Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/03__Ukb-RHcWOlQqZ1MLIIyB6zQ.roa
File: 03__Ukb-RHcWOlQqZ1MLIIyB6zQ.roa (raw, json)
Hash identifier: E7fU4R75nRaqhoQmasxh6AjQHYRjW8ye3gCKPn2G/Xw=
Subject key identifier: D3:7F:FF:52:46:FE:44:77:16:3A:54:2A:67:53:0B:20:8C:81:EB:34
Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial: 018B147D9245685F20DA6D72F597275E6090
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/03__Ukb-RHcWOlQqZ1MLIIyB6zQ.roa
Signing time: Mon 09 Oct 2023 12:50:55 +0000
ROA not before: Mon 09 Oct 2023 12:50:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203703
IP address blocks: 192.100.96.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:7d:92:45:68:5f:20:da:6d:72:f5:97:27:5e:60:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
Validity
Not Before: Oct 9 12:50:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d37fff5246fe4477163a542a67530b208c81eb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:22:94:ed:30:27:8a:d5:d6:8c:7c:87:b5:24:
53:b9:bc:b6:88:1f:65:bf:97:b6:ad:34:02:9c:45:
05:63:49:6c:77:2d:26:f7:77:b2:a1:2a:01:d9:c4:
b6:ff:bb:a8:75:ef:24:c4:21:0c:a3:ae:de:3e:7f:
84:15:48:6c:bf:15:ab:b9:af:4f:81:4b:20:a5:94:
a0:92:c9:36:0f:aa:ec:41:0e:84:8b:e3:a0:a9:8c:
4c:e3:32:78:ba:7f:ee:57:32:83:e3:33:5d:e1:da:
04:e4:95:73:6b:d3:12:96:d6:b5:16:05:39:cf:13:
1b:db:21:7c:ff:df:28:94:00:1c:3d:4f:23:e2:fd:
fa:24:a2:93:38:10:32:68:7e:7d:b9:13:0c:da:f7:
e0:46:e4:f1:4f:85:00:c4:12:57:0e:e7:7f:99:f9:
21:16:de:62:a0:d5:b2:9e:6f:f4:38:e5:60:b3:63:
ac:4e:3a:39:5c:23:a9:ab:39:69:cc:53:a6:22:69:
35:91:ef:26:66:0e:70:3a:b1:71:e0:bf:5c:5e:e3:
7e:1f:92:42:d6:85:14:c3:53:23:b1:ca:84:d9:88:
21:8e:b8:fc:9c:68:c6:f0:96:a5:02:8f:4f:5a:67:
5f:82:37:bc:31:a7:81:3d:59:9c:c3:dc:5e:04:e9:
f4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7F:FF:52:46:FE:44:77:16:3A:54:2A:67:53:0B:20:8C:81:EB:34
X509v3 Authority Key Identifier:
keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/03__Ukb-RHcWOlQqZ1MLIIyB6zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.100.96.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:f7:69:d6:84:86:1e:5a:40:38:7b:ae:b1:ac:a7:8a:89:d7:
49:73:f8:02:b1:72:5b:8a:2c:16:b6:90:57:4f:0d:90:26:cd:
2e:f8:16:d1:5b:50:d1:c0:82:0e:cb:00:5a:33:1a:f7:31:25:
10:d0:2a:37:25:e7:6d:27:9b:6d:b0:35:cc:75:97:ee:b0:7e:
d3:6b:df:19:f7:63:d3:24:d3:06:9f:58:11:dc:0d:ce:70:0e:
61:fd:04:3c:53:be:d6:ca:4d:9a:fa:0c:33:53:55:21:f1:65:
44:19:46:87:5d:58:ff:b6:d7:57:a5:ad:4b:1a:b0:1c:b8:49:
66:55:32:1d:ad:42:ee:ec:ee:8a:6b:5e:23:9c:e9:3d:7f:c3:
eb:1c:8a:5c:2d:79:06:75:16:91:5b:1f:62:31:73:27:27:8c:
54:9d:7a:4c:d9:ce:e9:a1:5c:83:49:fc:73:56:cd:e8:de:f0:
9d:0b:9c:dd:68:5b:0f:98:4b:f0:d1:db:89:1c:36:97:58:29:
c7:65:ff:44:53:27:59:fc:3e:74:89:e1:d5:10:77:ba:64:7e:
db:b6:58:a0:2f:dc:23:43:ae:f0:31:34:10:f5:20:91:60:3f:
89:00:60:ef:8f:47:2a:29:98:87:af:86:ca:7f:23:f7:a1:c4:
bf:78:1e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:48 2024 by rpki-client on console-ams.rpki-client.org