Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/UMjYv-sk8tGYgkkRb_IPv-FGeEM.roa
File: UMjYv-sk8tGYgkkRb_IPv-FGeEM.roa (raw, json)
Hash identifier: yYx1AHjrN4Uk43D592qEqaTtkMI6McmqIrmrPMVn1hY=
Subject key identifier: 50:C8:D8:BF:EB:24:F2:D1:98:82:49:11:6F:F2:0F:BF:E1:46:78:43
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018946B5E164EAA9E12F70020906D39030D8
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/UMjYv-sk8tGYgkkRb_IPv-FGeEM.roa
Signing time: Tue 11 Jul 2023 20:47:52 +0000
ROA not before: Tue 11 Jul 2023 20:47:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207
IP address blocks: 149.126.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:46:b5:e1:64:ea:a9:e1:2f:70:02:09:06:d3:90:30:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 11 20:47:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50c8d8bfeb24f2d1988249116ff20fbfe1467843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:68:df:35:0d:ee:31:af:b0:81:e0:a5:43:
c6:de:65:0e:d7:70:a8:56:7f:47:db:94:e3:db:be:
4f:47:02:e4:6b:29:4a:61:9f:94:e0:04:73:d0:8e:
bc:bb:61:bd:68:79:fe:2d:a7:83:87:8f:dc:ef:81:
dc:35:23:d0:65:2e:4b:e9:e7:45:4f:02:b7:5c:16:
92:82:9e:42:33:0b:38:60:65:dc:db:32:ec:12:e4:
42:09:ad:b9:4b:f2:0b:cc:53:30:28:f8:72:85:37:
da:1c:d1:4a:73:e2:44:3f:dc:ed:67:da:72:56:f2:
f1:00:05:ae:f2:85:d6:d3:62:e8:d9:07:b3:67:76:
50:52:52:a9:db:ba:e3:8c:14:98:f6:d9:1c:86:ce:
ad:df:8a:27:9a:29:d5:d4:90:b1:10:da:8d:10:23:
d6:80:41:e3:c4:29:46:2d:3a:77:e4:f5:1a:da:14:
76:8a:90:6f:9f:1a:95:57:0b:dd:a6:1b:d3:e5:db:
d7:96:58:73:a7:18:2d:d1:38:8d:b0:62:0b:46:fa:
47:bc:fc:54:e5:0c:d1:79:86:e8:40:37:8d:b8:2b:
76:68:0e:b3:b7:aa:a2:a3:52:40:2c:eb:46:b7:87:
54:ea:07:1c:0f:c6:8f:fd:a8:2a:56:2c:78:56:32:
9f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C8:D8:BF:EB:24:F2:D1:98:82:49:11:6F:F2:0F:BF:E1:46:78:43
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/UMjYv-sk8tGYgkkRb_IPv-FGeEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.240.0/24
Signature Algorithm: sha256WithRSAEncryption
84:f1:41:ac:a4:96:12:5a:e2:41:09:aa:1a:94:75:0d:24:92:
b8:51:03:e3:73:43:43:42:dd:7e:6d:2b:5e:8e:0a:0f:68:40:
06:5f:9b:ac:95:17:01:ac:9b:bc:50:a3:7b:19:02:c2:1b:ce:
86:3a:55:96:cb:6f:8c:67:f8:30:95:04:74:3a:04:99:77:28:
66:fe:47:d8:cc:f3:09:92:78:f0:fc:54:b8:9b:f3:8c:21:ad:
0c:7d:0d:64:3b:da:7a:fc:0f:b2:de:93:76:51:93:a9:ec:6d:
b5:08:03:a2:98:6d:33:61:a4:2c:eb:5a:ca:59:7e:09:fa:a4:
f4:38:33:d7:22:36:42:45:7b:92:c7:9f:55:a0:2f:5b:08:87:
9e:14:9d:93:ae:4c:d3:12:69:62:b7:81:13:04:4c:de:1d:b6:
fb:4b:41:7c:27:ab:35:7d:09:80:68:c1:a1:6b:62:c2:dd:20:
50:4d:16:1b:e6:c1:e7:86:79:4e:b5:e0:b5:25:e0:45:96:a3:
de:bd:75:c6:00:b7:34:29:0a:49:23:15:dd:27:da:9a:29:91:
94:f4:19:f5:1e:33:39:31:3e:a3:41:82:ae:aa:f4:e6:c2:67:
db:2b:1a:ba:1f:95:25:65:33:62:14:e6:de:3e:28:af:b9:b5:
3b:42:29:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:04 2024 by rpki-client on console-ams.rpki-client.org