Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/upmxBODOkWjZdXAZqhvMf7tYn0I.roa
File: upmxBODOkWjZdXAZqhvMf7tYn0I.roa (raw, json)
Hash identifier: RjqSa9zGZPLdWV3uCTyjgBoJXeuz01iqRWiypza4vAw=
Subject key identifier: BA:99:B1:04:E0:CE:91:68:D9:75:70:19:AA:1B:CC:7F:BB:58:9F:42
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0188C4609934BA378F3738D8D9E802871E2C
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/upmxBODOkWjZdXAZqhvMf7tYn0I.roa
Signing time: Fri 16 Jun 2023 13:24:04 +0000
ROA not before: Fri 16 Jun 2023 13:24:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56915
IP address blocks: 91.229.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:60:99:34:ba:37:8f:37:38:d8:d9:e8:02:87:1e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jun 16 13:24:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba99b104e0ce9168d9757019aa1bcc7fbb589f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0b:76:7f:eb:91:1e:f8:8f:c7:cd:c5:9b:e5:
29:c4:0b:8e:fd:77:07:c6:27:51:07:9e:61:72:9a:
03:74:1c:1b:c4:75:95:90:19:8e:14:73:5a:bb:0c:
e2:8b:d0:ae:79:d7:27:45:26:25:0b:ad:35:17:35:
bd:cc:fb:ba:df:ca:7c:0e:c2:0a:36:9f:92:1d:5b:
8e:3d:da:e9:14:56:33:4c:90:dc:50:1c:1d:aa:fe:
c5:a9:17:12:1a:0b:30:5d:5c:4d:d0:07:ae:58:bd:
67:ef:ae:1a:ad:74:28:a5:ed:17:aa:8a:db:56:19:
ca:9d:c7:69:34:82:59:fd:2a:ab:b7:73:7b:1e:fc:
86:b8:1c:66:38:c2:81:1f:8f:7b:f4:a4:64:9d:51:
49:5a:33:40:cb:50:d5:b9:b2:da:b2:46:21:f5:d5:
2b:2a:07:0e:6b:02:96:36:24:42:bb:f4:c0:77:61:
4f:9e:a4:54:78:f0:4a:01:a7:29:ca:c7:93:29:93:
49:76:4f:28:6e:af:d1:cb:da:2d:ad:d4:9e:42:02:
64:db:6b:df:af:2b:02:a3:86:e9:08:5f:a3:81:96:
83:0e:5c:12:f3:29:b9:d8:da:27:a2:06:7a:56:22:
b8:02:84:b4:c3:37:3f:fb:02:e1:ce:00:46:7b:b5:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:99:B1:04:E0:CE:91:68:D9:75:70:19:AA:1B:CC:7F:BB:58:9F:42
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/upmxBODOkWjZdXAZqhvMf7tYn0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.119.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e0:06:cb:13:a3:8e:38:ec:44:47:a4:40:30:90:f9:52:52:
e2:1c:c6:35:46:f6:7f:ec:c3:d5:8e:ca:e5:d4:97:df:0d:aa:
5b:c8:4f:a1:83:f0:95:82:fe:54:6e:b1:a1:c1:80:6d:6e:3c:
f9:2a:ca:b9:9d:ad:36:87:83:89:0b:b3:a1:c0:68:c7:0d:74:
a5:68:84:33:0c:cd:00:0e:73:b7:5c:6b:b3:ae:40:68:a4:54:
c5:76:03:51:c0:85:7f:37:fa:fc:d2:f9:95:ef:97:88:33:51:
b1:e8:0d:39:1a:df:75:c3:1e:db:03:d6:6e:c1:de:a9:7b:ba:
82:41:0d:98:e8:d0:68:5e:6a:5e:06:cd:e5:67:59:10:dd:4b:
ff:3c:ea:38:68:b1:7a:22:df:18:ea:61:d8:0c:3c:9b:52:27:
83:e3:94:ef:3a:54:fa:4c:af:ae:d1:5c:b8:a7:eb:c3:37:72:
f9:d5:ba:f8:0d:84:84:bf:ee:ce:02:5d:13:22:9e:2b:94:f7:
0c:b6:e3:ba:fb:95:14:70:68:0b:dc:02:d4:7a:34:c1:e6:84:
ea:c6:12:9d:ec:81:29:20:1f:0f:c0:a5:96:60:40:80:88:67:
e6:09:cf:f9:2e:ab:9e:24:90:c9:53:31:f8:15:0e:a0:c0:4b:
ef:af:16:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org