Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/ui_g_9E1NeEm3KvZPxm11fmEvVQ.roa
File: ui_g_9E1NeEm3KvZPxm11fmEvVQ.roa (raw, json)
Hash identifier: vBWqkxaGrp8kKipcQIkapz9GqqR3ITy0ceSgBTrSx00=
Subject key identifier: BA:2F:E0:FF:D1:35:35:E1:26:DC:AB:D9:3F:19:B5:D5:F9:84:BD:54
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01856D6642ADDAFCF84E543E0E51B1FDFA48
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/ui_g_9E1NeEm3KvZPxm11fmEvVQ.roa
Signing time: Sun 01 Jan 2023 12:54:56 +0000
ROA not before: Sun 01 Jan 2023 12:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40123
IP address blocks: 83.126.16.0/23 maxlen: 24
83.126.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Feb 2023 10:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:42:ad:da:fc:f8:4e:54:3e:0e:51:b1:fd:fa:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 12:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba2fe0ffd13535e126dcabd93f19b5d5f984bd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:13:5c:33:4f:f2:9b:5b:b7:c5:ac:7f:d6:25:
60:3c:dd:36:55:84:a9:b7:08:d6:06:0a:2e:b9:54:
21:d1:1c:84:f0:47:83:cf:cf:e6:f9:4a:cb:89:e4:
b1:02:b4:71:d1:54:14:82:a8:93:f5:2f:16:9d:61:
e7:b0:cd:da:26:51:be:f1:f5:6f:0d:a3:db:33:ca:
63:f7:2d:a4:cf:22:18:b5:e6:75:2a:6d:45:67:89:
f5:c7:a9:65:9b:7b:89:4b:94:f5:07:8d:75:dc:70:
1c:2a:e0:6a:42:80:4c:e7:ce:eb:04:58:14:7b:0a:
f1:86:86:4c:22:77:12:49:59:e8:15:9b:99:17:b2:
b6:83:c9:f0:af:48:b0:72:fe:f0:f5:35:9e:4f:ed:
84:1c:77:4d:0c:d8:bb:a0:1c:94:f7:07:43:29:ff:
b0:56:e8:87:b3:6a:ae:f4:94:b8:1b:17:ce:bd:4d:
d7:87:34:76:27:58:b3:9e:13:e9:ef:44:11:7c:01:
34:19:93:89:ee:1b:8e:94:b3:9d:35:32:2b:1f:dd:
f8:67:69:b8:ba:b3:b8:6c:cc:5a:4d:38:df:7f:fd:
3b:72:c6:5c:ad:77:c6:c8:a8:7b:ac:b7:f4:9e:f6:
23:72:63:44:43:06:0a:99:06:ad:1a:b9:c4:ee:3f:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2F:E0:FF:D1:35:35:E1:26:DC:AB:D9:3F:19:B5:D5:F9:84:BD:54
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/ui_g_9E1NeEm3KvZPxm11fmEvVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.126.16.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:f0:09:3a:89:cb:cc:71:17:dd:01:1f:20:e1:13:4c:48:20:
97:44:f1:4e:e9:b2:4b:ea:be:e2:8b:e6:98:86:aa:a9:26:3f:
a3:5e:bb:02:a3:be:a4:d2:f5:75:67:2c:e1:1f:4f:cc:89:05:
49:00:a6:1a:17:be:90:29:89:6f:c7:69:28:b0:1b:ee:c2:e2:
80:48:80:b9:fc:2c:54:da:77:01:92:66:90:f1:be:13:1b:ce:
c3:2d:ad:13:30:34:94:61:14:4a:62:d3:a8:fc:be:47:98:82:
ee:dd:0a:57:af:cb:dc:1f:84:7a:b8:aa:e0:35:e1:f6:bb:64:
ae:84:2e:58:dd:75:66:d0:0e:58:8b:71:be:34:68:29:1a:75:
e9:70:61:ec:ef:f4:ec:86:48:11:1b:3b:5b:32:f3:ab:81:0d:
a8:2e:28:91:2e:4e:b5:a1:b0:29:f2:68:cf:94:ad:70:f8:a6:
10:ab:10:61:b3:2a:24:37:43:98:67:4b:03:49:cd:a1:bc:dc:
95:70:86:d0:26:f9:e4:7e:ec:03:9c:37:ce:e8:d3:d2:15:80:
6a:0a:aa:de:bb:a7:44:03:5b:a5:26:78:83:dc:46:cc:cb:24:
4f:fd:11:3c:05:c6:94:c8:fb:bc:53:e3:0d:bb:69:6f:98:bd:
06:54:95:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:11 2024 by rpki-client on console-ams.rpki-client.org