Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/uQORf9hUkKMppbZIDSHYByPWuUI.roa
File: uQORf9hUkKMppbZIDSHYByPWuUI.roa (raw, json)
Hash identifier: leDP1k6GJCX2/YQiIuUBUXBzR15Cy8+7yOLFctl0F+A=
Subject key identifier: B9:03:91:7F:D8:54:90:A3:29:A5:B6:48:0D:21:D8:07:23:D6:B9:42
Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial: 0185ED6653A73C60F6F5F828E5510EDDA46B
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/uQORf9hUkKMppbZIDSHYByPWuUI.roa
Signing time: Thu 26 Jan 2023 09:26:24 +0000
ROA not before: Thu 26 Jan 2023 09:26:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.238.214.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:66:53:a7:3c:60:f6:f5:f8:28:e5:51:0e:dd:a4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Validity
Not Before: Jan 26 09:26:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b903917fd85490a329a5b6480d21d80723d6b942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1c:39:48:ab:87:56:90:bf:fa:4c:a5:1a:e4:
b1:41:78:dd:0d:3c:bb:70:6f:d3:c0:36:56:11:49:
6f:bc:75:5f:0e:bc:75:8a:82:2d:e2:89:6d:b4:ff:
e6:61:0c:44:5e:a0:d7:f5:56:ac:63:87:fd:af:ae:
12:88:47:02:0d:1e:79:2b:ef:38:1b:92:6a:8a:1d:
f7:9b:ef:a5:28:0d:2e:a0:f0:14:77:3d:96:98:d6:
ee:b5:ba:90:cf:fb:d4:91:b1:78:33:06:6c:c4:f3:
11:7b:b7:b8:fe:64:37:ff:14:36:44:c1:99:5a:d4:
c1:57:b6:57:65:c9:6b:7d:60:0e:c0:c0:ab:84:2c:
ac:44:69:c6:19:42:f0:41:ab:3b:d2:b6:fb:66:70:
ba:53:47:7d:6f:38:02:e2:c6:2c:5f:6f:5e:b1:94:
4a:49:85:e2:4e:84:8c:fb:ea:35:63:5b:de:41:95:
c9:75:19:7a:30:91:1c:35:2d:fa:d9:0e:a5:1e:63:
ab:8c:a4:ab:a4:33:12:4e:5f:2b:6a:5d:e1:97:b5:
87:70:fd:58:ca:f0:87:29:63:21:74:dd:2d:ff:21:
30:30:f9:ca:48:9d:10:05:f4:8a:28:5f:f1:fb:99:
fb:7c:9d:a2:1c:18:e9:33:8e:f7:f8:1c:42:12:32:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:03:91:7F:D8:54:90:A3:29:A5:B6:48:0D:21:D8:07:23:D6:B9:42
X509v3 Authority Key Identifier:
keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/uQORf9hUkKMppbZIDSHYByPWuUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.214.0/23
Signature Algorithm: sha256WithRSAEncryption
81:c7:fe:1f:99:d4:04:a8:20:6b:fe:59:22:47:e0:c6:2f:23:
d7:cf:7e:91:4a:ff:1d:40:8d:a6:97:f4:a1:03:de:1b:8a:64:
28:8a:1e:3e:20:7a:f6:65:d9:bb:34:49:15:41:b2:f0:8b:aa:
66:68:c2:23:65:d4:63:07:63:ac:5e:fd:1b:60:57:d6:88:24:
14:bc:0e:2a:fe:f8:66:10:0e:bb:9e:62:0d:43:1f:66:38:53:
13:7f:51:8a:98:2e:06:98:93:e1:ad:ee:ab:7d:56:53:85:5d:
c3:1a:1a:ea:c4:02:e9:30:f1:16:fd:f7:30:1f:35:94:6b:63:
9c:7d:c0:9e:48:1d:ec:51:84:88:d5:42:c8:e6:62:a2:53:d3:
2d:c4:b9:3d:e5:ca:0c:9c:4b:18:15:4c:3f:3e:29:e6:1a:5d:
f4:0d:e2:82:d2:50:c5:3d:a9:40:42:7d:5d:06:1f:3e:2f:0b:
ed:1a:97:e1:de:a8:c4:29:75:10:23:6a:8d:f1:e3:31:df:0f:
f8:6f:69:40:e1:d3:cd:e9:bd:8c:16:f4:b0:82:17:c4:ed:74:
56:b7:ae:52:7f:f0:3e:75:33:d8:3a:90:18:c9:b2:d8:82:4c:
71:7c:e4:17:fe:57:3d:b3:ad:5c:8a:8c:f3:43:1c:d7:88:24:
bd:ac:4d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:54 2024 by rpki-client on console-fra.rpki-client.org