Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uNRT40b5IRoeYzcmmH8LnLm3z_w.roa
File: uNRT40b5IRoeYzcmmH8LnLm3z_w.roa (raw, json)
Hash identifier: jLDgVN7H9ALNo92xSogI8Ci5ohZz6KJ1CQ424y0tuXM=
Subject key identifier: B8:D4:53:E3:46:F9:21:1A:1E:63:37:26:98:7F:0B:9C:B9:B7:CF:FC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0188F6D2E9FB282C018C1916FD2AA20D4065
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uNRT40b5IRoeYzcmmH8LnLm3z_w.roa
Signing time: Mon 26 Jun 2023 08:29:57 +0000
ROA not before: Mon 26 Jun 2023 08:29:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15428
IP address blocks: 31.148.112.0/21 maxlen: 24
146.158.80.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:d2:e9:fb:28:2c:01:8c:19:16:fd:2a:a2:0d:40:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jun 26 08:29:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8d453e346f9211a1e633726987f0b9cb9b7cffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:03:d2:9d:0d:b3:74:e1:44:20:02:a8:21:
22:db:38:8e:bb:ae:a9:1c:ed:1f:cb:47:4f:1e:2e:
5c:b7:bc:6d:5f:7b:fd:fb:f0:3f:d9:bd:e0:38:a7:
78:38:a0:73:19:b0:e7:52:7f:ef:53:b6:54:27:04:
3a:18:d4:d8:64:1a:2f:ac:77:86:33:3a:0d:86:7c:
23:48:b7:69:f9:59:e1:4f:30:ea:1f:8e:91:60:b2:
f4:39:d6:2a:d8:80:1c:9f:77:99:a8:64:07:ca:98:
d9:ae:42:fd:ea:f3:f2:7d:2e:75:be:25:89:f3:4f:
61:cd:71:b3:08:a4:5f:b3:34:92:50:5b:6d:57:8a:
02:84:5c:96:18:93:eb:5a:b4:c8:e9:c2:69:c9:4f:
28:be:06:26:5e:f6:71:73:58:05:c4:f2:f2:83:30:
33:76:49:5d:ce:b4:5c:72:c0:b9:da:a1:f8:fa:41:
63:0e:f2:5f:dd:ff:00:68:e1:42:8d:48:c0:a8:e5:
3c:b6:ec:78:39:3d:5f:f1:22:a8:1c:27:b9:73:80:
1d:2a:93:9f:ba:0b:3d:6f:96:12:88:23:f8:59:83:
51:d6:e8:41:26:20:4d:46:6b:10:6f:eb:c4:4c:a4:
96:70:05:2d:2d:c6:4d:07:72:3f:ab:3a:b2:59:de:
36:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D4:53:E3:46:F9:21:1A:1E:63:37:26:98:7F:0B:9C:B9:B7:CF:FC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uNRT40b5IRoeYzcmmH8LnLm3z_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.112.0/21
146.158.80.0/20
Signature Algorithm: sha256WithRSAEncryption
00:74:d8:09:b2:f9:3c:a7:e0:8b:88:48:68:36:8c:b2:f2:26:
ec:d3:94:67:06:3c:66:2a:fa:d8:7f:29:37:f0:29:e4:59:90:
31:24:bc:08:14:ea:71:3e:a5:f5:03:79:79:f5:35:dc:86:ea:
22:b7:39:85:f2:6c:21:4e:2c:8e:4f:49:9c:69:78:bd:04:05:
0d:21:e9:41:a6:fe:78:b2:08:9e:fe:ae:f4:a8:a4:da:97:10:
57:be:66:c3:fd:e3:e6:47:0f:6b:4c:e3:2c:91:10:b2:cf:c7:
ea:aa:79:98:f5:d8:e3:6d:23:54:68:4e:aa:ff:da:a6:7e:07:
65:79:fe:13:8f:65:3f:44:ea:75:93:cc:61:0e:35:92:67:79:
29:32:6a:1d:4f:16:79:66:1d:66:e6:1c:c7:f7:fe:2b:6f:8e:
48:7e:74:d1:fa:ec:c5:44:6d:96:30:d0:3a:88:ef:3a:b8:e9:
ae:64:b3:7e:f4:f2:ed:f9:a6:48:4b:af:94:1a:4e:40:28:80:
04:dd:fb:f7:6e:54:89:93:e1:9e:56:6c:32:34:81:3a:e1:2f:
fb:32:2c:eb:3a:bc:3d:5c:e8:a8:69:aa:7b:59:61:25:53:8f:
ac:ae:da:5d:a5:bf:d4:d0:78:74:9f:f8:4c:d3:24:a4:97:c6:
61:40:01:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 13:38:57 2023 by rpki-client on console-fra.rpki-client.org