Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/UgljusB8pLTZnh4V6d99m19273g.roa
File: UgljusB8pLTZnh4V6d99m19273g.roa (raw, json)
Hash identifier: P4IPlD2fUmZdCNf/rLq2x9Nq3Zg8SdLkLndvVDIoA00=
Subject key identifier: 52:09:63:BA:C0:7C:A4:B4:D9:9E:1E:15:E9:DF:7D:9B:5F:76:EF:78
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 0189DE67E6A91265BB3B7B16941F7E613A9E
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/UgljusB8pLTZnh4V6d99m19273g.roa
Signing time: Thu 10 Aug 2023 07:44:58 +0000
ROA not before: Thu 10 Aug 2023 07:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 2a03:b7c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:67:e6:a9:12:65:bb:3b:7b:16:94:1f:7e:61:3a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Aug 10 07:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=520963bac07ca4b4d99e1e15e9df7d9b5f76ef78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:fa:98:94:f4:12:46:0b:de:69:e7:80:d4:
01:63:97:9e:86:d0:52:57:0a:5c:c6:ef:1e:8a:be:
b4:32:b9:bd:4a:bc:08:d7:5e:71:b4:8b:66:24:eb:
02:23:ec:ce:b5:c4:6f:2a:d8:01:99:29:00:ee:94:
99:0d:40:8d:65:f6:e9:2a:13:7e:33:81:f8:e6:f5:
ba:be:02:c3:92:dd:1a:bb:7d:d0:65:a1:43:85:de:
35:a1:bf:c1:68:de:8b:8c:f2:32:6b:a4:ad:9c:1e:
1e:60:2b:3b:57:a6:78:97:09:b7:af:ed:98:69:62:
c9:c2:aa:04:16:cb:28:d0:1b:9f:6f:7d:0d:9a:6c:
56:b8:00:bf:6b:86:b5:f6:76:39:8e:77:77:72:7d:
23:f1:3e:b4:ec:63:29:91:26:4b:6b:fe:34:1e:a1:
36:12:9e:ba:20:55:a9:b4:16:36:6a:7a:de:39:8d:
b5:4b:a5:8a:44:80:ba:a4:91:9a:f4:e6:83:75:14:
6b:73:17:f3:75:7c:09:0b:f9:fe:27:8c:97:e7:d0:
61:34:85:cc:12:64:f8:e2:ba:76:1b:f0:31:1b:82:
4b:c7:a4:90:6a:c0:3a:c7:ca:08:ea:3d:be:c9:25:
fb:3d:28:73:58:f8:16:b6:9e:b2:61:0e:73:da:ac:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:09:63:BA:C0:7C:A4:B4:D9:9E:1E:15:E9:DF:7D:9B:5F:76:EF:78
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/UgljusB8pLTZnh4V6d99m19273g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:b7c0::/32
Signature Algorithm: sha256WithRSAEncryption
82:22:c9:93:b2:8f:f9:fc:00:c1:9d:a7:6f:bc:8e:47:27:83:
9f:07:e6:6f:7f:a4:e1:2d:35:e7:f3:2d:ea:b5:65:7d:67:69:
25:b4:b9:26:ae:4e:59:6d:cd:a4:2b:ed:8a:c5:b4:f1:21:5e:
f7:5b:22:e0:a3:c2:55:f8:a3:c2:dd:bb:a0:7a:6d:a8:e4:29:
67:06:49:22:27:40:7d:98:fe:74:db:24:68:26:38:a6:f5:0d:
84:09:f6:32:34:65:a7:20:a3:44:c1:7f:83:07:57:1b:c0:ec:
3f:97:48:01:41:1b:64:12:9d:c2:7e:a9:13:f1:68:fa:83:96:
b6:75:54:bd:13:79:6c:43:12:65:64:24:7b:80:c2:b4:72:ae:
c7:60:8a:fd:14:67:41:53:72:f0:d4:9a:5a:f9:2a:6a:c5:6e:
f8:f6:90:a6:12:2d:01:aa:50:d3:95:b2:77:19:0e:39:fc:ef:
74:ba:dd:13:5f:58:ba:2c:96:72:64:7e:6d:c8:2f:e8:a6:39:
53:aa:9f:17:4a:50:dc:5f:97:9e:0e:0a:f6:fa:8f:8e:89:6e:
ba:95:6d:99:2c:5b:70:ec:57:91:d7:69:7a:1d:e4:30:c8:21:
d4:61:72:15:44:7c:62:a8:b1:35:0e:3b:e2:22:5a:13:ac:7d:
83:e9:cd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:58 2024 by rpki-client on console-fra.rpki-client.org