Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/uvMlk1RzGap7cfqYqIKXN6MZCOY.roa
File: uvMlk1RzGap7cfqYqIKXN6MZCOY.roa (raw, json)
Hash identifier: sNItsIxUQhgpYsZON8kHyLMAkX/JTxMI9amAqaGJE6s=
Subject key identifier: BA:F3:25:93:54:73:19:AA:7B:71:FA:98:A8:82:97:37:A3:19:08:E6
Certificate issuer: /CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Certificate serial: 01856D786DDF8B1CA54AF02F48656FFCA7CD
Authority key identifier: D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/uvMlk1RzGap7cfqYqIKXN6MZCOY.roa
Signing time: Sun 01 Jan 2023 13:14:46 +0000
ROA not before: Sun 01 Jan 2023 13:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51518
IP address blocks: 91.217.78.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:6d:df:8b:1c:a5:4a:f0:2f:48:65:6f:fc:a7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Validity
Not Before: Jan 1 13:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baf32593547319aa7b71fa98a8829737a31908e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ab:d8:91:3e:61:fc:c4:9c:55:42:a6:3e:fc:
5d:14:96:64:a8:b9:78:05:b6:9d:9a:f4:d8:6e:96:
bb:74:4c:92:66:00:0b:cc:c8:f9:40:b4:c2:a1:22:
0e:76:67:9f:4d:ba:08:32:32:08:8e:43:b6:ea:af:
8f:30:c2:3b:d2:c6:eb:73:ab:3f:8f:59:49:99:fa:
4e:2b:1c:4d:49:e2:4c:d9:57:d7:62:bf:d7:ce:80:
c4:02:01:b5:19:93:08:63:36:cb:d2:54:ab:e9:b4:
ab:10:1b:82:3c:06:9f:4c:33:df:5a:ff:6c:f6:0d:
68:ac:21:f1:95:78:7d:64:61:32:89:ef:3f:cc:55:
8b:82:7c:c8:ba:80:75:e9:7c:cf:22:e4:ca:12:15:
36:57:a6:41:7f:82:1d:a7:37:bb:ea:eb:2b:a5:91:
60:e8:7a:c5:a8:8b:b4:93:d4:de:e3:3b:da:aa:fd:
4c:a0:e9:e4:13:94:97:a5:a0:1d:ea:3e:8f:00:db:
2e:d1:f1:ca:1e:23:b7:00:c8:5d:b8:35:42:be:4c:
34:30:e2:fd:c2:b3:2d:49:65:9b:57:29:ef:8d:68:
20:18:48:94:be:38:f3:71:23:f1:11:b3:ef:d4:33:
2f:0a:29:7b:76:bf:cc:86:1e:c6:5f:ff:75:17:cf:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F3:25:93:54:73:19:AA:7B:71:FA:98:A8:82:97:37:A3:19:08:E6
X509v3 Authority Key Identifier:
keyid:D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/uvMlk1RzGap7cfqYqIKXN6MZCOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.78.0/23
Signature Algorithm: sha256WithRSAEncryption
87:89:6f:d3:af:08:71:6c:cd:2f:41:b4:00:8a:9c:ee:09:92:
31:21:68:be:e8:73:77:e4:30:fa:8f:e8:19:f3:47:9c:c1:8f:
a7:f8:3c:a8:c0:b8:38:e1:7d:64:58:08:0a:92:35:49:79:cb:
ec:ed:c7:b9:cf:41:5b:c4:e7:51:e7:a7:dc:67:3b:89:25:49:
6a:fe:ab:7d:57:d5:ac:05:8c:f8:5f:e5:67:97:12:86:c0:68:
82:33:51:8c:d6:db:61:1b:e7:a9:6e:8a:47:07:40:95:67:86:
39:cd:ed:a9:c8:c2:a5:da:ce:05:1a:32:3d:04:a5:2d:d3:17:
44:a4:f9:2d:6a:28:79:76:4e:f9:73:d1:5a:93:23:f0:0f:f7:
b8:f7:1e:4c:08:85:45:6f:d0:bf:bf:69:21:4f:c9:8c:41:2e:
4b:38:73:eb:b6:47:5c:d3:1b:8c:03:36:8e:4b:74:69:d1:c7:
e0:da:39:3d:67:15:27:b5:21:ac:c0:bd:2d:d4:e7:cf:ed:31:
9f:6a:3f:1f:a5:67:3d:25:c6:c7:b3:76:0e:66:ad:a6:db:7c:
a8:96:e0:f8:1b:c6:d0:87:19:96:11:19:2b:a2:8b:19:14:f1:
b1:5b:e1:8e:57:7a:89:02:40:f7:84:89:fd:bf:14:11:b7:00:
59:4a:c9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:18 2024 by rpki-client on console-ams.rpki-client.org