Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/uq5I3PdSLhlBoDHzOJpRBq5yFnQ.roa
File: uq5I3PdSLhlBoDHzOJpRBq5yFnQ.roa (raw, json)
Hash identifier: g6Ec6OIMFXYzK+XRq8yums7ME7Q7Hix5h6plJh8KO58=
Subject key identifier: BA:AE:48:DC:F7:52:2E:19:41:A0:31:F3:38:9A:51:06:AE:72:16:74
Certificate issuer: /CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Certificate serial: 01856C65BF972197BB8E4E147FC0D035CA67
Authority key identifier: 81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/uq5I3PdSLhlBoDHzOJpRBq5yFnQ.roa
Signing time: Sun 01 Jan 2023 08:14:45 +0000
ROA not before: Sun 01 Jan 2023 08:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 141.20.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:bf:97:21:97:bb:8e:4e:14:7f:c0:d0:35:ca:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Validity
Not Before: Jan 1 08:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baae48dcf7522e1941a031f3389a5106ae721674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:07:0b:5b:9c:18:a9:bb:6c:b0:cb:13:f0:
62:ba:e6:bb:2f:0c:df:0d:02:46:2b:4b:32:e9:37:
36:7f:03:8c:15:45:29:76:24:50:a1:60:9b:26:1d:
ac:02:48:07:38:83:b6:2d:31:5d:9c:6f:65:71:d1:
a3:5d:ff:1e:c5:bc:d6:2c:1b:69:63:4e:bb:d2:7f:
a0:b2:79:1b:2f:48:15:bb:7d:85:42:84:d5:7f:0e:
3e:57:7f:ce:35:65:74:65:02:fc:13:17:95:8c:54:
a1:49:71:e6:19:89:77:c2:ee:9f:69:65:bd:28:de:
d7:c2:19:e4:8c:00:04:6d:13:e1:39:72:61:5d:8d:
32:be:21:9e:29:58:bb:12:0e:22:a8:11:c5:12:04:
3c:de:a8:ad:c1:5b:11:ac:b4:2c:a5:84:ad:dd:93:
dd:cd:ae:55:84:67:77:8d:b5:d3:2e:4c:c4:34:1a:
c8:b4:04:b2:56:8d:e9:a1:60:b3:eb:02:71:9d:ec:
0a:64:27:15:9c:f8:bc:70:0c:3c:1f:39:1c:57:e6:
a6:e5:74:3d:7f:14:4b:38:dd:f6:46:c0:63:7b:62:
af:e8:27:5e:5d:88:64:8c:61:bd:de:b5:2a:4a:7e:
a4:70:64:69:e9:67:bf:f9:ec:eb:ea:d6:05:40:b3:
e8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AE:48:DC:F7:52:2E:19:41:A0:31:F3:38:9A:51:06:AE:72:16:74
X509v3 Authority Key Identifier:
keyid:81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/uq5I3PdSLhlBoDHzOJpRBq5yFnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:32:87:d0:ff:89:10:fd:02:e9:53:cc:8b:86:02:aa:4a:20:
75:60:6f:46:1c:71:59:fb:07:2b:ce:f6:41:58:f7:eb:b6:53:
4c:06:6a:36:5e:89:23:ad:8a:98:93:cb:56:38:8f:1c:0d:af:
9a:3e:27:42:bc:af:11:71:32:6c:32:25:c3:49:04:6c:bc:a6:
fe:12:53:2a:57:d3:7b:aa:e1:8a:9f:b0:d6:fc:20:2e:c0:ec:
78:09:85:82:c6:6f:e8:69:27:1a:60:b8:66:55:75:24:72:e7:
f8:e0:94:80:88:c4:66:9d:cd:74:86:7c:3a:f5:06:bd:43:ea:
4b:d2:c9:ec:e3:cd:fc:cb:8f:78:35:df:fd:d0:92:b5:59:44:
94:5b:4d:01:0b:05:ff:4a:91:5b:1a:3b:a4:c4:90:b5:23:d9:
26:20:0e:34:0b:1c:13:2a:a5:db:1d:8f:1c:7b:30:84:cf:44:
4f:8b:8a:fb:8a:c3:af:29:94:e5:c8:93:47:18:e9:95:17:8e:
49:19:c5:7e:d4:10:41:98:f3:37:47:e1:f5:33:82:80:5c:93:
84:79:77:28:27:70:82:94:22:f5:ea:33:e5:0d:64:48:49:8d:
3b:e1:86:ff:35:15:1c:5d:a4:51:95:d9:55:e5:0e:04:f8:35:
c0:e3:c0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:14 2024 by rpki-client on console-ams.rpki-client.org