Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/UCVgjFs39hI6W-Aq4fzyCmF7Vmg.roa
File: UCVgjFs39hI6W-Aq4fzyCmF7Vmg.roa (raw, json)
Hash identifier: bc+B5QhXV51TXbhgrnDzKzU3JGP2dKRLMZQlUIVnQvc=
Subject key identifier: 50:25:60:8C:5B:37:F6:12:3A:5B:E0:2A:E1:FC:F2:0A:61:7B:56:68
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 018798E9A7D7D5B2B5209BBDB0C94C71BB34
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/UCVgjFs39hI6W-Aq4fzyCmF7Vmg.roa
Signing time: Wed 19 Apr 2023 09:47:42 +0000
ROA not before: Wed 19 Apr 2023 09:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 91.211.115.0/24 maxlen: 24
2a13:a502::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 21 Apr 2023 07:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:e9:a7:d7:d5:b2:b5:20:9b:bd:b0:c9:4c:71:bb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Apr 19 09:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5025608c5b37f6123a5be02ae1fcf20a617b5668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0d:f1:5b:96:55:bc:93:8c:7c:df:7b:15:a4:
e2:2a:b6:8d:91:33:7a:60:35:c7:f4:e3:90:d6:6e:
2b:80:dd:73:8d:b1:41:df:a6:24:6c:63:39:23:ed:
a5:d0:56:fa:d8:4b:30:5a:76:75:aa:74:41:4b:0c:
27:5d:b5:ef:cd:69:67:b3:07:2f:71:53:3e:b3:bc:
d1:58:16:91:3d:f6:24:3b:36:8f:53:5d:ae:3f:98:
ec:05:67:35:cc:17:f4:8e:87:49:f2:7c:54:25:c1:
f1:69:d9:90:b2:94:0e:47:10:49:f2:ef:b7:82:1e:
35:2e:f5:70:ec:cc:0f:83:aa:62:12:5f:56:5b:ed:
2c:ad:b8:b7:fb:e5:a4:77:60:49:19:da:b0:05:8f:
d6:41:48:0e:7a:65:a4:3f:51:1d:7e:39:17:7c:3e:
0f:aa:b7:4e:6f:df:fc:6a:28:3b:83:5c:5d:c5:5a:
b0:7e:c4:44:68:f9:de:31:95:d5:7c:34:01:44:68:
27:15:79:5b:ba:0f:91:0c:c4:75:4f:5e:4f:36:77:
49:f7:ea:0e:6e:18:4c:4a:16:be:96:88:10:d9:8f:
0f:63:4c:d2:6f:cc:5c:20:c2:2d:a2:fc:67:c5:f5:
29:d9:b2:1f:41:26:96:e7:9d:46:ea:54:53:2a:49:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:25:60:8C:5B:37:F6:12:3A:5B:E0:2A:E1:FC:F2:0A:61:7B:56:68
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/UCVgjFs39hI6W-Aq4fzyCmF7Vmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.115.0/24
IPv6:
2a13:a502::/32
Signature Algorithm: sha256WithRSAEncryption
77:07:41:59:a6:46:30:0c:b4:5f:2e:a4:9e:f8:c8:18:cc:d1:
20:c4:7d:b5:c1:ac:0b:0f:76:4b:89:cb:bc:5e:7b:65:5f:c7:
20:f3:6a:b3:b8:a6:76:9e:d2:67:89:93:48:7b:49:13:d8:b5:
d5:45:c9:41:3b:dc:21:a9:24:ed:43:a6:96:14:93:7e:bb:81:
55:ed:05:55:cf:03:58:a9:87:46:66:9b:14:64:fd:a1:3e:21:
15:67:56:23:e3:45:c5:a2:95:fc:e2:24:ab:ef:3e:f7:8e:e2:
b2:32:01:93:ff:43:c8:67:a8:3a:55:22:07:fb:ea:01:5f:18:
7d:b1:3f:46:42:27:31:18:62:55:5c:93:a0:cc:9e:6e:f7:43:
1f:94:bc:71:7a:ac:6a:cf:ef:10:b3:8f:27:96:f8:ef:4a:eb:
56:5c:6a:1c:53:b4:53:2a:ca:12:f2:67:48:6b:28:bc:8a:18:
37:49:6d:f0:24:05:39:3e:c4:14:b1:5e:e4:58:59:fd:ff:ca:
85:c2:6c:d4:a1:1f:c9:2d:25:be:0d:85:a0:b4:21:e5:42:b0:
26:3e:76:d0:fc:ba:e4:a8:48:a0:9c:db:d4:01:02:0a:29:28:
7f:e0:c5:77:8f:b3:86:97:d9:8c:c1:87:38:4b:99:c6:e3:ba:
0b:c5:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:18 2024 by rpki-client on console-fra.rpki-client.org