Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/uyNIxlKemljQ_nqmTQ9vLirYgPo.roa
File: uyNIxlKemljQ_nqmTQ9vLirYgPo.roa (raw, json)
Hash identifier: xv+k1Fa4RcDZZbBxDw9p5kncarFpdKQ8JTj4wC1MAls=
Subject key identifier: BB:23:48:C6:52:9E:9A:58:D0:FE:7A:A6:4D:0F:6F:2E:2A:D8:80:FA
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD51134386FDAFE7A357231117E9B4E
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/uyNIxlKemljQ_nqmTQ9vLirYgPo.roa
Signing time: Mon 02 Jan 2023 00:15:12 +0000
ROA not before: Mon 02 Jan 2023 00:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12442
IP address blocks: 85.204.233.0/24 maxlen: 24
188.240.240.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:11:34:38:6f:da:fe:7a:35:72:31:11:7e:9b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb2348c6529e9a58d0fe7aa64d0f6f2e2ad880fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:39:c5:01:6e:4a:f3:56:c3:c4:af:34:58:
42:53:86:b2:da:20:58:94:87:ea:51:69:37:51:f6:
e9:68:e2:95:73:8f:1e:ad:90:61:ba:5d:2e:7b:db:
f5:dc:61:a6:54:c8:a5:f5:33:2d:11:85:e2:28:bf:
63:74:7e:be:1a:bb:7b:ab:f9:4d:4a:7a:98:44:db:
8a:e7:32:ce:bf:8d:c4:05:58:13:38:8c:d5:09:fe:
6a:b6:d7:32:0b:24:da:00:a6:e7:0b:11:4b:9e:71:
5f:12:9d:03:ae:9f:8a:5e:23:7f:ec:76:7f:2f:b6:
0f:a4:41:6c:21:fa:f6:8a:65:a5:e2:70:d4:fc:b7:
26:6e:27:40:6a:10:c8:9a:00:f2:b4:a7:5b:83:1a:
73:e7:6a:c2:b6:e8:ef:55:3b:4b:57:09:d4:ff:9b:
72:ad:89:8d:71:ce:73:dc:34:79:65:5b:80:64:88:
c6:43:69:8f:17:b1:8a:6f:33:02:32:00:17:ce:5e:
5b:93:c3:c2:c9:28:02:ab:80:ae:06:4b:0f:85:75:
84:11:f3:57:d6:06:f0:c6:1d:b4:97:8c:90:bb:c9:
4e:2c:2c:ae:d5:d2:a5:86:2d:35:5d:f0:77:a0:60:
33:6c:9c:81:ec:a7:cf:34:de:59:66:47:54:80:a1:
fd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:23:48:C6:52:9E:9A:58:D0:FE:7A:A6:4D:0F:6F:2E:2A:D8:80:FA
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/uyNIxlKemljQ_nqmTQ9vLirYgPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.233.0/24
188.240.240.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:aa:0e:fd:31:08:29:f0:4b:79:31:28:70:fa:c4:0a:78:c3:
12:bd:ea:23:29:9d:32:61:77:bf:45:c2:4e:58:8e:e2:49:e4:
b0:28:f0:5b:99:4b:6f:8a:5d:83:af:9b:39:69:20:e2:a2:89:
ac:01:9d:c3:ff:52:a5:2a:36:51:1e:59:11:38:4e:f6:4a:48:
f0:fb:cb:c7:ad:23:6b:52:55:b1:22:cb:ba:75:d3:ae:d5:33:
ff:54:a6:6d:0c:d1:75:df:b8:ac:b8:af:80:9f:9a:f7:2a:09:
25:36:8c:70:b6:60:e5:de:a0:e6:70:ed:41:6e:ec:fe:7d:a2:
c8:2f:37:78:32:10:40:51:89:ca:67:e4:c0:df:fe:c0:d6:1d:
33:c7:00:4c:31:b0:ef:4c:33:19:26:7d:29:7f:a2:4b:6d:50:
96:6b:b0:4b:32:13:0b:77:a2:94:67:aa:bb:60:2d:b3:16:10:
bf:5d:cf:cf:aa:6c:4a:75:ff:e1:80:44:b2:36:5c:cc:e2:e1:
7d:5f:02:e8:c9:04:ad:44:bc:d7:fb:ab:fc:56:18:c3:15:67:
35:58:17:c3:14:11:89:22:e9:7c:b3:2e:a1:01:1c:8b:5a:05:
b5:ef:90:ac:df:d3:8e:82:71:30:9f:62:03:19:29:07:d1:16:
0f:00:93:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:05 2024 by rpki-client on console-ams.rpki-client.org