Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/uP-CYXLO86K4DFKgsq_Ncb_L9JE.roa
File: uP-CYXLO86K4DFKgsq_Ncb_L9JE.roa (raw, json)
Hash identifier: BMNGbikeM2ePQfrRscko0XJE9lnPl1nLsixw5m7cOzc=
Subject key identifier: B8:FF:82:61:72:CE:F3:A2:B8:0C:52:A0:B2:AF:CD:71:BF:CB:F4:91
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 01856DCAD0658DC40C8A1A4613D5ED449135
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/uP-CYXLO86K4DFKgsq_Ncb_L9JE.roa
Signing time: Sun 01 Jan 2023 14:44:46 +0000
ROA not before: Sun 01 Jan 2023 14:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 176.103.225.0/24 maxlen: 24
176.103.224.0/24 maxlen: 24
176.103.226.0/24 maxlen: 24
176.103.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:d0:65:8d:c4:0c:8a:1a:46:13:d5:ed:44:91:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jan 1 14:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8ff826172cef3a2b80c52a0b2afcd71bfcbf491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fe:08:1d:36:bc:61:22:af:b5:04:96:5b:97:
a2:bb:e8:67:c6:e8:5b:7d:9f:5c:d8:4d:f5:65:f8:
81:c3:c4:96:5f:b7:eb:ea:7d:b7:6f:d8:6f:47:b7:
cd:d6:44:79:12:eb:83:60:36:6b:62:bc:85:d6:50:
85:26:7e:15:f5:8c:e3:da:a9:d3:85:da:b0:47:54:
f5:22:db:81:b0:f3:52:fd:06:8a:94:57:24:c8:1c:
3f:a6:ac:8b:bc:2b:b9:6d:1a:99:b6:4e:49:a6:28:
a7:a2:a3:f8:35:43:c2:5b:41:8a:02:35:da:f4:14:
4c:55:c5:1f:60:6f:56:3a:ba:f0:ca:00:f4:54:ae:
9e:fe:0e:89:a2:f5:de:82:f7:3a:5c:bc:0e:54:7d:
41:d9:e9:c5:94:21:26:a4:d9:5b:4e:6b:fb:ab:6e:
b6:8a:31:4e:aa:58:9b:71:3a:12:6b:73:68:6a:ef:
16:75:8e:55:54:71:2f:7e:4d:6a:00:55:02:45:1e:
6d:91:c9:5b:15:0e:95:ca:4c:46:6d:e1:55:11:4a:
53:02:66:70:7f:6f:55:ae:16:f9:8a:5c:9d:d1:37:
af:11:32:d1:c5:58:38:f1:27:fe:4d:4c:1c:f4:3f:
a7:60:2b:e3:58:2d:ef:7f:ae:6e:e1:b7:1b:9b:5b:
4f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FF:82:61:72:CE:F3:A2:B8:0C:52:A0:B2:AF:CD:71:BF:CB:F4:91
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/uP-CYXLO86K4DFKgsq_Ncb_L9JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.224.0/22
Signature Algorithm: sha256WithRSAEncryption
54:1a:0b:a9:43:da:14:e0:f7:11:58:a7:0e:4c:47:c9:a9:cc:
77:ee:7c:c4:f8:6e:99:f0:4c:c4:05:a8:d1:08:73:b8:be:c0:
01:13:83:ed:b5:6e:61:8a:d7:62:61:a5:3c:ef:91:48:3b:3e:
1b:d5:06:9b:ec:2f:1b:2f:c5:f4:94:e0:27:6e:69:b9:1d:48:
99:1e:75:79:07:cf:58:f7:ba:94:df:0c:26:7d:13:31:8f:a6:
4c:4d:33:a9:c2:f0:36:e8:91:ab:d5:9e:0d:03:45:e1:e6:ac:
5f:9d:7a:41:1f:0f:4a:19:f7:0a:ad:1d:b4:19:20:ea:c7:08:
91:3f:c0:7a:cc:1a:8a:51:40:7d:5e:81:7e:51:de:01:ee:51:
9f:33:a8:72:b6:0f:f3:41:2a:a8:d1:8e:c9:84:50:75:22:b1:
5c:fd:54:73:1b:b2:32:6b:68:fb:e0:9b:96:de:ef:6c:c3:c9:
7e:17:90:4c:e7:63:24:5f:39:a6:01:58:f1:a6:f1:fc:e8:19:
6b:3d:25:8c:d0:d0:73:57:fe:47:d3:e4:32:f5:2e:0d:62:95:
43:8b:fc:c4:94:23:08:c4:23:01:33:af:c7:2b:e0:74:af:75:
79:05:83:1e:75:72:b5:a4:b5:cb:36:50:e7:ef:30:41:41:9e:
0f:23:8b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:17 2024 by rpki-client on console-ams.rpki-client.org