Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/uJK1-y8WoB6BRnWqB7kwuphrSyc.roa
File: uJK1-y8WoB6BRnWqB7kwuphrSyc.roa (raw, json)
Hash identifier: unwp9DlspE03uM+a6XWk1xpYPAW6C8q3UcJbDh6hn/Y=
Subject key identifier: B8:92:B5:FB:2F:16:A0:1E:81:46:75:AA:07:B9:30:BA:98:6B:4B:27
Certificate issuer: /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial: 01879DC4ECE5902403CFEEE7775B30EC7379
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/uJK1-y8WoB6BRnWqB7kwuphrSyc.roa
Signing time: Thu 20 Apr 2023 08:25:41 +0000
ROA not before: Thu 20 Apr 2023 08:25:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197883
IP address blocks: 83.97.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:c4:ec:e5:90:24:03:cf:ee:e7:77:5b:30:ec:73:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Validity
Not Before: Apr 20 08:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b892b5fb2f16a01e814675aa07b930ba986b4b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:81:d8:7d:4f:e2:ae:34:c6:6a:5c:ad:50:dc:
b7:7a:e8:01:9a:7a:72:d1:cf:70:d5:cd:7a:ae:0b:
c4:34:f7:2f:52:e5:c1:06:0a:e1:86:a8:7e:94:7c:
2d:14:32:8c:d4:ad:b3:0e:5d:30:d5:09:b3:de:ec:
ce:d7:5e:44:55:97:41:7a:88:49:a9:8a:1b:91:22:
49:2b:e3:d7:44:74:eb:5c:46:2f:ed:dc:38:2d:6e:
07:38:63:32:52:bf:59:32:ce:92:a2:85:ea:5a:a0:
a7:1d:5e:a8:97:db:00:5c:6b:8e:98:4d:65:dc:4e:
06:ca:ea:10:10:bf:9a:5a:76:df:bb:d2:f4:9a:50:
ea:e9:f2:f1:cd:b1:e6:1b:69:52:b1:28:16:0c:f7:
9a:43:30:66:fb:ca:d3:e3:48:ca:b9:d3:08:5c:f1:
50:60:9c:40:53:94:93:1c:3f:af:81:17:87:8c:3f:
66:85:a9:c0:6a:e9:7c:53:90:4a:c7:ce:13:ab:26:
0e:34:e8:b4:b6:c5:8e:05:18:02:e5:e4:65:75:4f:
4d:cd:3e:e9:f8:2b:99:b8:58:5d:97:46:c7:2e:6c:
6a:22:88:6c:23:4e:87:78:2e:7a:62:db:27:75:1a:
5a:1f:ac:dd:18:fe:82:1c:54:99:ea:2c:9a:02:c5:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:92:B5:FB:2F:16:A0:1E:81:46:75:AA:07:B9:30:BA:98:6B:4B:27
X509v3 Authority Key Identifier:
keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/uJK1-y8WoB6BRnWqB7kwuphrSyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.74.0/24
Signature Algorithm: sha256WithRSAEncryption
43:89:cd:5d:77:8f:bf:48:66:f7:40:60:ee:2b:2f:e9:f9:33:
48:ba:0a:e5:20:46:5d:f4:d3:19:36:39:af:da:4e:68:d7:56:
66:de:be:aa:5b:43:75:2a:4b:fb:4b:40:cd:be:18:87:7b:f4:
2a:6d:e4:95:45:7c:51:58:f7:5e:db:81:7b:22:a8:29:2c:21:
c0:14:8b:d5:9e:23:95:75:4b:40:cc:b7:65:38:ec:59:30:ae:
2f:58:2f:46:82:ac:d9:01:81:a1:c9:f1:39:dd:a7:08:75:c5:
bd:9c:38:e7:cd:c0:01:a5:5b:d2:61:dd:ab:18:bc:61:19:c8:
45:c6:bd:76:2a:7d:65:aa:52:82:6e:86:60:7f:59:25:6f:54:
a2:e4:30:4d:2e:76:04:c5:6e:64:2a:e6:9a:54:d1:1a:1d:e2:
16:d2:38:85:3b:46:3a:71:1c:e4:b7:98:3e:e8:f7:e7:74:ef:
0d:82:f1:81:19:21:07:7e:4e:9a:35:e3:c7:6a:7b:49:65:22:
0f:82:84:d1:a2:de:43:4b:5c:c8:8a:e8:f2:d8:32:d1:01:2a:
13:d8:6f:e5:8d:aa:ef:30:35:b7:1d:2f:99:a3:12:6a:5d:26:
ff:dd:87:ad:86:b9:44:a9:a8:61:da:09:2a:82:75:9b:96:bc:
0b:a7:48:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYedxOzlkCQDz+7nd1sw7HN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYTEzMzM2YzM4ZWViYTEwY2JhYzljMjhjYWYxZWZjZjQ0
YWM4NjMwHhcNMjMwNDIwMDgyNTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODkyYjVmYjJmMTZhMDFlODE0Njc1YWEwN2I5MzBiYTk4NmI0YjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4HYfU/irjTGalytUNy3eugBmnpy
0c9w1c16rgvENPcvUuXBBgrhhqh+lHwtFDKM1K2zDl0w1Qmz3uzO115EVZdBeohJ
qYobkSJJK+PXRHTrXEYv7dw4LW4HOGMyUr9ZMs6SooXqWqCnHV6ol9sAXGuOmE1l
3E4GyuoQEL+aWnbfu9L0mlDq6fLxzbHmG2lSsSgWDPeaQzBm+8rT40jKudMIXPFQ
YJxAU5STHD+vgReHjD9mhanAaul8U5BKx84TqyYONOi0tsWOBRgC5eRldU9NzT7p
+CuZuFhdl0bHLmxqIohsI06HeC56YtsndRpaH6zdGP6CHFSZ6iyaAsWbcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLiStfsvFqAegUZ1qge5MLqYa0snMB8GA1UdIwQY
MBaAFLChMzbDjuuhDLrJwoyvHvz0SshjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yMzg0ODYtM2U4ZC00YmMzLWExOWQt
MGE3NjhiMjQxMjVhLzEvdUpLMS15OFdvQjZCUm5XcUI3a3d1cGhyU3ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yMzg0ODYtM2U4ZC00YmMzLWExOWQtMGE3NjhiMjQxMjVh
LzEvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU2FKMA0G
CSqGSIb3DQEBCwUAA4IBAQBDic1dd4+/SGb3QGDuKy/p+TNIugrlIEZd9NMZNjmv
2k5o11Zm3r6qW0N1Kkv7S0DNvhiHe/QqbeSVRXxRWPde24F7IqgpLCHAFIvVniOV
dUtAzLdlOOxZMK4vWC9GgqzZAYGhyfE53acIdcW9nDjnzcABpVvSYd2rGLxhGchF
xr12Kn1lqlKCboZgf1klb1Si5DBNLnYExW5kKuaaVNEaHeIW0jiFO0Y6cRzkt5g+
6PfndO8NgvGBGSEHfk6aNePHantJZSIPgoTRot5DS1zIiujy2DLRASoT2G/ljarv
MDW3HS+ZoxJqXSb/3YethrlEqahh2gkqgnWblrwLp0h7
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:19 2024 by rpki-client on console-fra.rpki-client.org