Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/UxcCuUxEIgP4-bvq-X679m6H4YY.roa
File: UxcCuUxEIgP4-bvq-X679m6H4YY.roa (raw, json)
Hash identifier: sB/alsqVnNtVYe2V/aoqy5siF4a1UZLEqpmNfqz+8cA=
Subject key identifier: 53:17:02:B9:4C:44:22:03:F8:F9:BB:EA:F9:7E:BB:F6:6E:87:E1:86
Certificate issuer: /CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Certificate serial: 0185704BAB93B391DC6144CA347288905DBF
Authority key identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/UxcCuUxEIgP4-bvq-X679m6H4YY.roa
Signing time: Mon 02 Jan 2023 02:24:45 +0000
ROA not before: Mon 02 Jan 2023 02:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 185.149.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:ab:93:b3:91:dc:61:44:ca:34:72:88:90:5d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Validity
Not Before: Jan 2 02:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=531702b94c442203f8f9bbeaf97ebbf66e87e186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:9f:f1:40:70:a8:5e:bc:41:b5:da:57:16:
f0:0b:29:8b:f8:1f:2a:a2:ae:52:3e:8e:c6:5c:5a:
86:f7:51:9e:fc:c5:af:01:7a:8e:00:9c:f0:95:65:
b3:42:a0:e0:71:51:0e:56:f2:f2:8b:a7:0f:96:f4:
4e:4e:02:64:37:fd:4f:a2:1b:ca:f7:e6:b4:a0:6f:
80:f6:7d:89:1d:51:b6:de:2c:e4:f5:9f:47:2d:94:
a2:8d:ae:c4:27:a5:50:e0:a9:5b:af:08:1a:8e:c7:
b9:d9:4f:d6:da:be:04:3d:28:9a:13:a6:9c:c0:e6:
16:a6:34:7e:63:c7:0b:ae:47:d7:b2:ff:3b:31:b4:
96:03:41:8b:31:29:c0:fe:fc:4f:56:0b:ea:f6:96:
b6:94:13:bf:5e:e8:c8:56:1b:82:dd:87:b5:72:71:
12:f9:df:d0:19:e0:76:9e:fd:b0:56:ef:16:b8:cd:
06:c0:b1:0c:fa:4e:c6:2d:7d:7a:4a:9d:1e:82:4d:
1d:3f:28:02:7a:61:31:87:04:ae:bd:b4:ac:cf:1e:
57:18:df:cb:52:c2:56:4f:d7:41:8b:96:71:ea:5c:
98:da:0b:00:b8:6c:e7:9e:5d:1b:1b:cd:3b:89:0f:
60:0e:99:4e:03:4e:9c:c1:2c:ee:f3:f2:18:9b:5c:
e9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:17:02:B9:4C:44:22:03:F8:F9:BB:EA:F9:7E:BB:F6:6E:87:E1:86
X509v3 Authority Key Identifier:
keyid:8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/UxcCuUxEIgP4-bvq-X679m6H4YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.54.0/24
Signature Algorithm: sha256WithRSAEncryption
53:cb:c3:ee:36:a0:f3:78:44:ae:d1:2b:d7:cf:46:0a:af:66:
bd:f4:a3:a4:9f:6d:78:8e:4e:2e:9f:b7:3a:e7:c8:34:30:1e:
05:4a:e3:37:2a:d8:e9:3a:b0:88:9a:58:39:62:26:5e:3a:c1:
22:3f:51:bc:3f:27:5e:b6:6a:0a:ec:08:11:e1:fd:a0:c5:11:
40:f7:90:ac:1f:1d:7a:40:90:76:f0:49:a8:0d:80:fe:cf:7e:
ff:17:df:72:17:1c:7b:d0:a7:48:03:d3:05:5b:22:74:4f:89:
95:a8:7f:e8:32:8d:46:b6:b2:7f:66:e5:ce:78:fc:17:55:3d:
15:3b:9f:a0:fd:03:0f:4c:fd:2c:da:41:91:7b:5f:03:ec:e4:
20:93:bd:56:c0:98:18:e8:0d:a4:39:d3:0d:27:3e:74:6a:7d:
6c:1a:01:14:58:4b:80:14:ed:8d:99:de:7f:ff:69:7d:13:54:
85:86:60:53:fa:46:2a:84:8b:4a:50:87:1e:97:fa:a6:02:6e:
40:63:c4:54:aa:a3:0c:8c:d1:d3:ee:ad:6a:e8:4d:98:9f:fc:
6c:9c:55:53:53:5e:8e:26:76:b0:19:8a:6e:00:49:ce:69:6f:
4d:df:30:b6:e7:d8:d0:8d:66:12:c7:7f:b7:52:69:b3:b9:25:
23:8d:0d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:22 2024 by rpki-client on console-ams.rpki-client.org