Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ubrA0OQnmP11ee81dFVBvmhqAbA.roa
File: ubrA0OQnmP11ee81dFVBvmhqAbA.roa (raw, json)
Hash identifier: SFL32n4KhfnsOte6tzMSFxuS1iVpQVzaREmzcHHm6qc=
Subject key identifier: B9:BA:C0:D0:E4:27:98:FD:75:79:EF:35:74:55:41:BE:68:6A:01:B0
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD5201382C12CF362553F0644C31E40
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ubrA0OQnmP11ee81dFVBvmhqAbA.roa
Signing time: Mon 02 Jan 2023 00:15:16 +0000
ROA not before: Mon 02 Jan 2023 00:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42225
IP address blocks: 86.105.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:20:13:82:c1:2c:f3:62:55:3f:06:44:c3:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9bac0d0e42798fd7579ef35745541be686a01b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:eb:3c:c7:a0:b1:b0:3b:46:42:e0:95:65:
2c:83:c7:56:97:a7:e7:8d:56:63:f8:a1:bd:5a:2e:
b5:ea:9e:a6:7f:bd:53:f1:09:93:f6:2a:42:34:94:
3c:40:1c:1d:61:f0:7a:6f:20:b6:dc:7a:e3:0a:ed:
85:4c:82:b4:2a:2e:13:f4:ea:53:18:fe:3c:5f:76:
4c:ef:7f:c2:0b:27:d0:bf:03:44:11:14:17:d6:52:
c7:04:75:1a:f7:96:62:eb:c4:92:79:39:f9:00:a8:
26:5f:94:2e:95:4c:21:3b:89:d2:c6:63:15:6a:b0:
23:b8:1a:b1:f7:6a:44:ae:ee:12:54:ab:14:eb:65:
fa:4a:79:7e:b1:8a:4a:13:3a:fd:57:13:f8:cb:9c:
b7:4b:d2:2a:30:04:a3:5b:31:11:ae:1b:6e:95:12:
19:bb:4a:19:de:e0:1d:6d:0b:cf:f4:c2:72:32:01:
f8:93:ca:98:ab:74:77:eb:e0:47:f2:86:45:99:d9:
ed:4c:04:aa:b6:b3:4e:60:9c:be:98:f7:49:12:60:
99:9c:8f:33:3b:c4:25:df:fe:46:9b:a5:09:fa:36:
a5:83:be:20:e5:1b:14:01:fa:3f:80:54:22:28:72:
b8:c5:03:d3:10:84:06:09:32:71:2d:6d:c7:14:13:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BA:C0:D0:E4:27:98:FD:75:79:EF:35:74:55:41:BE:68:6A:01:B0
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ubrA0OQnmP11ee81dFVBvmhqAbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.171.0/24
Signature Algorithm: sha256WithRSAEncryption
40:88:95:24:b7:40:16:fe:57:10:0f:17:88:04:10:9d:a5:79:
75:f6:68:49:ac:5d:ba:d0:4a:40:e1:aa:f4:f5:0f:ea:cc:14:
fb:bd:c1:29:f6:ef:d4:20:01:6b:ca:96:5e:01:d2:f7:67:0f:
63:14:a0:67:d9:18:f5:27:08:e8:16:fe:29:1a:6b:e2:7a:04:
fe:ba:0d:7e:b6:7c:fa:9f:cb:19:c2:87:47:74:10:f1:52:97:
9f:a7:95:90:f3:3d:a5:7f:0d:70:3a:93:73:79:75:00:4f:1e:
aa:bf:23:5c:6f:6e:f0:0d:b4:69:cd:42:db:8e:cf:47:78:c5:
b5:98:1a:27:a1:5a:fc:52:e1:1b:76:8e:3f:78:b1:db:ca:03:
dc:a0:4b:8c:61:f4:9d:8f:76:fd:83:d0:3e:d3:22:c3:0f:a7:
8c:ae:40:af:56:d8:0e:c2:c4:c6:c8:7f:77:20:60:15:bc:27:
13:02:68:98:a0:69:62:d0:51:1c:9e:02:ce:93:a2:6f:95:14:
5a:ba:64:1f:17:7f:46:5a:d7:0d:0b:00:6d:42:d0:56:a9:fa:
d9:7a:73:85:23:79:50:43:fc:e4:59:34:59:bd:f0:97:76:6d:
d0:06:13:12:ca:29:e0:15:0a:e9:7c:0e:9a:0d:ab:2b:0d:01:
ca:db:10:a9
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVv1SATgsEs82JVPwZEwx5AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMTAyMDAxNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWJhYzBkMGU0Mjc5OGZkNzU3OWVmMzU3NDU1NDFiZTY4NmEwMWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt/rPMegsbA7RkLglWUsg8dWl6fn
jVZj+KG9Wi616p6mf71T8QmT9ipCNJQ8QBwdYfB6byC23HrjCu2FTIK0Ki4T9OpT
GP48X3ZM73/CCyfQvwNEERQX1lLHBHUa95Zi68SSeTn5AKgmX5QulUwhO4nSxmMV
arAjuBqx92pEru4SVKsU62X6Snl+sYpKEzr9VxP4y5y3S9IqMASjWzERrhtulRIZ
u0oZ3uAdbQvP9MJyMgH4k8qYq3R36+BH8oZFmdntTASqtrNOYJy+mPdJEmCZnI8z
O8Ql3/5Gm6UJ+jalg74g5RsUAfo/gFQiKHK4xQPTEIQGCTJxLW3HFBNTTwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFLm6wNDkJ5j9dXnvNXRVQb5oagGwMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL3VickEwT1FubVAxMWVlODFkRlZCdm1ocUFiQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABWaasw
DQYJKoZIhvcNAQELBQADggEBAECIlSS3QBb+VxAPF4gEEJ2leXX2aEmsXbrQSkDh
qvT1D+rMFPu9wSn279QgAWvKll4B0vdnD2MUoGfZGPUnCOgW/ikaa+J6BP66DX62
fPqfyxnCh0d0EPFSl5+nlZDzPaV/DXA6k3N5dQBPHqq/I1xvbvANtGnNQtuOz0d4
xbWYGiehWvxS4Rt2jj94sdvKA9ygS4xh9J2Pdv2D0D7TIsMPp4yuQK9W2A7CxMbI
f3cgYBW8JxMCaJigaWLQURyeAs6Tom+VFFq6ZB8Xf0Za1w0LAG1C0Fap+tl6c4Uj
eVBD/ORZNFm98Jd2bdAGExLKKeAVCul8DpoNqysNAcrbEKk=
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:52 2024 by rpki-client on console-fra.rpki-client.org