Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/U7unsm2th06lOm9IB-DC0wvmdLw.roa
File: U7unsm2th06lOm9IB-DC0wvmdLw.roa (raw, json)
Hash identifier: i6KjYB2OkQWTP/yi0EIA3EzkHPWnpJxi8ETZ6U94SUA=
Subject key identifier: 53:BB:A7:B2:6D:AD:87:4E:A5:3A:6F:48:07:E0:C2:D3:0B:E6:74:BC
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018B864F7444CD77EAD9A4E94B3CD16B6C69
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/U7unsm2th06lOm9IB-DC0wvmdLw.roa
Signing time: Tue 31 Oct 2023 15:17:15 +0000
ROA not before: Tue 31 Oct 2023 15:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 82.206.56.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:86:4f:74:44:cd:77:ea:d9:a4:e9:4b:3c:d1:6b:6c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Oct 31 15:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53bba7b26dad874ea53a6f4807e0c2d30be674bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:7d:5c:65:06:6b:84:6a:54:a2:74:00:6b:
35:32:ce:c4:6c:5a:ce:a7:44:60:43:35:4f:a6:97:
85:54:0b:a5:15:3c:f1:9f:eb:2d:0a:47:09:71:f0:
22:a3:8f:6c:51:83:9a:22:84:39:06:6e:d2:05:3c:
04:da:0f:8b:88:4c:91:30:08:39:d9:06:d0:12:86:
6e:1d:cc:94:5e:8d:fc:f4:50:9d:a5:1b:99:08:4c:
ba:91:cc:19:19:17:99:6c:86:e3:8f:44:33:6b:87:
2c:a4:ac:a7:3e:f9:8e:cb:7d:ba:4b:34:61:5f:99:
22:30:ea:f7:56:ae:b3:72:fe:8b:45:b9:8b:6a:64:
b1:44:16:49:5a:cc:f7:32:1d:e2:b3:19:41:9c:83:
c6:72:aa:85:f6:bf:32:af:bc:59:16:2d:53:9c:b2:
45:be:c0:73:f6:e0:66:17:58:65:62:20:4d:ed:f9:
3f:99:46:33:b4:85:7b:cf:a8:b6:3d:0b:cc:15:8d:
9d:91:f7:3d:ac:69:83:4d:67:e5:e0:aa:e2:0f:d2:
e3:c2:30:f2:1f:37:29:bc:81:3d:d6:0c:16:c3:ec:
99:ee:6a:5e:92:8f:c0:96:3c:97:b7:8b:62:12:97:
61:dd:76:b6:1a:78:bd:fd:b2:17:78:bf:0d:0c:13:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BB:A7:B2:6D:AD:87:4E:A5:3A:6F:48:07:E0:C2:D3:0B:E6:74:BC
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/U7unsm2th06lOm9IB-DC0wvmdLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.56.0/21
Signature Algorithm: sha256WithRSAEncryption
24:95:b7:67:ca:32:59:b8:2c:0f:fb:c5:f6:e2:a9:68:e7:25:
b0:75:dd:9a:2f:d7:49:68:1c:b1:22:59:67:8f:30:6e:96:1d:
aa:8e:34:17:62:53:90:8b:66:17:e2:2f:db:72:a6:4a:2d:07:
bf:8b:7d:ce:b2:09:aa:2f:e6:77:d3:74:bc:64:eb:97:1d:6b:
20:e2:b0:65:5a:81:2b:47:26:e2:8c:22:10:3e:0b:3b:2c:66:
eb:0a:79:4f:90:79:64:51:11:5b:73:d2:da:bc:88:0a:ee:57:
0d:c3:b7:99:0a:18:39:73:be:ae:c7:f4:90:33:8a:75:2b:1b:
a3:1c:a5:55:ab:30:50:7c:c5:99:27:83:b1:67:4a:2e:65:15:
2d:c6:89:14:6b:1a:12:a0:86:23:e4:32:db:49:ea:a4:ac:d3:
71:0b:78:bc:6d:3c:be:13:05:5d:ac:a3:4e:b0:6d:ec:cd:bf:
4b:55:d6:7b:58:d4:62:27:32:84:a6:c4:62:0f:bd:1a:c4:4c:
58:4b:9a:9a:5a:ce:82:72:a3:04:3a:fa:96:4b:bb:4e:6f:ff:
3a:fe:00:da:38:d5:4a:b5:97:40:65:ff:48:97:d6:19:78:e3:
88:19:74:cf:0c:4f:28:43:37:89:bf:36:5e:57:b1:d6:f7:5e:
3c:a0:86:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 11:44:47 2023 by rpki-client on console-ams.rpki-client.org