Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/uNE5XD8tDckw4PG55N-mdK0MBu8.roa
File: uNE5XD8tDckw4PG55N-mdK0MBu8.roa (raw, json)
Hash identifier: CSiv+yTsPfUHuYZwaWCjMDNefcebNnvzXEZ0cQYRbrU=
Subject key identifier: B8:D1:39:5C:3F:2D:0D:C9:30:E0:F1:B9:E4:DF:A6:74:AD:0C:06:EF
Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial: 018571B0D07FDAFF7BF0FD866FE24959BCA0
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/uNE5XD8tDckw4PG55N-mdK0MBu8.roa
Signing time: Mon 02 Jan 2023 08:54:51 +0000
ROA not before: Mon 02 Jan 2023 08:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 37.143.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:d0:7f:da:ff:7b:f0:fd:86:6f:e2:49:59:bc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
Validity
Not Before: Jan 2 08:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8d1395c3f2d0dc930e0f1b9e4dfa674ad0c06ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:76:4b:49:01:7f:3f:ad:7d:3e:bf:d9:d9:
cc:72:13:10:bf:fd:de:0e:21:7a:6b:dd:0f:d0:a6:
fb:dd:c4:0f:c9:fb:33:75:c7:38:21:28:da:44:0b:
a9:fb:68:67:cb:36:fa:9f:d0:c2:22:93:28:d2:73:
65:55:02:11:85:61:25:5e:27:e2:90:1e:8c:6e:9b:
b4:23:1f:57:a6:f7:fc:2d:dc:97:f2:73:77:91:53:
f3:ba:28:7e:46:27:1d:63:b6:36:41:1d:ca:db:fb:
7d:20:61:2d:cd:7d:6b:00:c2:ec:34:26:ab:92:bd:
e5:fd:71:76:4e:ae:5f:9c:74:74:7e:1b:02:2a:00:
76:34:ce:df:44:a2:71:6d:88:1f:6b:9a:64:76:9f:
70:8c:20:64:8c:7b:ce:ac:d4:57:c1:ad:99:02:1d:
69:7a:af:6b:46:29:8d:d9:46:b5:98:75:76:63:ac:
d6:05:ad:eb:8c:12:c6:28:b2:a8:6f:48:72:db:cb:
87:74:54:62:00:54:61:d0:33:35:85:66:47:57:3e:
5c:e4:fb:e8:60:fd:6b:33:dd:94:c9:04:8e:74:e5:
ce:bf:ee:f4:b7:25:56:4a:1f:94:6e:87:7d:8a:47:
2b:ac:68:7b:06:6d:75:03:01:c2:47:22:6d:11:2b:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D1:39:5C:3F:2D:0D:C9:30:E0:F1:B9:E4:DF:A6:74:AD:0C:06:EF
X509v3 Authority Key Identifier:
keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/uNE5XD8tDckw4PG55N-mdK0MBu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.129.0/24
Signature Algorithm: sha256WithRSAEncryption
06:44:3e:e2:d6:3e:d4:48:85:85:04:40:15:2c:a2:f8:db:f7:
fe:dd:4c:11:65:90:f4:0d:d9:bb:cc:4d:7d:94:10:ad:a5:cf:
53:aa:5d:c5:41:fd:d0:07:74:2b:47:ad:ae:05:e4:e6:7b:19:
88:e9:4d:03:d9:91:4e:55:08:1e:27:b4:23:51:f1:21:e1:a6:
84:33:82:2b:6a:d5:f6:20:b8:b7:83:b6:d6:39:46:63:bf:10:
9e:c4:8e:c5:69:6f:ec:a7:a6:f9:c5:43:bb:7e:a6:16:7d:4d:
56:47:16:d7:7f:4f:85:29:a9:8d:cd:52:04:9e:f8:0f:2c:87:
49:c3:2b:ba:07:a3:8d:4d:c8:da:cd:7a:7c:2a:93:70:44:7c:
26:15:24:b8:56:dd:c4:f3:fb:ff:74:a7:26:36:58:54:d6:69:
be:42:36:90:41:bf:87:3b:e3:04:ad:de:8d:fc:46:5a:fb:09:
e8:f1:f6:00:31:d1:99:d3:ab:e3:c7:db:bc:a8:2a:7b:f5:cb:
92:a8:22:97:a5:bb:d9:19:32:6d:94:2d:0e:2c:e6:4c:a0:c4:
f2:ba:4c:a1:40:9c:e9:c7:c9:16:ef:50:82:62:f1:5f:9f:d2:
7c:36:27:0a:8a:56:eb:74:b7:d6:10:9f:03:50:86:85:58:3a:
9e:65:08:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:59 2024 by rpki-client on console-ams.rpki-client.org