Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/uJVpwC2WYrglRuhIpP1GcTKyUnE.roa
File: uJVpwC2WYrglRuhIpP1GcTKyUnE.roa (raw, json)
Hash identifier: j0LXBoyeRQsdRi7xpEqOBgthGpD1+StyoBI55w79OVo=
Subject key identifier: B8:95:69:C0:2D:96:62:B8:25:46:E8:48:A4:FD:46:71:32:B2:52:71
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01857079C094804B5B37D774120DD579F6B9
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/uJVpwC2WYrglRuhIpP1GcTKyUnE.roa
Signing time: Mon 02 Jan 2023 03:15:05 +0000
ROA not before: Mon 02 Jan 2023 03:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62048
IP address blocks: 94.182.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:c0:94:80:4b:5b:37:d7:74:12:0d:d5:79:f6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 2 03:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b89569c02d9662b82546e848a4fd467132b25271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:f5:72:60:7b:49:f2:97:90:57:5b:62:fe:
2b:f2:27:13:bb:a3:a1:f6:d3:30:46:70:52:d6:cc:
fe:d6:80:7a:1c:fc:41:8f:a9:53:27:69:4c:c3:ff:
d6:3e:c0:f7:dc:65:30:c7:db:3a:28:11:7f:2a:d6:
36:9e:54:ba:24:da:84:8e:5c:e8:b0:d2:bd:83:2e:
82:31:42:d0:55:69:2c:de:7b:d7:01:31:81:7d:18:
5d:ac:a5:8f:4a:c7:3e:e0:a2:0d:3d:af:bf:be:dd:
39:8a:49:7d:e4:d1:47:a6:0b:d7:ca:f7:3e:0b:4d:
36:1f:5e:8f:03:41:6f:ff:62:6e:37:8a:26:f1:df:
a4:89:dd:b8:a6:b6:9b:89:d6:0d:c5:5c:b5:0d:0b:
1c:23:7c:a7:d2:ab:68:be:78:f3:45:62:7e:ba:8a:
0b:4f:b1:8d:c8:a6:11:61:6d:10:d7:85:0d:e9:21:
7c:22:ce:70:72:85:22:9a:f6:6c:f0:e5:17:c4:29:
59:6d:e2:dd:16:16:c0:92:26:ef:ca:1b:d8:4a:51:
d2:4b:2f:31:7e:51:59:9c:a7:ad:60:1d:4f:12:23:
68:04:d1:cf:a6:ba:42:91:21:85:d2:dc:6c:9f:58:
77:8a:d1:d3:5f:21:38:10:78:95:5a:28:34:37:67:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:95:69:C0:2D:96:62:B8:25:46:E8:48:A4:FD:46:71:32:B2:52:71
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/uJVpwC2WYrglRuhIpP1GcTKyUnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.182.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:80:97:6f:29:ca:a1:2b:8c:fb:5d:ba:f6:76:5c:b2:e2:18:
fd:ce:89:da:07:1a:26:56:2a:6c:00:1d:51:6b:49:85:a7:90:
0a:48:a0:0d:e1:d0:26:b2:bf:99:99:8e:da:50:95:f8:d4:c3:
fe:66:8b:90:24:35:40:01:60:07:0d:79:81:2e:10:88:d4:19:
28:c1:c7:09:bd:3e:75:5b:b4:7e:89:fc:d8:9a:70:5f:64:0a:
11:d7:0c:a8:1a:e8:04:f9:10:b5:f1:8f:33:c4:a2:ae:f3:23:
13:87:9f:96:a6:04:cb:a7:36:62:21:08:76:99:0a:65:7f:61:
fb:87:27:2e:04:2d:33:e2:3e:48:6e:31:86:2e:8f:7a:59:d4:
81:29:fb:42:00:23:43:c2:67:26:b8:37:ca:d6:19:d2:ba:ed:
d9:a7:51:23:93:91:b0:01:64:19:f8:39:e0:4e:21:17:1d:8e:
c3:78:9a:2c:c1:07:43:43:4f:a1:5e:82:41:4c:e3:1c:bb:eb:
db:fd:30:6b:9a:3d:13:a0:20:e9:74:09:e9:cb:16:55:40:6b:
ed:4a:d3:92:af:86:67:9e:e8:59:04:b3:83:c6:6c:23:1c:89:
6e:5a:70:db:42:20:12:ff:8b:78:ef:98:a8:43:37:b1:a0:7e:
cb:9c:37:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwecCUgEtbN9d0Eg3Vefa5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjMwMTAyMDMxNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODk1NjljMDJkOTY2MmI4MjU0NmU4NDhhNGZkNDY3MTMyYjI1MjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO71cmB7SfKXkFdbYv4r8icTu6Oh
9tMwRnBS1sz+1oB6HPxBj6lTJ2lMw//WPsD33GUwx9s6KBF/KtY2nlS6JNqEjlzo
sNK9gy6CMULQVWks3nvXATGBfRhdrKWPSsc+4KINPa+/vt05ikl95NFHpgvXyvc+
C002H16PA0Fv/2JuN4om8d+kid24prabidYNxVy1DQscI3yn0qtovnjzRWJ+uooL
T7GNyKYRYW0Q14UN6SF8Is5wcoUimvZs8OUXxClZbeLdFhbAkibvyhvYSlHSSy8x
flFZnKetYB1PEiNoBNHPprpCkSGF0txsn1h3itHTXyE4EHiVWig0N2ewVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLiVacAtlmK4JUboSKT9RnEyslJxMB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEvdUpWcHdDMldZcmdsUnVoSXBQMUdjVEt5VW5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrbjMA0G
CSqGSIb3DQEBCwUAA4IBAQBPgJdvKcqhK4z7Xbr2dlyy4hj9zonaBxomVipsAB1R
a0mFp5AKSKAN4dAmsr+ZmY7aUJX41MP+ZouQJDVAAWAHDXmBLhCI1BkowccJvT51
W7R+ifzYmnBfZAoR1wyoGugE+RC18Y8zxKKu8yMTh5+WpgTLpzZiIQh2mQplf2H7
hycuBC0z4j5IbjGGLo96WdSBKftCACNDwmcmuDfK1hnSuu3Zp1Ejk5GwAWQZ+Dng
TiEXHY7DeJoswQdDQ0+hXoJBTOMcu+vb/TBrmj0ToCDpdAnpyxZVQGvtStOSr4Zn
nuhZBLODxmwjHIluWnDbQiAS/4t475ioQzexoH7LnDcU
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:42 2024 by rpki-client on console-fra.rpki-client.org