Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/uPzH-SSBE5OlKoOC_uaxLvLhWag.roa
File: uPzH-SSBE5OlKoOC_uaxLvLhWag.roa (raw, json)
Hash identifier: 83L/Sozoaa8LVSOd1rFjbvmaFWpPBvbiNq5kXIl15DE=
Subject key identifier: B8:FC:C7:F9:24:81:13:93:A5:2A:83:82:FE:E6:B1:2E:F2:E1:59:A8
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 01907E9E3FCBF663DDD26F3F3B643D5E52A9
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/uPzH-SSBE5OlKoOC_uaxLvLhWag.roa
Signing time: Thu 04 Jul 2024 16:40:18 +0000
ROA not before: Thu 04 Jul 2024 16:40:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62425
IP address blocks: 91.102.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 09:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:9e:3f:cb:f6:63:dd:d2:6f:3f:3b:64:3d:5e:52:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jul 4 16:40:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8fcc7f924811393a52a8382fee6b12ef2e159a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:d0:7f:80:21:2b:22:41:ce:14:83:0c:b1:
91:dd:47:cd:23:05:b5:b7:2f:51:98:d7:84:10:6e:
c9:41:f7:3e:b6:e4:23:5f:03:47:69:f1:d8:b5:53:
a0:6a:e0:2d:02:30:bd:58:ea:9b:1a:ef:2b:7f:0e:
7f:c1:b7:31:1b:1c:2a:06:17:ed:44:db:44:42:e9:
e5:66:66:5d:4c:2a:c3:aa:c1:95:46:c1:53:04:b9:
e1:72:75:62:04:d5:4b:e0:df:98:af:9d:64:a2:f7:
ff:5f:c7:8a:05:5d:a6:b8:9f:86:14:e1:81:9d:be:
65:53:cb:9e:21:a7:b3:27:8e:37:3e:b5:0d:f8:5e:
43:e6:3a:5a:ee:65:4c:fb:13:ff:48:f7:b2:46:5f:
8e:05:1c:25:3e:7f:79:4b:92:82:cc:75:0b:f3:df:
33:41:24:02:fb:2b:d9:a1:ec:13:53:c7:42:3a:2b:
06:c3:17:f6:e1:52:56:6d:e0:b3:46:f9:8b:37:92:
6c:a8:0f:6a:e2:35:8c:ae:80:99:08:8f:62:2e:1e:
7a:42:35:06:52:64:62:3f:b6:2f:98:95:58:dc:eb:
7b:97:6f:94:03:67:99:d9:78:5c:4e:fe:40:38:99:
78:62:52:50:98:d7:63:cf:7d:43:0a:55:a5:e5:dd:
4d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FC:C7:F9:24:81:13:93:A5:2A:83:82:FE:E6:B1:2E:F2:E1:59:A8
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/uPzH-SSBE5OlKoOC_uaxLvLhWag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.162.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e3:8f:c9:a8:af:5e:c1:dd:46:48:58:7e:6b:cc:a5:90:35:
7c:f8:7e:5f:91:db:45:a5:73:60:e1:6a:54:63:bc:8e:db:82:
1d:64:49:6e:69:71:85:f1:71:0d:69:32:4f:0c:5c:9b:8d:fc:
0f:82:47:3e:ce:03:90:57:4f:be:1b:78:b3:84:9e:35:c2:6c:
7a:12:5b:ea:e4:c2:03:e7:f7:6b:61:a5:40:4f:eb:91:a5:98:
17:5b:c2:ec:91:53:01:d2:c5:d3:19:dc:f6:42:85:98:79:76:
5b:ac:35:ff:95:db:ec:24:7e:09:f9:05:eb:7f:9f:cb:a6:b3:
8a:8b:f9:10:db:17:30:fa:a4:52:fb:61:4f:8d:15:49:56:61:
c1:a9:d9:96:38:c6:bf:73:79:ff:c6:a5:1d:28:5e:26:51:6d:
a3:13:f4:bc:7a:1b:4e:29:b5:68:83:d6:27:b5:fe:be:ad:34:
d2:dc:54:41:85:25:92:bb:0a:c5:c3:b4:87:db:e6:3d:e0:d0:
3a:f3:6c:9e:59:d7:61:b0:b3:e2:46:02:61:4b:01:59:37:3e:
fa:9e:47:7e:49:7c:cf:38:1c:5a:95:84:ea:f9:45:85:6e:6c:
0a:83:0d:87:b1:f2:39:9e:24:e2:ff:da:2d:eb:54:9a:1f:f9:
8a:2d:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 12:17:18 2024 by rpki-client on console-fra.rpki-client.org