Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/uAlEnVHo7MiZKjAYM2CrgPp1BPs.roa
File: uAlEnVHo7MiZKjAYM2CrgPp1BPs.roa (raw, json)
Hash identifier: xx+quG0BeKPZ+C5h9DpeOBE5RMds5ueyjahAERiV5Uk=
Subject key identifier: B8:09:44:9D:51:E8:EC:C8:99:2A:30:18:33:60:AB:80:FA:75:04:FB
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 0187B1D077A542B4593A636F2D8B5D1F7678
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/uAlEnVHo7MiZKjAYM2CrgPp1BPs.roa
Signing time: Mon 24 Apr 2023 05:50:41 +0000
ROA not before: Mon 24 Apr 2023 05:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 185.248.48.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b1:d0:77:a5:42:b4:59:3a:63:6f:2d:8b:5d:1f:76:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Apr 24 05:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b809449d51e8ecc8992a30183360ab80fa7504fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a4:5d:42:b4:c0:7f:17:51:b1:19:eb:f4:73:
f2:ad:a3:4d:40:d7:ab:df:19:2e:59:be:0b:f2:4a:
de:11:88:15:4e:c0:7d:72:56:95:a9:bf:02:0d:a5:
82:f7:79:a7:e7:b1:9c:a9:47:84:84:5e:5b:d1:77:
3c:1f:b3:ca:12:75:17:b0:99:be:51:9b:d0:df:bc:
d7:b3:12:6a:ca:46:b1:6e:ff:93:4f:71:a5:ef:75:
f2:ad:09:5a:0d:13:2e:18:04:50:a2:6c:a5:6a:84:
b5:8a:82:02:db:e6:4d:80:ba:d4:9a:98:99:06:b4:
35:10:8d:a5:b1:84:31:b1:ae:66:d2:33:92:48:42:
db:f2:49:3f:73:af:cd:c6:8a:bb:db:71:85:b9:29:
da:5b:d0:7c:93:40:8f:3a:59:45:21:c7:90:89:70:
67:07:37:3a:ee:af:c5:62:d2:42:60:74:ed:e2:58:
d6:63:87:48:80:ad:b1:04:c7:ce:11:26:dd:11:df:
76:db:1f:7c:d5:e7:5a:f7:c3:28:63:3e:04:77:da:
f1:4a:49:57:5b:0d:0f:7c:67:6f:64:e2:3f:ba:ce:
77:c4:2c:40:19:10:e2:44:34:3e:f6:1f:37:b8:68:
f0:4f:be:93:4a:e8:12:e8:52:9b:19:59:87:5e:fa:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:09:44:9D:51:E8:EC:C8:99:2A:30:18:33:60:AB:80:FA:75:04:FB
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/uAlEnVHo7MiZKjAYM2CrgPp1BPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.48.0/23
Signature Algorithm: sha256WithRSAEncryption
38:b6:ad:5b:74:fc:a6:bf:88:6e:dc:f4:3d:47:8a:a6:a1:37:
34:93:0e:81:d9:ec:e4:98:ab:4b:00:5b:99:98:23:f3:b9:04:
ad:ab:1a:05:8e:fa:16:25:4c:b5:06:0e:31:f7:cd:9b:7f:c4:
61:87:63:58:17:52:41:da:a5:ca:f5:08:ed:40:b8:23:71:eb:
03:b8:af:39:48:63:51:26:c6:55:5f:39:27:e7:21:44:37:84:
13:b8:f0:02:61:0b:98:c7:a4:81:5a:3f:c0:2e:9f:85:59:69:
7c:0b:3a:15:98:a1:30:52:5d:fa:68:b8:06:c3:77:8c:74:6d:
43:43:b7:eb:06:d2:01:27:a5:78:25:f1:03:35:94:1a:21:52:
4b:07:43:b4:73:51:1a:af:ed:f6:5b:a7:53:49:6e:34:77:81:
b2:d6:93:39:c4:ce:16:52:25:a4:cb:bf:04:78:d7:4d:67:b9:
12:43:61:ba:27:fa:43:b8:9e:1d:12:18:76:9e:4a:db:7f:fb:
62:11:de:48:2f:84:81:ac:53:ea:67:5e:66:f5:47:c2:79:a8:
cf:57:ec:32:2d:3d:3d:30:c4:bf:f3:cb:b4:96:19:a7:b0:90:
c5:42:64:76:f9:28:b4:09:d4:a4:14:cb:5d:ec:e1:99:c0:9b:
7e:3a:cd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:14 2024 by rpki-client on console-ams.rpki-client.org