Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/Udr2h8v39SjDmww1kPulEgLLy-o.roa
File: Udr2h8v39SjDmww1kPulEgLLy-o.roa (raw, json)
Hash identifier: jPpK4Yg/rcxHkbf1BK5+Zk0JM55guPua56g3+WjcgKc=
Subject key identifier: 51:DA:F6:87:CB:F7:F5:28:C3:9B:0C:35:90:FB:A5:12:02:CB:CB:EA
Certificate issuer: /CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Certificate serial: 01856BEEC9CDE1B9771919F302AC5C4A4256
Authority key identifier: 78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/Udr2h8v39SjDmww1kPulEgLLy-o.roa
Signing time: Sun 01 Jan 2023 06:04:49 +0000
ROA not before: Sun 01 Jan 2023 06:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47447
IP address blocks: 185.117.215.0/24 maxlen: 24
2a06:8781::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:c9:cd:e1:b9:77:19:19:f3:02:ac:5c:4a:42:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Validity
Not Before: Jan 1 06:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51daf687cbf7f528c39b0c3590fba51202cbcbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:b7:60:3e:28:dd:7e:49:0e:18:65:bd:b4:
67:03:66:ea:0c:32:f6:62:38:db:9b:be:16:dc:67:
5a:52:b0:48:93:c1:a1:00:a6:77:1d:30:4e:78:95:
cf:99:7f:b8:43:0a:cd:4f:81:28:af:e6:da:d5:f3:
b5:5e:a3:c1:d8:92:75:44:41:3b:45:c1:6f:ec:78:
d5:f9:e0:f7:ff:06:47:10:25:9b:f1:98:b8:e6:8b:
02:7c:24:c9:11:64:70:70:e2:90:cf:0c:6f:44:e9:
0c:4e:72:e6:04:6f:a0:52:62:f8:22:2e:63:7b:5b:
4a:54:aa:6b:ef:91:82:85:bf:15:ac:6c:f2:09:04:
b2:66:05:01:18:35:9a:d1:7c:70:90:fb:e7:33:f3:
d4:61:86:d2:87:06:46:fa:be:68:1e:3b:b5:87:c9:
3d:52:9c:13:70:3f:e4:f3:8e:fd:09:59:ce:f9:fc:
bf:7d:21:b9:31:e1:80:aa:79:f6:7f:26:d0:b9:93:
05:30:96:b0:9e:18:44:52:80:77:ab:8f:6a:1f:a8:
cd:26:2b:61:f5:f5:bf:30:1b:d5:8c:81:66:25:1a:
4b:e0:f7:d6:b3:af:56:c7:35:17:39:e5:5f:da:98:
f7:a0:7d:6b:e9:4d:1f:6d:f7:02:a2:bf:2f:dd:4d:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DA:F6:87:CB:F7:F5:28:C3:9B:0C:35:90:FB:A5:12:02:CB:CB:EA
X509v3 Authority Key Identifier:
keyid:78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/Udr2h8v39SjDmww1kPulEgLLy-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.215.0/24
IPv6:
2a06:8781::/40
Signature Algorithm: sha256WithRSAEncryption
57:26:20:9f:9a:3b:7d:1f:22:79:5f:64:34:c5:f9:27:cd:81:
9e:4e:30:4d:be:e5:e1:3d:88:54:9e:16:bd:be:5d:0d:37:79:
71:7d:86:a9:1b:13:43:3b:9b:2f:87:69:cb:67:08:c7:94:6d:
b5:ef:1e:f6:e1:52:c7:83:ec:bc:1d:75:8a:e3:bd:e9:73:98:
9e:49:a7:c9:84:7a:47:90:09:58:3b:04:be:1a:b3:6a:7a:9e:
8d:42:4c:51:a5:1e:f4:11:98:c9:f6:93:e6:d8:1b:f0:aa:08:
97:58:f1:d9:cc:14:33:de:a5:98:40:6f:49:13:f8:22:0e:fc:
fd:c4:0e:f6:9d:d4:b7:3a:9c:21:25:5e:69:ae:97:42:20:d5:
27:57:ad:d4:e5:37:dd:f6:2a:29:6d:d6:7e:86:06:04:b7:1f:
a6:4f:1c:61:cd:d7:2e:05:e8:8a:46:7e:a5:de:c3:31:b7:ab:
bf:7e:ae:07:84:96:be:8a:57:22:b2:2f:b3:21:46:c6:7b:6d:
90:ea:15:c5:2a:34:88:cb:b0:17:85:64:9b:12:7f:c6:5a:19:
80:59:cb:df:58:df:f2:66:63:c5:5f:e6:50:ef:e9:4b:89:10:
3b:1d:6e:be:fc:b2:93:11:9f:05:b0:3c:d1:0f:86:f2:f7:f5:
48:4d:51:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:55 2024 by rpki-client on console-ams.rpki-client.org