Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/uwpkNCoeY8x_1mpYvgdwuOxL-Ws.roa
File: uwpkNCoeY8x_1mpYvgdwuOxL-Ws.roa (raw, json)
Hash identifier: 58cHGzcgTJYfcnOWEjVe05nsMsSabe5CXz7T8Wc6VMU=
Subject key identifier: BB:0A:64:34:2A:1E:63:CC:7F:D6:6A:58:BE:07:70:B8:EC:4B:F9:6B
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018A9CE5564BD1E73EC0C3F09D8052D33791
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/uwpkNCoeY8x_1mpYvgdwuOxL-Ws.roa
Signing time: Sat 16 Sep 2023 07:29:50 +0000
ROA not before: Sat 16 Sep 2023 07:29:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 91.102.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9c:e5:56:4b:d1:e7:3e:c0:c3:f0:9d:80:52:d3:37:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Sep 16 07:29:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb0a64342a1e63cc7fd66a58be0770b8ec4bf96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:01:21:d8:52:d4:80:e5:dd:77:18:4c:bd:
71:64:40:4b:22:50:ca:75:5d:01:8c:37:a7:53:fd:
05:b6:4f:3e:07:92:78:ae:a4:d2:7f:31:df:36:29:
dd:5d:07:76:b6:33:32:ab:fe:f1:ab:3a:eb:93:ca:
73:6a:6e:6a:77:07:86:28:b1:34:4e:b4:5c:e1:b8:
d9:15:bb:bf:da:d6:78:15:54:6a:2e:f8:9c:6d:97:
c0:b4:19:7b:6c:44:1f:7e:a1:fd:69:9e:dd:3d:80:
a3:75:75:fa:8d:96:d0:6f:9a:9f:1f:ec:39:2c:1d:
f0:38:1d:47:d7:ea:cc:ef:57:3c:e8:64:19:a1:be:
19:38:01:c4:80:5d:94:5e:66:b1:18:f8:af:85:f9:
3a:89:2f:01:74:a5:54:24:7e:e1:0e:ab:37:1d:ca:
80:ab:8b:99:92:06:c6:6e:2d:53:ec:11:6c:a5:14:
19:3d:67:db:3f:e0:aa:a6:21:0b:94:e5:a9:e6:44:
64:2b:75:4a:ae:bc:00:ff:92:5c:46:83:96:49:54:
52:b7:a1:52:14:1e:40:59:40:3e:c9:83:cc:f6:44:
be:ea:35:24:77:30:bc:d5:30:f4:9b:bf:43:2a:6d:
1c:ff:49:8f:e5:7c:62:86:57:2c:70:86:c9:88:30:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0A:64:34:2A:1E:63:CC:7F:D6:6A:58:BE:07:70:B8:EC:4B:F9:6B
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/uwpkNCoeY8x_1mpYvgdwuOxL-Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.166.0/24
Signature Algorithm: sha256WithRSAEncryption
35:4f:9a:15:af:c2:61:87:35:96:3b:0a:55:17:a3:f6:eb:e2:
43:6d:b4:d5:8d:f9:3a:73:06:70:9e:43:8a:67:85:21:0c:5f:
6c:9b:55:b2:95:c3:95:f8:35:5b:ac:32:9c:f4:2e:12:9b:bc:
86:1b:d9:60:22:80:63:fa:37:64:dc:ab:f1:16:20:26:65:76:
ef:50:b5:3f:9e:82:d5:59:a5:17:bc:2a:66:36:61:a8:3d:a0:
04:2e:f9:91:ea:6c:62:4e:73:38:43:53:d0:6c:7e:36:6e:69:
84:f7:32:8d:8e:13:5a:9e:56:90:31:36:95:90:82:7a:d1:5b:
39:aa:c7:e1:12:9f:3a:e0:ca:34:95:3b:2e:43:40:9a:f4:4c:
e3:92:8a:7c:14:16:c3:16:64:68:03:14:59:28:78:4c:41:63:
03:1c:41:95:a6:63:b2:dc:68:20:f1:f5:78:b7:b5:c1:69:fa:
99:1a:4e:c6:bd:e8:d2:9c:95:2e:49:67:3a:2b:0b:ef:0e:56:
7d:2d:05:a0:16:04:b9:8f:62:3e:c7:83:71:9b:6f:55:1d:cc:
93:89:fd:91:c0:42:d3:35:a7:27:51:d7:87:22:a0:5f:b0:9e:
52:8f:24:a1:c0:29:0b:46:fd:85:c6:11:6a:94:e1:70:8c:d4:
87:3b:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org