Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/ujBeCqS00ZKI-qABg1mFc3rQ4qk.roa
File: ujBeCqS00ZKI-qABg1mFc3rQ4qk.roa (raw, json)
Hash identifier: 4l297awGBO8TbtPY8v/zh7U9h9Wkvq7NQM6z8ukj/uw=
Subject key identifier: BA:30:5E:0A:A4:B4:D1:92:88:FA:A0:01:83:59:85:73:7A:D0:E2:A9
Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial: 0187050773C58AC68597D32466DFB0EAA50D
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/ujBeCqS00ZKI-qABg1mFc3rQ4qk.roa
Signing time: Tue 21 Mar 2023 16:36:27 +0000
ROA not before: Tue 21 Mar 2023 16:36:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31505
IP address blocks: 83.151.36.0/22 maxlen: 22
83.151.32.0/22 maxlen: 22
83.151.44.0/22 maxlen: 22
83.151.40.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:05:07:73:c5:8a:c6:85:97:d3:24:66:df:b0:ea:a5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Validity
Not Before: Mar 21 16:36:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba305e0aa4b4d19288faa001835985737ad0e2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:0d:96:28:cd:96:5c:7c:ab:21:d6:54:43:
74:62:28:7a:86:37:9a:c1:3b:69:f8:cf:43:46:32:
51:3a:51:f8:23:20:ad:0c:e2:99:22:a6:b5:3d:9c:
69:29:e8:74:30:31:df:d6:a9:d3:a2:9c:64:88:6d:
bf:5a:6a:48:81:ca:55:a2:29:22:c0:af:9d:78:02:
f6:2b:e4:a0:75:5a:c0:1b:c2:c9:f2:f6:a0:b8:79:
af:7b:00:ac:33:2c:e6:4a:df:d2:ba:a1:38:ec:79:
09:dc:24:c1:4e:ab:6e:98:64:c9:60:60:78:a7:ee:
30:10:e9:04:f8:ec:e2:6e:14:96:64:12:b5:d7:bb:
dd:1a:1c:9f:fc:a7:ed:4a:8f:85:e0:18:1e:9e:77:
46:db:21:dd:5e:44:fc:a4:29:bc:54:dc:c3:28:11:
f4:8d:c7:8f:6a:e4:f2:2e:eb:b9:1b:61:9e:7e:b1:
23:5e:fd:b1:88:42:43:71:b3:fe:9d:88:cd:37:e6:
51:fd:a7:ed:6d:56:d2:51:92:30:58:8c:76:9d:86:
3e:25:d5:ee:7d:07:a6:01:7b:0c:a8:be:be:bd:da:
88:09:63:9e:ff:dc:42:0b:21:05:2e:82:d8:74:70:
cb:1f:12:29:74:5b:d0:0d:81:76:87:98:01:42:88:
83:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:30:5E:0A:A4:B4:D1:92:88:FA:A0:01:83:59:85:73:7A:D0:E2:A9
X509v3 Authority Key Identifier:
keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/ujBeCqS00ZKI-qABg1mFc3rQ4qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.151.32.0/20
Signature Algorithm: sha256WithRSAEncryption
32:87:85:3c:19:30:4d:ef:60:72:b6:22:50:94:43:c0:bb:f5:
62:63:6b:6d:10:c3:2c:9c:45:aa:97:ba:de:a6:ba:c1:22:9c:
df:86:99:47:dc:27:3c:1a:c3:33:5c:3b:6a:3d:81:5b:82:9e:
e7:33:e8:1a:cd:fe:d1:e7:17:74:9a:fe:6e:87:36:d4:df:fd:
47:fd:68:48:f3:c9:9c:db:b8:eb:e3:54:d8:c9:97:f0:1d:14:
cf:fa:1c:3f:6b:a3:c2:2f:55:38:cd:80:1d:e8:92:96:11:c4:
b4:56:cd:44:88:d2:56:18:0f:93:62:31:0b:d5:2b:3d:30:59:
33:b9:f2:87:0e:8c:29:d4:29:cf:0b:cf:8e:36:3e:e9:b7:79:
5f:f9:18:53:0f:f3:91:a4:fb:f3:ab:74:09:55:44:be:d4:87:
b8:69:aa:3d:26:e6:0f:97:33:04:6b:7e:66:f3:93:62:50:ed:
6f:c3:de:1a:60:c4:11:fd:d1:b4:63:fe:d8:62:24:78:2f:36:
0f:24:1f:54:ac:69:f2:c6:b5:61:ce:48:18:e3:99:93:d5:62:
ca:6f:b1:cb:f0:57:b7:8a:1b:8c:48:bb:95:c6:96:ac:e1:ef:
eb:b0:0b:c6:0e:e0:5f:aa:f2:f7:31:ef:b6:fd:2f:04:7f:ef:
68:a4:28:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:53 2024 by rpki-client on console-ams.rpki-client.org