Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/Uww9hOvAho8xZmUefD3WLJXCYuw.roa
File: Uww9hOvAho8xZmUefD3WLJXCYuw.roa (raw, json)
Hash identifier: aGkJE3anK+0EIQ7wT8orPJ7a+QNq7pw/njWW67fUP8o=
Subject key identifier: 53:0C:3D:84:EB:C0:86:8F:31:66:65:1E:7C:3D:D6:2C:95:C2:62:EC
Certificate issuer: /CN=e40b9ed33e8a343296829e8fa4a9aba88a0d93d3
Certificate serial: 01856E2F98F49E3567468C8C06B14F80BE03
Authority key identifier: E4:0B:9E:D3:3E:8A:34:32:96:82:9E:8F:A4:A9:AB:A8:8A:0D:93:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Aue0z6KNDKWgp6PpKmrqIoNk9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/Uww9hOvAho8xZmUefD3WLJXCYuw.roa
Signing time: Sun 01 Jan 2023 16:34:51 +0000
ROA not before: Sun 01 Jan 2023 16:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12414
IP address blocks: 91.212.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:98:f4:9e:35:67:46:8c:8c:06:b1:4f:80:be:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e40b9ed33e8a343296829e8fa4a9aba88a0d93d3
Validity
Not Before: Jan 1 16:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=530c3d84ebc0868f3166651e7c3dd62c95c262ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ad:80:50:80:24:8f:b2:87:eb:95:17:b2:e8:
d7:54:8a:b6:dd:c5:f0:5e:f4:fb:67:24:47:6d:d3:
f0:9b:df:40:09:02:0a:fa:24:e2:ff:2e:7c:f7:69:
ce:63:01:5c:d5:a4:01:b4:58:53:ec:ee:64:b8:83:
c6:1a:26:4c:cf:df:ba:ad:0e:12:16:fa:12:7d:88:
5b:37:70:47:16:10:c1:f4:68:0c:ce:00:4a:80:08:
f8:74:cd:20:0d:05:72:a1:7e:60:6c:ad:59:ac:06:
1a:a1:b4:37:0c:4f:9c:32:16:a9:d5:bd:6b:25:b1:
9f:ec:b3:5b:3e:83:7f:64:df:dd:96:83:0f:ac:b7:
fb:f3:9d:88:a6:c2:fe:36:97:32:2f:c8:a0:76:5a:
52:4f:6e:42:e5:4b:72:50:29:ed:20:21:30:23:65:
aa:22:7a:15:6f:ce:5c:de:ce:7d:59:02:3d:77:71:
ed:95:a3:4c:1b:c6:28:e3:15:e2:32:46:2a:22:39:
27:66:35:81:0a:93:ec:fe:85:a3:bf:ce:2a:05:29:
25:64:3e:61:df:5c:99:02:cf:3f:99:f0:22:23:0b:
f6:03:08:e8:8c:9d:54:33:12:0f:c5:86:c6:c1:83:
b9:71:dc:e5:2c:5c:9a:5b:03:c1:e1:de:2c:23:01:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0C:3D:84:EB:C0:86:8F:31:66:65:1E:7C:3D:D6:2C:95:C2:62:EC
X509v3 Authority Key Identifier:
keyid:E4:0B:9E:D3:3E:8A:34:32:96:82:9E:8F:A4:A9:AB:A8:8A:0D:93:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Aue0z6KNDKWgp6PpKmrqIoNk9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/Uww9hOvAho8xZmUefD3WLJXCYuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/5Aue0z6KNDKWgp6PpKmrqIoNk9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.184.0/24
Signature Algorithm: sha256WithRSAEncryption
19:42:0b:42:8d:b5:89:b4:65:7e:49:5a:94:af:9c:c4:4b:fd:
8d:e7:ce:66:26:5b:b1:0a:2f:33:47:44:08:25:0c:57:08:43:
86:c3:cc:3e:7a:17:a3:d7:c5:e1:4e:40:f9:8f:34:a8:d0:f9:
2f:7a:37:35:6e:f1:8a:d4:d4:ad:b2:60:78:74:a7:8b:50:e2:
3b:64:9d:1f:4b:23:87:04:16:a6:5c:dc:17:f0:af:0e:98:2f:
4a:ff:00:e7:84:47:62:fc:5d:79:6d:c4:8a:54:10:60:00:06:
1b:4c:01:ff:f3:d2:ba:44:15:b3:b8:68:80:91:6a:8c:1e:73:
8e:2a:0d:50:19:16:b4:f4:bc:6d:24:be:1e:cf:6a:3a:e6:72:
d7:27:9e:1d:8e:35:f1:1a:1e:e7:75:24:2f:9f:1a:bc:6f:54:
75:50:a9:50:20:e6:a1:4b:0b:de:cd:94:2f:ac:32:b9:bf:12:
ca:f7:7e:d1:c3:61:4d:59:9f:e3:e0:ba:f0:61:16:c7:a9:4e:
5b:11:e0:e2:93:30:23:af:a2:02:b0:fb:d3:2d:e8:ca:74:02:
1a:03:86:ba:52:c0:49:21:05:bd:1a:bf:99:a7:61:28:ad:d3:
1f:4a:1f:e2:45:43:f4:83:e3:bd:b2:3f:58:aa:bf:a5:d7:39:
0f:a5:c4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:57 2024 by rpki-client on console-fra.rpki-client.org