Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uA6v2Bl_GJyb5rTagQEseLu2qas.roa
File: uA6v2Bl_GJyb5rTagQEseLu2qas.roa (raw, json)
Hash identifier: bvqltQAFdqucafjk4OfZG2yoEF/09k1F6hkFUPVzo3A=
Subject key identifier: B8:0E:AF:D8:19:7F:18:9C:9B:E6:B4:DA:81:01:2C:78:BB:B6:A9:AB
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01856CF8566AB532630200F8B67FF5C4A3E8
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uA6v2Bl_GJyb5rTagQEseLu2qas.roa
Signing time: Sun 01 Jan 2023 10:54:52 +0000
ROA not before: Sun 01 Jan 2023 10:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49849
IP address blocks: 91.148.128.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jan 2023 15:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:56:6a:b5:32:63:02:00:f8:b6:7f:f5:c4:a3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 10:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b80eafd8197f189c9be6b4da81012c78bbb6a9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:60:46:f6:77:0d:37:2a:d6:6c:e7:bd:5d:
5b:f9:ca:3b:21:8d:7e:17:af:f7:0a:7a:b9:db:61:
57:fa:10:b1:66:a4:d2:cf:e8:d4:23:ce:33:e1:fc:
f4:c1:7e:0d:cc:1d:43:b1:2b:21:54:41:f0:c8:7a:
d2:b3:8a:42:9b:ff:5c:2c:44:a9:94:9f:3c:1f:3f:
90:ce:8c:2b:b4:52:0b:85:b1:ad:08:65:f8:0a:70:
cc:56:f7:66:07:15:45:3f:a0:37:9e:1b:18:a7:65:
ca:72:21:82:e7:1c:5f:22:cb:fb:3b:26:e1:08:59:
46:57:0d:d0:47:40:0f:b3:5e:27:6b:0a:bf:96:d5:
1a:ab:ce:53:32:44:96:85:7b:19:e5:6e:b3:f7:9b:
66:53:12:b0:b5:e6:16:ca:95:57:13:a4:a5:58:af:
8d:03:c8:c8:45:7b:2b:4d:e1:0c:2f:76:28:91:de:
bb:16:a8:8b:73:b2:9b:54:11:50:2a:e0:8f:68:24:
b3:07:2c:bc:3e:a8:18:f5:82:2b:24:17:a8:bc:af:
93:63:6b:c0:f7:46:57:bb:06:04:21:62:b1:22:d1:
d6:17:48:ea:94:37:17:ef:de:ee:c5:a1:0e:d0:ed:
01:98:81:31:02:3b:11:42:2d:7d:98:1c:b8:fe:74:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0E:AF:D8:19:7F:18:9C:9B:E6:B4:DA:81:01:2C:78:BB:B6:A9:AB
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uA6v2Bl_GJyb5rTagQEseLu2qas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.148.128.0/22
Signature Algorithm: sha256WithRSAEncryption
25:8c:a8:2a:b6:68:ba:5a:15:4f:67:28:a4:26:0b:6e:40:d2:
92:3a:d9:93:c8:c5:79:75:ec:c9:41:bc:90:50:89:3e:8a:f7:
78:e0:29:9c:d3:ad:9a:8c:1d:87:42:83:dc:f9:59:79:48:dd:
51:93:30:0f:61:f7:ca:65:d8:f7:51:ab:8b:a5:03:72:2d:eb:
ed:64:8d:31:a3:d6:9d:fe:c4:5a:f4:d9:64:63:d6:5b:0c:00:
97:ac:9f:c6:98:40:f1:77:59:86:4e:72:86:f9:a4:be:bf:49:
80:ac:6b:3b:b9:99:d2:9d:7d:3b:54:83:49:0a:6e:24:aa:27:
59:52:da:de:ff:7d:86:68:28:b3:0e:b3:f4:16:ab:28:ae:28:
81:57:5c:eb:aa:b5:a9:64:2f:9d:ad:2a:cc:a8:bc:6f:e4:a6:
a2:b8:83:e3:24:3f:bf:d7:92:be:c7:e9:67:54:9a:bf:98:3d:
70:8f:41:cc:81:fd:ea:74:bf:d5:56:95:58:ed:44:dd:74:73:
9f:8f:c6:14:67:12:72:b3:d4:0f:c9:b0:c6:52:57:e4:36:6d:
81:6a:08:05:bf:ea:47:a8:d1:08:65:53:8a:66:85:ec:e6:e1:
69:a5:c7:63:5a:e2:19:8a:68:ef:70:c9:b4:10:c0:c0:91:e7:
62:0b:7f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:12 2024 by rpki-client on console-ams.rpki-client.org