Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/UaeBmDOuih_AYwd0v2BXEcIG2TM.roa
File: UaeBmDOuih_AYwd0v2BXEcIG2TM.roa (raw, json)
Hash identifier: OeiL6+7U5K79WDi6DKQbwRSw2ltkSrh8H3M4WSFyv14=
Subject key identifier: 51:A7:81:98:33:AE:8A:1F:C0:63:07:74:BF:60:57:11:C2:06:D9:33
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018B9069D322812A4C0FC8A938E3B765A101
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/UaeBmDOuih_AYwd0v2BXEcIG2TM.roa
Signing time: Thu 02 Nov 2023 14:22:16 +0000
ROA not before: Thu 02 Nov 2023 14:22:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 46.175.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:69:d3:22:81:2a:4c:0f:c8:a9:38:e3:b7:65:a1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Nov 2 14:22:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51a7819833ae8a1fc0630774bf605711c206d933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:71:31:39:b5:07:1b:bc:0c:c5:4d:cd:5f:04:
03:2b:c2:4f:bd:7f:6f:87:59:78:96:f7:29:c8:61:
3b:2d:92:65:b4:e0:99:d3:96:94:d1:79:8f:b5:b9:
47:bf:68:f7:c3:2e:13:23:dd:c6:a5:0c:a1:c7:e8:
af:d2:94:58:be:19:5b:6d:fc:63:ca:c2:34:bb:56:
99:ef:40:b0:da:89:f1:03:cf:4b:cb:2a:0a:0f:ee:
fa:06:36:04:bd:bb:bc:0c:0a:fd:c9:2c:4d:72:16:
6f:eb:f2:62:28:6a:e5:d0:bc:59:a1:f0:d8:fe:bd:
40:f7:58:58:28:b8:5d:fb:0d:09:da:a9:44:38:ce:
06:6c:c5:c4:ba:09:3e:a3:b7:18:c1:77:67:c1:be:
d6:a0:c6:3a:ca:c4:ef:eb:13:10:20:8f:af:a8:49:
09:0b:58:90:a2:86:ff:93:55:59:c8:ca:7d:d1:74:
a7:e3:0c:60:c3:42:ca:91:0f:0b:cd:29:82:da:a3:
81:d5:99:01:f3:53:a4:77:ad:61:60:21:d7:7a:cf:
e4:2f:29:de:54:8b:d5:18:b9:c8:29:45:20:65:e9:
aa:46:6d:a4:26:db:0e:0e:51:89:9c:9b:db:e7:f3:
5d:59:cb:81:b2:1a:15:28:74:d1:fc:f8:1c:f8:79:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A7:81:98:33:AE:8A:1F:C0:63:07:74:BF:60:57:11:C2:06:D9:33
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/UaeBmDOuih_AYwd0v2BXEcIG2TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.130.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:e5:64:15:72:71:bf:01:5f:68:0e:6e:a2:a1:2e:ae:fd:98:
e1:33:3f:90:cf:e0:0e:c1:b2:1a:aa:b9:4e:06:d1:ca:c5:8e:
d4:ce:8e:8d:4c:60:40:20:b7:24:9c:86:7a:da:2b:32:cc:9a:
75:4f:2e:63:44:b8:72:d9:dd:e6:6a:41:3f:21:ae:6b:63:b7:
7f:e4:b3:19:93:f4:d4:9d:08:00:9e:bc:13:f8:a3:56:56:c5:
28:1c:07:a2:57:d4:34:75:ee:10:0e:38:c6:e4:75:aa:88:68:
22:a1:de:1e:c7:19:68:ba:79:1f:a5:43:e8:c1:5d:52:47:24:
d4:16:71:a9:ee:3b:e2:e4:53:3d:c6:d1:85:61:2c:90:a0:4c:
e3:c1:a4:d3:22:1b:17:6b:06:33:3e:7f:fe:f4:c9:68:16:b4:
dc:2d:a1:42:a5:6c:60:75:bf:5b:25:c4:49:33:0c:71:bf:87:
0b:9b:a9:50:4a:b1:d3:73:ee:c0:7b:28:8a:88:9d:54:c0:6d:
18:44:8f:1c:9d:5e:6c:4d:ff:bd:d6:5c:1e:32:a2:47:43:c1:
19:1b:e2:3a:ce:21:8f:d9:2f:3c:d2:ed:4a:b8:82:9c:6c:98:
98:d4:46:77:b4:73:7d:3e:f3:0a:3d:e4:5c:00:90:bf:34:ba:
e2:fe:6b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 3 08:54:20 2023 by rpki-client on console-fra.rpki-client.org