Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/Uvr_0KD76JLchDmjGDTOZmXM9Ro.roa
File: Uvr_0KD76JLchDmjGDTOZmXM9Ro.roa (raw, json)
Hash identifier: O8R6GhMuM5vbmtdTNtcChTIhNCuhj+1jyedR5SNni4I=
Subject key identifier: 52:FA:FF:D0:A0:FB:E8:92:DC:84:39:A3:18:34:CE:66:65:CC:F5:1A
Certificate issuer: /CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Certificate serial: 018A403F37A612ACEF91219DFA668F54C1D0
Authority key identifier: 4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/Uvr_0KD76JLchDmjGDTOZmXM9Ro.roa
Signing time: Tue 29 Aug 2023 07:43:19 +0000
ROA not before: Tue 29 Aug 2023 07:43:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16228
IP address blocks: 80.246.160.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:3f:37:a6:12:ac:ef:91:21:9d:fa:66:8f:54:c1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Validity
Not Before: Aug 29 07:43:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52faffd0a0fbe892dc8439a31834ce6665ccf51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:a1:c5:6e:77:41:b3:1d:af:e6:91:39:ac:
73:90:4e:bc:5b:a6:0a:8d:00:dc:6d:c2:32:d2:82:
05:64:3e:e6:85:3d:df:e5:82:83:5b:26:c8:e9:3b:
5f:db:7f:0c:e7:b4:af:9d:bb:5e:c0:48:8b:3b:25:
1a:bd:0a:a7:37:ae:89:4e:b4:5d:db:a6:79:db:62:
49:1d:5b:ac:e3:5f:7d:9d:93:bf:c2:bd:2e:0a:f4:
a4:44:a4:9b:cc:62:45:23:25:57:72:2f:7a:f4:3b:
a7:48:4b:1c:f4:92:09:e8:79:41:72:d4:77:7b:a8:
36:d7:bc:b4:aa:53:a1:02:d6:e9:bb:16:00:5f:89:
65:f2:b0:8f:6b:3e:5f:e8:db:fc:db:43:39:21:27:
ac:02:3c:4a:3a:35:e1:10:10:9d:91:5f:c7:02:40:
23:d0:4a:81:da:e4:79:07:fe:94:b9:3a:b1:9e:a2:
a0:ac:e7:7a:42:1e:b5:a5:b5:34:23:a5:d9:11:f7:
1f:4c:64:8e:f2:ca:a3:2a:0f:a6:bf:31:25:d0:64:
d3:36:4c:e5:3e:45:10:21:4b:90:72:04:dc:cb:e1:
46:76:31:74:e4:7b:ca:fd:e6:fb:32:8d:38:6c:09:
11:cf:e8:a9:fd:11:df:fd:45:f3:dd:fb:17:21:d0:
91:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FA:FF:D0:A0:FB:E8:92:DC:84:39:A3:18:34:CE:66:65:CC:F5:1A
X509v3 Authority Key Identifier:
keyid:4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/Uvr_0KD76JLchDmjGDTOZmXM9Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.160.0/20
Signature Algorithm: sha256WithRSAEncryption
49:d9:d7:2b:d1:e1:77:14:7c:10:a8:0e:51:fd:44:22:19:f3:
87:a0:86:98:43:21:8f:e3:23:1e:c1:07:f2:5c:70:fc:94:e5:
06:f5:a5:6d:53:ec:20:89:fc:97:6b:68:88:41:66:c6:9e:2a:
ad:34:0f:df:de:3c:05:36:be:78:71:db:97:ad:ab:7f:ef:69:
f6:05:f2:69:d2:dc:92:d6:96:27:e8:77:49:0c:2f:62:73:59:
e8:e1:77:cc:08:83:c1:d6:05:4f:43:12:6e:2b:c7:59:f1:cd:
ed:b6:07:81:ec:29:21:b3:5b:a5:17:a7:1e:eb:24:71:4b:e4:
00:5c:1b:36:55:fd:bc:8e:e4:e8:1a:4d:5f:d4:21:87:a8:58:
4f:ce:b5:72:f3:44:7b:99:5f:7b:e1:8c:25:d0:bc:7a:fb:23:
3a:37:8d:76:f9:53:cb:a2:ff:28:40:db:e6:6f:58:17:2a:fa:
d7:94:2e:ef:02:74:a0:70:c0:be:f8:cc:ba:a5:56:74:02:44:
52:2f:d0:4e:cb:f8:3a:31:8c:eb:9a:bc:19:ad:8e:e9:a6:de:
b3:ab:34:24:09:7b:6f:f5:e4:8f:18:b5:5f:69:c7:a6:d4:9b:
81:21:05:dd:b5:c8:fb:29:a4:ab:2b:4a:58:a3:a8:df:45:1e:
67:ca:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:52 2024 by rpki-client on console-ams.rpki-client.org