Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/uJzq33uXk5eOOzFVPxRNiAzlQ1M.roa
File: uJzq33uXk5eOOzFVPxRNiAzlQ1M.roa (raw, json)
Hash identifier: 1HPvIpVfaOd9hYyStB1rjC37UlAYoO3ILDi09B6kZyI=
Subject key identifier: B8:9C:EA:DF:7B:97:93:97:8E:3B:31:55:3F:14:4D:88:0C:E5:43:53
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018A65F40E86462A9D517E1F4E9DB5B68A6F
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/uJzq33uXk5eOOzFVPxRNiAzlQ1M.roa
Signing time: Tue 05 Sep 2023 15:26:47 +0000
ROA not before: Tue 05 Sep 2023 15:26:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203377
IP address blocks: 81.29.145.0/24 maxlen: 24
81.29.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:f4:0e:86:46:2a:9d:51:7e:1f:4e:9d:b5:b6:8a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 5 15:26:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b89ceadf7b9793978e3b31553f144d880ce54353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:ef:95:24:4a:4d:97:81:59:3d:f4:9a:4a:
d0:71:ff:50:71:a3:bb:46:3d:2d:40:3e:e7:40:f6:
8a:24:f9:0b:dc:e6:a4:49:a5:fe:d5:43:93:8a:83:
98:eb:71:8f:9a:28:f0:9b:9e:e3:cd:40:6f:9e:89:
f1:ee:5e:17:10:9a:6b:39:0d:cc:da:8d:5d:3d:90:
a6:8b:49:f2:b4:89:01:da:23:bc:8a:07:a5:eb:92:
44:f3:41:bd:5d:ca:48:c7:eb:e9:6c:55:47:da:78:
a7:9d:83:98:a8:fe:33:3a:31:55:21:ec:2f:b1:ba:
1a:06:46:98:4b:5d:6e:f7:8b:fe:19:d0:5f:43:02:
01:e8:80:3d:0b:b1:d4:c4:7b:45:39:82:e2:30:a3:
40:93:b3:fe:3c:4d:a7:a7:8d:25:fc:ad:1f:a9:89:
5a:af:d6:56:1d:b4:c7:b6:ae:32:e3:f3:22:90:7d:
2a:ba:ee:f5:84:d9:98:be:b2:3f:85:a4:96:15:ba:
1a:79:67:a4:bb:26:dd:6d:62:9c:77:d9:4e:d2:5a:
a4:8e:80:18:9b:dc:9d:02:ac:bb:f2:a7:6c:2b:48:
4d:29:f9:fa:66:26:c0:ef:51:e9:75:8f:c7:c9:6e:
09:6c:a8:55:94:e8:a2:52:88:de:fe:ff:1a:a5:1a:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9C:EA:DF:7B:97:93:97:8E:3B:31:55:3F:14:4D:88:0C:E5:43:53
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/uJzq33uXk5eOOzFVPxRNiAzlQ1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.145.0/24
81.29.148.0/24
Signature Algorithm: sha256WithRSAEncryption
90:77:b6:49:b4:07:58:19:8c:db:e7:85:e3:97:2b:3b:9f:51:
cb:13:dc:8b:cb:f4:c1:9d:28:97:73:de:8a:23:37:cc:5c:9a:
e2:64:74:5c:7a:18:48:3c:c2:69:22:60:63:99:c0:ae:11:1f:
a9:b7:41:f7:b4:f2:30:40:1e:43:13:1e:63:40:d2:b6:ef:a6:
f0:0f:29:17:74:3a:48:62:a6:90:c9:6a:3e:73:c3:a5:86:b0:
f0:c8:10:64:ce:75:75:d6:a7:0d:dd:c9:4b:ed:e1:15:56:08:
f8:fd:2f:53:9e:a1:48:f8:e9:f2:61:fc:c9:01:f4:8d:b4:4d:
42:c5:92:e0:9d:31:d8:95:28:d4:58:11:5e:61:d5:a0:dd:64:
e6:c7:59:07:a1:0d:eb:7a:f1:d6:88:dc:d5:29:f5:4c:e3:be:
54:28:aa:90:0d:71:10:a0:78:aa:d5:82:e3:ee:57:24:ab:c0:
bb:18:02:c2:00:45:07:bc:60:4c:30:f0:19:9c:d4:b2:9a:b8:
8c:1f:04:87:52:bf:55:0c:21:f4:7d:80:01:3b:93:29:2d:ad:
2a:ee:9f:cf:24:25:61:1d:7d:2f:c8:55:fb:03:be:e5:21:a1:
2e:15:50:50:eb:9d:d0:7c:a0:69:dd:2e:f1:50:9a:69:e9:a1:
43:44:bc:ae
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 6 06:06:00 2023 by rpki-client on console-fra.rpki-client.org