Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/UIirWMyxq2ebU55aOl_xgGzXw2I.roa
File: UIirWMyxq2ebU55aOl_xgGzXw2I.roa (raw, json)
Hash identifier: lws4uo0wVdrzIey1grANAw8EhBadPe2RcbBpTut4JiI=
Subject key identifier: 50:88:AB:58:CC:B1:AB:67:9B:53:9E:5A:3A:5F:F1:80:6C:D7:C3:62
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01896853D65DD0D6920208730091E1C3071F
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/UIirWMyxq2ebU55aOl_xgGzXw2I.roa
Signing time: Tue 18 Jul 2023 09:27:52 +0000
ROA not before: Tue 18 Jul 2023 09:27:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204203
IP address blocks: 89.44.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:53:d6:5d:d0:d6:92:02:08:73:00:91:e1:c3:07:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jul 18 09:27:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5088ab58ccb1ab679b539e5a3a5ff1806cd7c362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:86:89:93:af:ad:06:e3:03:00:18:e6:d4:
3f:ed:78:86:16:14:13:39:04:ca:ea:d7:95:ef:8b:
e7:1b:77:08:b4:7f:a8:d5:d4:03:a6:7a:bb:60:11:
24:e5:22:18:57:b5:8b:53:b4:f2:7d:b3:83:bb:5a:
dd:4e:ef:9d:fb:2b:84:28:45:89:f7:d3:28:80:4d:
3c:42:27:74:e6:8f:08:59:c7:42:54:27:86:75:3e:
e0:4a:ce:d2:48:47:26:f3:0c:d2:d1:1f:36:b7:48:
33:e4:56:1b:db:2f:ce:92:d2:35:7c:9c:3d:5c:b5:
f2:ff:ef:26:0b:eb:0b:f3:1d:e7:7d:b5:73:df:7a:
8f:3b:fd:42:fa:01:8f:61:32:fd:fb:e9:5c:93:1b:
51:29:f7:26:f7:89:d1:ef:e9:10:94:a7:e4:4d:e2:
02:eb:0f:c3:67:c0:a8:b5:1f:4e:5c:2e:98:9b:2f:
39:f9:2e:a9:ee:38:4d:71:b4:87:2d:b4:1d:0b:60:
a6:ac:61:4f:88:d5:f0:10:ae:a7:d3:cc:c4:9b:b7:
5c:d9:07:d0:dd:95:29:19:04:78:7d:c2:af:8f:c9:
56:b6:1d:d6:b1:f2:ae:95:de:e5:25:37:26:42:22:
af:26:ce:5d:71:61:fc:3e:b1:ab:41:1c:41:9f:52:
b9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:88:AB:58:CC:B1:AB:67:9B:53:9E:5A:3A:5F:F1:80:6C:D7:C3:62
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/UIirWMyxq2ebU55aOl_xgGzXw2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.243.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b5:b1:b5:f5:1c:cb:2b:9d:d9:a6:02:eb:52:43:0a:bb:20:
75:e2:18:f8:1f:e7:0f:64:0b:e5:9f:3a:b2:4e:4a:88:4d:10:
25:6f:ac:23:26:50:15:e7:4f:2d:af:da:8f:a9:fa:2d:ca:7b:
d5:de:65:d1:94:41:eb:70:82:41:dd:82:76:3d:1e:72:b1:68:
7b:1d:64:fb:a3:33:92:79:9c:be:c9:70:e6:7f:d0:6b:b0:59:
85:dd:ae:fc:90:b5:29:ec:38:24:f6:c0:43:ce:42:b9:54:be:
32:f4:76:16:d9:19:ad:43:a4:01:a6:1e:5a:16:18:90:9b:a6:
0f:f5:b6:41:c0:3d:90:de:df:b3:54:20:c3:a9:fd:4e:1c:33:
37:a7:f0:05:bc:d5:91:35:e0:1e:08:44:c8:5e:00:f6:c0:4e:
fa:b7:31:c5:17:d3:19:c7:34:70:72:02:4f:04:5d:1d:15:43:
0c:d2:71:bc:7c:5d:1c:73:cd:e4:f6:2c:86:fa:8b:db:3a:4a:
8e:13:a1:df:cf:f8:8b:e8:8c:d8:08:50:35:8d:87:cc:44:84:
fb:23:5b:76:f3:0a:7d:75:ce:24:a5:9c:5b:42:e9:20:86:72:
ab:44:7e:61:2c:31:27:43:e6:8e:58:81:09:a4:70:35:ba:f3:
5a:bc:9d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 05:24:00 2023 by rpki-client on console-ams.rpki-client.org