Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/uv6b1YM1hCZfB0ON0mY374FvSAY.roa
File: uv6b1YM1hCZfB0ON0mY374FvSAY.roa (raw, json)
Hash identifier: y8LYOyAe/nATN8QMHjE6EcjyhGqnB0iAGIcKuvQbxmg=
Subject key identifier: BA:FE:9B:D5:83:35:84:26:5F:07:43:8D:D2:66:37:EF:81:6F:48:06
Certificate issuer: /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Certificate serial: 01856FE7158EF54BC19615FA741175A05D02
Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/uv6b1YM1hCZfB0ON0mY374FvSAY.roa
Signing time: Mon 02 Jan 2023 00:34:53 +0000
ROA not before: Mon 02 Jan 2023 00:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 46.29.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:15:8e:f5:4b:c1:96:15:fa:74:11:75:a0:5d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Validity
Not Before: Jan 2 00:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bafe9bd5833584265f07438dd26637ef816f4806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:90:55:c2:22:36:42:43:38:51:e0:03:8c:8b:
48:12:c6:7e:b6:24:4d:f9:e5:ee:f5:78:62:db:ea:
10:30:6e:ed:12:0d:72:5e:54:60:d1:5d:09:8d:54:
3f:a8:9d:b8:fc:9d:71:0f:af:e8:01:9e:9d:c3:be:
17:9e:1a:66:2e:d6:76:1e:9b:59:d0:8d:dc:2c:41:
f3:63:49:0e:27:b3:4b:e2:04:54:a8:4b:f3:3b:05:
c9:03:3c:d3:6a:e7:28:b4:72:41:92:35:50:80:f9:
0e:76:ac:42:ee:f9:f5:c1:55:57:41:bd:c1:2c:2d:
36:ac:b5:cf:87:7b:8d:c5:6c:fa:35:56:a6:a1:de:
4d:fb:45:87:0d:f1:8d:28:a1:b7:e0:fe:12:26:eb:
b8:e7:40:83:f4:b4:46:0e:a2:17:39:ab:aa:05:09:
97:88:fd:eb:76:24:fc:de:1d:2b:de:12:34:71:8d:
42:84:f1:01:57:06:b9:89:76:14:12:9e:c8:e3:6d:
82:63:9b:dd:fc:ba:d4:01:38:68:46:ba:3f:25:04:
df:2e:61:d4:88:4b:e1:90:14:fe:eb:23:b4:58:c0:
b6:88:92:cf:75:cd:92:e4:25:11:a1:55:a9:61:c8:
57:4d:8f:21:89:3b:67:9c:8d:af:5f:0b:32:f3:77:
03:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FE:9B:D5:83:35:84:26:5F:07:43:8D:D2:66:37:EF:81:6F:48:06
X509v3 Authority Key Identifier:
keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/uv6b1YM1hCZfB0ON0mY374FvSAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.242.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:91:ec:6f:95:95:bd:10:5b:d8:35:4c:b3:79:14:17:35:4f:
c0:bf:aa:79:10:9b:c5:42:ef:42:82:0c:be:8f:a9:d1:a4:49:
02:19:fc:67:d1:cc:ca:9c:59:5b:91:07:ab:b7:7a:6d:60:4d:
4b:77:3f:bd:74:1e:0a:7d:09:b5:2e:66:7d:af:db:fd:47:ca:
c9:f7:af:54:ae:a1:42:89:82:48:de:1a:ef:dd:05:a8:65:de:
48:4a:35:dc:9e:66:7a:9b:85:b0:38:69:47:76:42:e5:ce:29:
f3:7d:9a:c7:fa:bf:c1:43:d6:57:0a:d8:0a:69:31:b0:e1:43:
52:62:0b:22:45:47:d0:c4:39:a4:f4:94:47:07:f5:cc:48:cf:
38:d8:80:d6:47:be:e8:e6:32:7a:11:df:ed:69:9c:98:f0:f2:
e8:12:e4:2a:e9:e1:68:02:bc:bb:32:33:3e:90:72:d2:07:f5:
ba:15:b8:ff:33:3f:b4:5d:f0:2f:95:e1:8d:6f:d7:03:59:41:
7e:83:76:49:d6:4d:70:95:ad:79:f5:13:89:c7:5c:54:f5:52:
7f:9b:71:65:dd:7b:31:a2:f3:86:b3:9b:35:17:34:35:43:d1:
b7:ad:fd:12:75:a9:7e:f0:77:4b:ab:d7:ef:15:91:23:68:f9:
7c:5a:95:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:17 2024 by rpki-client on console-ams.rpki-client.org