Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ulMENsRWHrooYwUZyuocj4gFmpA.roa
File: ulMENsRWHrooYwUZyuocj4gFmpA.roa (raw, json)
Hash identifier: OnwNRt0e1oC4F/sB6VzDpQEPIeDsnDQIb7zNuDCvV04=
Subject key identifier: BA:53:04:36:C4:56:1E:BA:28:63:05:19:CA:EA:1C:8F:88:05:9A:90
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802F300B0F48A763B8E536B7C33E68A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ulMENsRWHrooYwUZyuocj4gFmpA.roa
Signing time: Tue 02 Jan 2024 02:31:25 +0000
ROA not before: Tue 02 Jan 2024 02:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51452
IP address blocks: 192.71.254.0/23 maxlen: 23
192.71.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 07:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f3:00:b0:f4:8a:76:3b:8e:53:6b:7c:33:e6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba530436c4561eba28630519caea1c8f88059a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:a3:9f:f7:53:4d:c3:7e:b5:e3:b9:fb:4d:
ce:89:e1:ea:46:5b:98:25:b4:9d:6e:9f:69:6f:af:
82:d2:ae:d9:f8:f5:84:20:26:47:6a:07:69:50:9f:
02:fa:2b:8c:c7:79:b5:7a:dc:30:68:f1:31:56:29:
32:c9:e3:3c:05:58:20:16:48:c6:bb:57:ca:51:fd:
18:9e:c0:84:11:63:5d:5b:18:85:43:32:68:e6:70:
e4:d4:5d:f9:e3:52:30:cd:21:7b:5b:3f:e1:c4:42:
8a:6b:14:6e:91:64:40:90:77:70:6e:0d:59:68:76:
da:64:a6:18:b8:90:de:db:f8:c9:6c:9f:27:ec:00:
d5:97:fa:2d:7a:e2:d7:3b:71:9a:2d:d9:a6:0c:82:
17:b8:77:46:2f:e0:93:15:e4:61:11:7c:4f:6c:92:
34:3e:c9:42:f6:d1:20:10:73:92:19:80:d6:c3:da:
cd:87:38:bc:ac:4a:65:b7:a0:c8:3a:0b:d1:60:8a:
38:ce:29:5c:8c:1c:3b:74:c9:f2:c8:05:be:1b:e8:
70:e7:cf:bd:31:08:dd:89:65:07:31:f9:a7:4f:7c:
f0:1d:d9:47:47:74:0a:78:28:a6:c0:b8:01:f6:1a:
be:14:e4:56:2c:ea:84:24:c9:d5:a6:f2:a7:64:ff:
2e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:53:04:36:C4:56:1E:BA:28:63:05:19:CA:EA:1C:8F:88:05:9A:90
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ulMENsRWHrooYwUZyuocj4gFmpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.254.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:15:4d:8b:7b:27:6f:28:3d:5f:90:5b:d1:b9:2c:d8:60:f6:
6f:45:13:ff:44:86:02:f5:1a:33:7e:c2:38:f1:06:9a:9a:68:
08:e0:f2:3c:63:93:95:b6:49:25:35:84:de:06:c8:76:7a:37:
06:e6:59:4f:2a:ca:43:4e:57:aa:02:85:06:ad:fd:37:70:c2:
f6:f0:c0:37:5f:32:98:12:cc:dd:ab:73:d7:68:43:c4:2d:42:
5b:33:da:de:bc:c2:d2:2b:ba:21:ff:e7:ff:b3:e6:fc:f5:bf:
8f:92:1c:62:6b:99:5b:33:4d:98:b5:75:30:7b:eb:41:ef:56:
fb:f2:ae:b8:67:27:77:9e:9f:87:8a:46:83:99:f7:2e:dd:8d:
59:c0:97:a3:08:0e:8c:7f:c8:b2:85:67:fb:9a:c9:ff:19:b8:
d1:d1:10:69:40:f3:a2:2c:e7:69:6d:43:0c:f6:e4:75:93:40:
46:9d:12:8f:7a:d6:af:f3:55:b6:fe:73:8b:7d:d5:4b:bb:e1:
cb:e4:18:b3:c3:79:02:d8:ed:b0:b6:91:e9:0e:15:79:9d:06:
e5:e7:24:4c:4f:e7:23:c5:37:8b:2a:ea:6d:32:ec:51:c9:e6:
45:88:9a:71:5e:70:d9:1d:bf:5c:47:ca:b8:b2:4c:27:5b:6b:
31:af:61:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:53 2024 by rpki-client on console-fra.rpki-client.org