Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/uha-wjpLBVSab5SFCoGNz4danEM.roa
File: uha-wjpLBVSab5SFCoGNz4danEM.roa (raw, json)
Hash identifier: Ty6DiuW0GIXfi7nSvIroFN5d4lAwhvo2L1beMxTtQk8=
Subject key identifier: BA:16:BE:C2:3A:4B:05:54:9A:6F:94:85:0A:81:8D:CF:87:5A:9C:43
Certificate issuer: /CN=a56316c7129831e0511079532ded81dc12c81da0
Certificate serial: 01856F8239C98C5A023591DCCA4B997C730B
Authority key identifier: A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/uha-wjpLBVSab5SFCoGNz4danEM.roa
Signing time: Sun 01 Jan 2023 22:44:43 +0000
ROA not before: Sun 01 Jan 2023 22:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64441
IP address blocks: 194.102.162.0/24 maxlen: 24
91.206.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:39:c9:8c:5a:02:35:91:dc:ca:4b:99:7c:73:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56316c7129831e0511079532ded81dc12c81da0
Validity
Not Before: Jan 1 22:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba16bec23a4b05549a6f94850a818dcf875a9c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:8d:4f:09:d2:1a:c2:3d:73:55:b3:e3:9d:
5e:29:07:4a:eb:7b:f0:db:2b:de:21:21:da:cc:68:
ea:2c:b0:06:c8:6c:e0:a2:79:fc:b0:11:d7:8f:0c:
cf:b9:f7:59:88:84:56:ac:3f:aa:df:8e:f5:d3:e8:
66:55:90:c9:e7:43:62:07:8d:73:38:1a:30:19:81:
e7:f0:9e:3e:82:0b:12:31:6c:8b:68:c0:10:3e:62:
db:aa:5e:2b:a5:ad:38:fa:29:3f:60:89:3f:72:ef:
dc:da:c0:37:25:43:47:5c:8a:4d:8c:19:a5:26:2e:
8d:19:84:cb:21:67:fe:03:89:28:96:73:76:e0:ba:
61:c5:0b:76:5c:fa:76:de:9f:9d:ea:18:34:ad:6d:
6d:6a:bd:c4:26:af:73:16:15:04:b5:71:d4:cf:4f:
7d:ff:9e:16:8b:17:02:76:70:04:05:4d:70:9b:1b:
8d:21:4b:8a:b7:8a:db:fc:4d:22:03:71:f8:d8:17:
9e:15:b0:52:b0:72:c7:9f:7e:5e:2e:5b:56:1c:54:
f4:af:25:f6:87:29:e3:fd:6d:a3:a0:bb:b9:5e:82:
44:f6:41:65:4e:33:5a:82:02:73:dd:25:5e:70:1b:
1c:3c:af:21:46:f6:dd:2a:45:c8:58:80:23:c6:da:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:16:BE:C2:3A:4B:05:54:9A:6F:94:85:0A:81:8D:CF:87:5A:9C:43
X509v3 Authority Key Identifier:
keyid:A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/uha-wjpLBVSab5SFCoGNz4danEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.160.0/23
194.102.162.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:84:ee:9c:1c:9e:0b:0a:85:72:2e:e0:29:99:42:09:e9:80:
24:ad:cb:96:e0:9d:7d:75:83:b7:7a:d7:e0:0e:9f:e9:24:6d:
b8:34:42:48:e8:95:b9:75:28:33:c7:95:7e:a6:4c:80:e5:1a:
94:0e:35:bd:a8:4a:53:45:5a:67:ef:58:b9:8c:51:f3:46:b9:
ad:0c:9f:26:0f:b6:27:de:a8:f4:bc:85:b3:5b:15:a2:21:c1:
5f:b2:7b:9c:a0:3d:2f:2d:60:5e:10:b5:7b:dc:96:62:00:40:
f8:57:e5:1b:91:2c:08:05:32:2d:ea:98:91:3f:f6:7c:4a:22:
07:39:ce:bb:59:46:ae:04:81:07:42:c9:80:d9:36:6e:ea:c0:
21:2b:6a:b5:3b:21:62:ae:23:2d:60:8d:b7:57:ba:38:b0:a3:
60:6b:9f:bc:49:6e:0a:e1:e5:c5:43:b0:30:90:16:dc:55:9a:
39:df:5f:81:62:64:17:7e:74:80:f2:5e:a0:a0:f8:4b:64:69:
8e:f3:39:94:41:2d:f1:aa:b5:c6:58:fc:77:4d:89:26:cf:97:
81:8b:0a:5b:49:e0:cf:11:fd:89:8f:bf:09:81:c6:c1:b1:76:
87:b7:1b:ee:6c:cb:49:19:42:20:01:de:ad:68:66:cc:d7:6e:
26:f3:a4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:20 2024 by rpki-client on console-ams.rpki-client.org