Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ujc58EIcoU1XWoX195QROj3PwAQ.roa
File: ujc58EIcoU1XWoX195QROj3PwAQ.roa (raw, json)
Hash identifier: V79FMpkjzSVKrROU0qs2BcI/A+MjCkcgday43LssfQQ=
Subject key identifier: BA:37:39:F0:42:1C:A1:4D:57:5A:85:F5:F7:94:11:3A:3D:CF:C0:04
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 018CB4BDAB76600FF257F718CA9523A371E8
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ujc58EIcoU1XWoX195QROj3PwAQ.roa
Signing time: Fri 29 Dec 2023 08:42:58 +0000
ROA not before: Fri 29 Dec 2023 08:42:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41221
IP address blocks: 93.116.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:bd:ab:76:60:0f:f2:57:f7:18:ca:95:23:a3:71:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Dec 29 08:42:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba3739f0421ca14d575a85f5f794113a3dcfc004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:96:55:98:dd:57:93:c6:9f:bd:19:ae:40:
52:a5:fb:19:5d:02:c0:3b:7e:55:de:95:a7:7b:4a:
a4:ee:89:7a:24:27:6a:54:e0:cd:88:ea:73:ed:87:
7e:c8:41:e8:27:e3:58:4c:fb:09:a5:53:1c:1c:12:
86:2f:d6:0c:9c:34:28:55:f6:15:d1:0d:8b:ae:28:
f6:fc:ce:1d:53:90:d3:c1:b7:95:f4:f2:3f:53:81:
d1:7c:69:05:71:db:11:cd:2b:0b:a9:e6:cb:f9:85:
41:2e:8e:d1:15:48:6d:35:bb:a9:c9:89:e1:3d:02:
a7:a5:fe:34:a5:94:f4:54:a2:31:16:f2:52:b0:11:
c0:8b:3b:c9:37:42:87:21:a0:0c:25:fe:10:b7:fc:
0b:46:3f:89:2f:3f:90:1c:4f:54:cf:29:eb:d8:73:
c6:e7:67:ce:3a:bb:92:d4:f3:91:27:df:f3:f6:ca:
7a:f8:7a:bb:af:ea:78:30:e3:f5:1b:b5:17:1e:44:
95:70:39:e2:06:d0:9e:d3:78:1f:d2:90:e6:86:7a:
76:42:14:33:cb:9d:61:9a:b1:4d:1c:41:bb:55:9f:
02:e8:c1:3b:36:6e:74:66:70:b8:ce:59:35:f8:3f:
c3:e4:81:c0:25:80:fd:8a:7a:48:62:39:b5:16:d5:
e5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:37:39:F0:42:1C:A1:4D:57:5A:85:F5:F7:94:11:3A:3D:CF:C0:04
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ujc58EIcoU1XWoX195QROj3PwAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.116.254.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f7:1b:d6:06:5c:ef:75:ee:26:aa:2e:0d:82:69:f8:fc:4c:
c8:f0:bc:42:18:62:09:02:61:ff:a8:31:80:8b:94:cc:8c:80:
7e:49:2b:e1:20:dd:f8:43:25:0a:7c:34:1a:be:44:7e:3b:b6:
21:30:fa:07:b1:c9:bc:80:45:70:fc:08:26:9d:87:33:df:10:
ff:f2:cb:67:9f:75:b2:f4:e9:62:0b:e4:06:bc:b7:11:60:56:
07:36:70:09:7e:b6:c9:91:22:4c:59:bd:7c:af:c9:69:d7:a0:
e2:ba:7e:16:11:5b:dd:a5:e5:1d:da:f2:fd:e6:54:86:82:c2:
44:ed:7f:99:94:13:01:c5:02:14:e8:d9:ae:c4:25:5a:3d:17:
83:fe:0e:a7:92:13:f9:ed:79:fe:c1:5c:87:38:6d:93:98:ef:
cd:24:1c:ac:9a:1c:3f:63:08:60:cb:5a:6b:c7:55:71:f0:6e:
30:3a:c0:c4:0b:6b:26:c1:bf:e7:a2:11:2c:34:2e:5f:5c:67:
48:a1:0a:8b:0b:c3:1e:0d:16:f9:bd:95:4e:bc:47:85:f5:73:
47:1f:cd:b8:ed:ef:67:fe:19:fa:5a:0f:db:4e:7b:b4:e3:fe:
4a:4f:e3:91:e0:b1:9e:01:85:3d:ec:61:b3:f9:62:ae:a9:56:
79:9e:a6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:01 2024 by rpki-client on console-ams.rpki-client.org