6:eb:53:97:95:c1:dd:3c:88:c8:37:5f:c5:
34:ef:ea:71:3b:ab:77:3c:00:54:f2:1a:93:f8:dc:
36:55:04:07:3e:f6:a2:a0:58:95:a3:fc:c6:9b:ae:
3f:d9:9b:30:a7:cb:fc:d9:66:af:27:b1:5e:80:80:
8b:05:88:b3:66:09:b7:be:7d:ef:9b:eb:16:fd:ec:
5a:ee:f7:23:b3:7a:fb:4b:a0:ec:75:d2:6d:38:c1:
8d:50:ae:60:af:a9:6e:b0:61:30:f8:47:2c:1f:57:
3e:87:2f:9e:29:51:6d:a8:d7:4a:a7:f7:cf:d6:30:
6b:d9:a5:dc:a0:c8:3c:c5:3d:92:5e:3f:98:a5:f9:
0e:b1:b4:de:d7:64:07:71:0c:e1:ff:ca:19:aa:85:
6a:4c:a4:7a:55:20:23:e0:e3:dc:04:6b:ec:be:b3:
83:35:72:c3:fa:85:48:99:cf:96:b0:a9:a0:86:1e:
5a:52:f8:37:52:63:18:3b:76:0a:b7:85:a9:68:58:
21:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5F:11:21:53:3B:C9:77:BF:BB:3F:C9:4B:E7:C2:5A:A4:B4:26:C6
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/UF8RIVM7yXe_uz_JS-fCWqS0JsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.112.0/24
185.128.115.0/24
Signature Algorithm: sha256WithRSAEncryption
83:da:8e:09:fa:86:21:f5:d7:2f:9b:47:d6:c2:94:6c:73:33:
4f:73:66:a5:cb:82:35:71:1d:9f:23:b3:14:00:52:65:fe:20:
ad:ad:3f:c8:87:94:2a:98:4e:7f:c0:e0:fd:ae:c6:cc:16:f2:
e1:a5:f7:13:ca:77:f3:08:d0:08:4d:89:da:07:e0:2e:88:5a:
2a:b5:46:be:fa:99:fd:89:0b:b2:1a:42:55:33:f7:ac:bd:8f:
01:ae:80:72:34:84:a7:e3:15:ac:f7:c3:bd:12:9c:fc:4b:a8:
51:1a:f6:4c:d2:f5:23:c9:6f:14:48:5b:6c:e1:59:3c:5a:aa:
f4:d6:7d:42:25:a9:fd:88:e9:73:a9:a1:ab:c1:50:48:03:1c:
21:c0:eb:98:bd:b2:c8:1f:ca:e4:0c:af:c8:29:c1:16:87:49:
60:ee:00:80:a1:33:da:19:11:15:5f:a6:4b:40:ad:a2:9c:b8:
7e:7e:b0:83:20:f1:c4:d7:10:2b:93:0d:88:c6:cd:c0:65:22:
f7:5b:b1:8b:85:ea:86:2e:c4:44:cd:db:4c:fc:65:6b:2e:58:
cf:6f:37:34:d8:ad:38:54:4c:8e:58:a4:69:09:56:2b:09:6d:
40:73:a0:91:67:2a:3c:37:6f:4b:db:07:4b:37:ad:5a:d7:f7:
8a:f9:c6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 30 20:52:35 2023 by rpki-client on console-fra.rpki-client.org