Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/UCSPfxAEHYEUPCUmjvTlSP8pFHs.roa
File: UCSPfxAEHYEUPCUmjvTlSP8pFHs.roa (raw, json)
Hash identifier: awffKNgRNMtSUMweae86k0HD2xi12K/wF4Yp2G1g9yE=
Subject key identifier: 50:24:8F:7F:10:04:1D:81:14:3C:25:26:8E:F4:E5:48:FF:29:14:7B
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 01856E0B1283887D2389CC4C119B6874EB84
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/UCSPfxAEHYEUPCUmjvTlSP8pFHs.roa
Signing time: Sun 01 Jan 2023 15:54:57 +0000
ROA not before: Sun 01 Jan 2023 15:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212212
IP address blocks: 151.248.70.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 25 Oct 2023 12:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:12:83:88:7d:23:89:cc:4c:11:9b:68:74:eb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 15:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50248f7f10041d81143c25268ef4e548ff29147b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:85:c5:5e:3d:a7:13:95:e7:89:18:09:39:
df:9d:61:de:f3:2c:88:bc:d9:ff:f9:44:b6:f6:a1:
21:d5:7c:23:d3:a8:92:d9:ec:b2:ac:c5:a5:75:26:
ea:be:2a:e2:8d:b5:d4:e3:94:51:73:51:da:b9:12:
50:ad:7f:fc:b9:2f:64:50:32:26:59:c5:2b:3f:77:
19:2d:14:bf:1e:06:63:0d:68:a3:51:67:b7:b1:84:
4d:ab:d6:9d:9c:95:fb:97:19:4e:45:8c:e8:08:e1:
d9:b2:ee:7d:2a:18:87:8f:25:e7:68:b3:1c:8e:c0:
3d:6a:53:ea:37:fa:d2:a1:80:8b:ad:0c:e1:fa:dc:
d9:9d:76:a9:ed:95:98:2a:87:c8:a7:8d:86:8e:ad:
9f:2a:fd:2e:45:fa:29:11:70:05:d3:36:c8:61:d3:
54:ca:7c:35:ec:18:34:e7:f2:7b:d8:98:5b:33:92:
5f:59:a1:2d:f7:7f:a4:18:78:e4:2d:44:f7:06:92:
ec:58:ed:9f:8f:12:85:48:37:a1:44:32:42:da:25:
de:8c:fe:ef:29:43:a5:87:17:ef:dc:94:cb:b7:89:
44:c0:2e:88:6e:fa:45:ea:97:35:c8:4f:fe:a6:d3:
f6:5f:f2:4e:6d:29:9d:49:07:cf:18:44:3e:39:d3:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:24:8F:7F:10:04:1D:81:14:3C:25:26:8E:F4:E5:48:FF:29:14:7B
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/UCSPfxAEHYEUPCUmjvTlSP8pFHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.70.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:eb:11:7f:4f:05:ab:2d:9a:8b:77:2c:2c:d9:eb:61:42:bc:
c6:fd:a3:43:73:61:f8:d9:14:d3:97:cd:db:89:af:09:7b:3e:
b3:31:79:24:a5:1c:ac:cd:02:7d:2f:70:27:20:8f:7d:6c:61:
fc:db:78:77:56:72:70:b7:ff:b4:af:80:fa:52:ef:a2:e8:91:
1d:18:67:6e:b8:c0:c3:5c:33:0d:f6:b1:ff:8d:59:2c:f0:e2:
56:a7:b9:91:87:c3:53:79:ca:b3:e4:11:af:b6:91:4b:70:ba:
c3:96:40:0d:04:25:5a:71:7a:5c:b6:68:40:dc:8f:d1:82:3b:
18:2a:cf:ab:37:d3:7f:e2:4a:c7:6a:a4:da:80:84:b4:c6:f4:
52:57:e4:d4:e3:ad:44:a1:fa:9b:df:6d:54:4f:73:58:db:0e:
32:a0:c1:95:86:9c:39:9b:d7:b8:20:ea:73:ca:13:eb:0a:8e:
e3:1b:8b:e7:c9:e3:8e:2f:ab:c2:77:66:61:dc:6b:63:3f:d2:
57:7b:dc:d5:37:d3:76:39:d4:16:f5:ba:c3:4f:1b:a4:8f:f9:
f8:1f:d5:89:6a:b3:59:1d:78:71:e7:59:3c:c0:cb:15:2c:e3:
75:89:93:5a:28:2a:74:32:00:6f:9c:0a:bb:d8:c1:27:80:e1:
b2:51:5d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:29 2024 by rpki-client on console-ams.rpki-client.org