Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uZqW7-UcyWeekFmBMyFZty58UBY.roa
File: uZqW7-UcyWeekFmBMyFZty58UBY.roa (raw, json)
Hash identifier: MHJqtgvWPDCw1Cd/cKsgX26NZz6CalfCzx9+vZFJAsY=
Subject key identifier: B9:9A:96:EF:E5:1C:C9:67:9E:90:59:81:33:21:59:B7:2E:7C:50:16
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01856CF85963DF5E008B0642436D0F9E1A1F
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uZqW7-UcyWeekFmBMyFZty58UBY.roa
Signing time: Sun 01 Jan 2023 10:54:53 +0000
ROA not before: Sun 01 Jan 2023 10:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136258
IP address blocks: 91.148.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:59:63:df:5e:00:8b:06:42:43:6d:0f:9e:1a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 10:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b99a96efe51cc9679e905981332159b72e7c5016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ba:25:62:7f:34:7a:fe:38:6f:b5:e0:32:96:
68:c4:7b:e3:4d:58:ac:0c:f7:08:6e:0d:8e:09:c8:
73:81:1a:89:03:33:c7:88:79:67:d5:1e:cd:e8:16:
5d:52:46:c4:f3:06:26:9a:c4:a3:aa:bd:46:48:87:
1b:43:ec:ed:a7:38:ae:2a:2f:2f:79:b5:48:02:50:
f1:4c:9a:a4:91:34:bd:3e:b0:e4:82:10:69:9f:f0:
07:98:33:bd:8e:fe:40:2d:32:c2:2c:5d:dd:9b:bf:
d2:13:9c:90:bb:d3:57:37:31:7b:84:33:b9:75:86:
78:61:39:49:d0:30:8a:3e:a0:8c:20:0f:6e:0e:17:
3f:cf:dc:e4:77:8c:d9:27:18:9e:84:76:7d:8c:6b:
5f:c1:04:b9:00:e4:21:f5:67:63:18:d0:7c:43:db:
44:09:12:a2:9f:9c:ab:cf:11:23:08:f4:8a:ca:f2:
bd:6f:49:53:fc:3f:92:32:b1:be:c4:cb:9e:e4:69:
6f:f3:ea:5e:95:f4:0d:4a:da:5d:f4:50:66:ee:6e:
ac:49:f7:9d:ff:aa:5e:22:72:55:d9:2f:65:94:0e:
e6:5c:a6:07:9e:45:aa:b7:95:01:a7:05:7b:88:c8:
1b:2f:05:4e:5b:5b:43:24:b9:aa:66:2d:64:f4:a4:
6c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9A:96:EF:E5:1C:C9:67:9E:90:59:81:33:21:59:B7:2E:7C:50:16
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uZqW7-UcyWeekFmBMyFZty58UBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.148.134.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f7:33:0c:6e:e2:24:4c:2c:6c:cd:3c:88:a7:ca:52:ac:73:
d9:1e:a8:05:14:f0:21:b2:d5:36:2f:c2:9c:f2:47:4b:a4:ce:
81:49:46:55:38:d2:3f:1a:82:29:ce:2a:13:bc:25:12:cf:de:
91:52:55:c3:33:e8:05:ef:7e:4b:89:9c:9d:37:1d:2f:ab:68:
7c:43:37:87:0b:6c:1c:cc:9d:a2:14:f7:da:a8:bc:8c:4c:cd:
07:26:d0:98:24:da:f3:b4:4d:c3:1b:3e:85:cc:ae:b7:1e:89:
bd:a9:d9:3d:3f:da:04:88:22:77:2b:c2:73:5a:ab:1d:7a:d4:
88:d4:52:6c:56:49:3b:72:af:98:21:80:9f:1f:62:60:33:f0:
c3:58:5d:80:9e:5e:0a:92:34:26:56:3f:69:fc:33:7a:5c:77:
6c:94:9f:04:7a:be:36:9f:8f:ff:57:12:d0:64:e6:b4:e7:e3:
b6:d5:9d:90:2e:b8:f5:dc:fc:7f:ee:5d:61:3a:29:96:eb:06:
35:c1:07:a9:19:21:be:a1:c1:9f:28:3c:36:02:35:70:f8:4e:
47:ee:11:bc:c8:a9:7c:94:5f:e2:96:f3:c7:e7:d3:47:e4:81:
c1:f0:67:68:b4:c2:90:43:f8:38:4c:97:4b:10:e1:44:16:c8:
3a:b1:12:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:12 2024 by rpki-client on console-ams.rpki-client.org