Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/Udlh2DzY2nu0InLcspo8L60W9cE.roa
File: Udlh2DzY2nu0InLcspo8L60W9cE.roa (raw, json)
Hash identifier: tuhgYYumy9H3r5xPQuGtAQDydr9Ol8Hh/uGrXi9tUWU=
Subject key identifier: 51:D9:61:D8:3C:D8:DA:7B:B4:22:72:DC:B2:9A:3C:2F:AD:16:F5:C1
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 01856DC1C058DB8BB532C655BBF59975AC16
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/Udlh2DzY2nu0InLcspo8L60W9cE.roa
Signing time: Sun 01 Jan 2023 14:34:52 +0000
ROA not before: Sun 01 Jan 2023 14:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48357
IP address blocks: 91.149.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:c0:58:db:8b:b5:32:c6:55:bb:f5:99:75:ac:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Jan 1 14:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51d961d83cd8da7bb42272dcb29a3c2fad16f5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:f8:f5:43:53:5c:fd:5a:98:a8:f0:ec:8b:
18:c6:0d:8b:ee:b0:df:bd:6c:d3:5e:bb:73:86:e8:
05:87:2b:75:2b:5d:8d:e6:82:99:56:b2:88:8b:e6:
09:2c:d1:21:7f:6b:8b:db:4a:1e:39:14:ed:f9:97:
4c:4d:a8:07:40:f2:14:d0:77:31:6e:9d:7f:94:cf:
8c:5c:0f:a9:89:72:10:40:45:f9:be:e6:fb:bb:79:
84:67:a3:72:8a:28:13:31:b6:2a:1c:df:1f:c7:13:
09:ba:8a:64:bc:13:28:67:c5:d1:d3:63:bd:10:e8:
92:e7:66:85:91:ce:e6:7b:ff:b7:46:97:74:15:d1:
0f:a1:ff:83:a9:12:14:4f:99:2b:8e:7c:cf:be:8f:
ce:ae:e4:4b:4a:0f:bf:64:83:eb:54:0b:36:2f:96:
f8:bb:0d:91:4d:a6:4a:42:c7:f7:53:78:da:fe:e4:
fd:df:dd:5f:65:fe:19:cf:b9:1e:1a:17:14:c4:34:
a2:c7:f9:af:1c:99:a7:4d:d4:a4:8d:d9:a7:61:0a:
04:a0:37:df:63:9c:a0:ab:76:f3:a9:7b:a7:23:3e:
4f:ca:0e:ae:d8:fa:9b:0b:0c:d6:9b:1b:c7:c5:94:
12:10:1c:ba:1e:66:e7:58:47:5e:df:27:56:93:68:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D9:61:D8:3C:D8:DA:7B:B4:22:72:DC:B2:9A:3C:2F:AD:16:F5:C1
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/Udlh2DzY2nu0InLcspo8L60W9cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.192.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:b8:8c:61:9a:5c:c1:cd:0b:f4:2b:26:cf:cf:00:34:df:de:
8a:7f:88:8a:ef:0f:34:f8:db:08:9a:6e:ec:23:22:ae:84:3d:
b2:70:c9:e5:42:75:22:8d:51:e7:ed:31:e6:b9:ff:9a:0c:b7:
d3:ef:75:fc:d5:19:6f:f5:ef:5e:d7:89:1e:ae:dc:64:71:45:
d7:ae:12:7f:8c:76:ec:d1:a5:db:08:e0:84:f7:82:8f:b2:da:
b0:c2:8a:4b:9d:b4:a7:79:56:84:fb:bc:8d:97:01:04:1f:36:
bc:3f:2f:6f:09:54:5f:e2:c8:58:72:72:54:6c:28:96:c1:58:
c1:b4:3e:d4:2a:8b:73:9e:4b:56:dc:84:c3:a0:dc:52:f8:25:
85:db:b3:8f:2b:db:1f:bb:61:18:12:a7:00:b6:04:05:db:e5:
37:53:72:0a:51:3c:20:9f:4c:19:ac:f3:5a:4c:25:7c:08:c1:
7b:ee:92:75:fa:ec:97:ce:96:b3:d3:55:82:f4:bf:58:7b:f2:
7a:b2:d0:cf:a8:3d:7c:7b:f1:66:e4:64:00:1a:6e:c1:c7:a1:
18:fc:9c:f3:4b:e5:3e:cf:55:a0:de:65:48:05:ef:c4:a1:a0:
f1:73:65:9c:d8:97:8a:be:11:be:9a:f4:7e:6f:fd:23:62:dc:
21:67:e5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:16 2024 by rpki-client on console-ams.rpki-client.org