Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/uj9Rk-YHpVYCT8XuLvkXe-chucc.roa
File: uj9Rk-YHpVYCT8XuLvkXe-chucc.roa (raw, json)
Hash identifier: YKRSnrAw2Xwha4kc5gZtUL4l1ug6DLmer1zsKVsgBV4=
Subject key identifier: BA:3F:51:93:E6:07:A5:56:02:4F:C5:EE:2E:F9:17:7B:E7:21:B9:C7
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 01857182FA6ABFAA22A1D16609259C971FFD
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/uj9Rk-YHpVYCT8XuLvkXe-chucc.roa
Signing time: Mon 02 Jan 2023 08:04:47 +0000
ROA not before: Mon 02 Jan 2023 08:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 46.28.240.0/21 maxlen: 24
193.22.169.0/24 maxlen: 24
195.80.237.0/24 maxlen: 24
193.41.210.0/23 maxlen: 24
2a02:2978::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Sep 2023 14:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:82:fa:6a:bf:aa:22:a1:d1:66:09:25:9c:97:1f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Jan 2 08:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba3f5193e607a556024fc5ee2ef9177be721b9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:17:28:4b:38:a1:95:87:09:ab:09:60:6a:
ea:be:0a:10:17:47:d2:15:89:e1:66:c4:1f:37:c8:
04:f6:a4:fe:22:07:79:f0:a2:f6:cb:3a:92:20:70:
97:f8:d6:44:da:96:5b:69:ef:be:5e:17:87:fd:04:
d1:a7:ec:b8:5f:ed:a9:91:07:cc:0e:29:80:75:70:
85:3a:de:1b:d6:b5:a0:f1:4d:6b:ab:28:9b:41:bb:
b5:36:e6:9e:5c:a6:1b:85:0e:db:4f:32:d6:65:3a:
1d:3f:d7:37:0f:79:be:d6:07:e9:b0:c7:92:d9:d8:
4d:ec:32:b0:79:7e:8f:24:d0:91:fa:2d:af:98:68:
a5:ec:2f:62:0b:39:71:2b:0b:30:de:db:ee:e1:83:
a1:7c:f3:be:71:4c:d8:a6:9d:59:77:93:e6:64:b7:
44:c8:55:97:c0:4f:19:0a:d3:2a:77:2f:27:d5:2e:
f2:1a:f9:0d:11:a9:7b:b5:0b:35:f1:57:f9:7f:86:
35:e5:b3:27:d8:37:79:91:76:55:38:cc:82:45:46:
53:66:97:42:73:7f:31:72:49:93:28:7c:28:73:25:
a7:6e:a2:d1:53:dd:d2:33:93:01:45:4c:e1:56:ad:
3f:14:e8:db:de:ba:60:7c:9c:28:50:0b:bc:d5:bb:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3F:51:93:E6:07:A5:56:02:4F:C5:EE:2E:F9:17:7B:E7:21:B9:C7
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/uj9Rk-YHpVYCT8XuLvkXe-chucc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.240.0/21
193.22.169.0/24
193.41.210.0/23
195.80.237.0/24
IPv6:
2a02:2978::/32
Signature Algorithm: sha256WithRSAEncryption
15:05:4e:41:3c:b0:93:44:f4:ac:63:1d:48:ca:9a:6b:0c:61:
d9:f3:24:aa:f8:ae:b6:a3:8a:04:6a:33:fa:1c:db:b9:de:17:
40:c4:4c:f6:71:69:de:95:be:bb:e1:3f:fc:f8:4d:1d:9f:cc:
1b:f9:7f:a0:7d:e4:b6:65:28:6d:96:20:fc:f4:af:80:d3:bd:
64:ab:09:bb:c3:e6:dd:8e:c6:d3:19:11:fa:4e:7a:7e:21:a0:
e6:cb:de:ac:29:21:a8:10:87:b8:57:01:cd:98:7e:a1:7d:d0:
4b:eb:71:b0:d4:11:ae:64:42:19:6d:fb:5a:21:65:a2:31:ef:
61:09:d8:c1:7a:a1:ab:5a:ea:70:d3:0f:c5:e7:a6:20:65:26:
73:61:78:eb:5f:24:29:bd:8b:35:a2:8b:06:bc:a2:c0:e9:36:
cc:13:9b:2d:38:6e:0a:b0:bf:ca:5f:a0:a2:49:62:cd:3b:5a:
ac:1b:11:df:c8:14:b2:3d:44:e2:cb:ad:18:dd:8a:99:b8:74:
44:28:35:93:15:cc:91:4c:12:22:e5:d2:c3:e4:a6:66:89:7d:
15:25:a1:55:3f:3a:cf:a0:9d:45:50:69:f8:97:e2:c2:70:aa:
f5:01:77:f8:89:ef:95:5f:0a:a8:a0:a8:cc:de:93:b1:de:2f:
e9:0a:03:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:19 2024 by rpki-client on console-ams.rpki-client.org