Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/R2y4UaKBbWFlIB4InEnHJev_Uds.roa
File: R2y4UaKBbWFlIB4InEnHJev_Uds.roa (raw, json)
Hash identifier: 37yr/DhP3o6MQcNSaWAwk1ig9hvWmkX0Hz0wIDiGW+M=
Subject key identifier: 47:6C:B8:51:A2:81:6D:61:65:20:1E:08:9C:49:C7:25:EB:FF:51:DB
Certificate issuer: /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial: 018944BAAB733A30A59327DB8F34BB51696C
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/R2y4UaKBbWFlIB4InEnHJev_Uds.roa
Signing time: Tue 11 Jul 2023 11:33:51 +0000
ROA not before: Tue 11 Jul 2023 11:33:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139341
IP address blocks: 51.39.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:ba:ab:73:3a:30:a5:93:27:db:8f:34:bb:51:69:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Validity
Not Before: Jul 11 11:33:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=476cb851a2816d6165201e089c49c725ebff51db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:25:62:1f:73:a7:81:b1:e8:f7:31:22:74:ee:
18:8f:b1:9f:8e:fd:eb:32:37:c3:a2:ac:87:06:0c:
54:07:ab:63:ad:66:00:83:0a:a9:f4:0f:e3:72:57:
67:06:d9:fb:15:44:b2:06:aa:b5:2b:00:d1:46:f4:
39:3a:83:24:eb:88:70:73:27:21:3f:d1:8e:da:4b:
0a:d6:c2:8b:06:85:13:5d:9a:55:75:8a:87:15:e6:
d9:26:d8:20:1b:6f:98:c1:65:fc:ff:0a:c5:d8:44:
b8:ce:da:ac:23:81:a2:76:78:fe:9e:76:02:7c:92:
75:70:82:d5:85:c7:7d:0e:b4:cb:b3:c7:3c:bd:5b:
14:10:4e:85:b4:69:92:22:e1:58:09:9c:3c:0c:7c:
ea:8d:e0:28:b1:80:c6:4e:ab:66:c2:6c:5a:6c:02:
c8:00:c6:12:79:a2:b0:48:8b:62:dd:42:f5:c1:bb:
ba:00:03:9f:23:18:1b:12:46:40:52:28:75:0e:9c:
e0:f8:02:59:c3:ff:be:3e:4f:69:10:18:c0:00:3a:
f9:a0:1a:f1:d7:64:09:25:a2:f1:19:39:7d:52:22:
e0:e6:03:76:7a:f7:75:8c:d1:0d:a9:62:8a:ad:bb:
17:8f:1d:7c:71:14:87:a8:34:c8:68:5f:4d:0e:af:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6C:B8:51:A2:81:6D:61:65:20:1E:08:9C:49:C7:25:EB:FF:51:DB
X509v3 Authority Key Identifier:
keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/R2y4UaKBbWFlIB4InEnHJev_Uds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.39.179.0/24
Signature Algorithm: sha256WithRSAEncryption
60:02:29:c4:b5:4e:e7:6a:55:be:82:89:31:74:c9:0a:96:2b:
01:4f:d6:a2:a6:64:ca:67:37:74:c9:df:1b:7c:ff:63:23:82:
fc:39:1e:b3:0c:40:f6:4f:53:a6:93:02:ce:bd:f5:50:07:0e:
78:05:6c:fa:62:9a:b4:87:1c:4e:e0:a8:56:94:87:0b:65:93:
bf:2f:7c:e7:cf:a6:42:5c:32:03:10:95:af:35:89:1f:9b:35:
0d:7b:ad:3b:3f:46:fd:c6:41:04:10:5e:82:1d:57:cb:ae:ef:
47:8b:36:68:9c:a0:33:27:42:92:3d:b3:85:08:69:0d:e8:aa:
8a:84:a2:94:a3:4c:04:40:50:a9:e1:1e:3f:5b:c0:af:79:91:
7c:0c:01:00:20:1c:58:95:cd:b1:40:dd:30:1b:ac:97:00:47:
4e:fb:c3:ad:5f:8d:30:20:00:8e:10:cf:c7:0f:55:bd:34:5d:
f7:d2:42:f4:8b:93:d4:ac:ee:18:81:09:71:00:dd:10:74:72:
65:03:ae:d4:d7:a5:34:af:f7:6b:de:30:15:cc:00:ba:40:f7:
2c:29:e1:8d:41:00:95:d5:77:50:51:e8:51:a2:6e:42:51:ca:
26:09:0a:12:5b:8d:db:be:25:e9:83:f3:7f:78:31:e4:e9:9a:
34:c8:3b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:15 2024 by rpki-client on console-ams.rpki-client.org