Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ulHwg6Mr1UPkUnXuk_Krrq84NcY.roa
File: ulHwg6Mr1UPkUnXuk_Krrq84NcY.roa (raw, json)
Hash identifier: h9IqzqarnrafkxQughHmAAeAYF6u6LEGcGTX/4x5Ws4=
Subject key identifier: BA:51:F0:83:A3:2B:D5:43:E4:52:75:EE:93:F2:AB:AE:AF:38:35:C6
Certificate issuer: /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial: 01856F393E52E53A6FCAA014C5D22C917A58
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ulHwg6Mr1UPkUnXuk_Krrq84NcY.roa
Signing time: Sun 01 Jan 2023 21:25:00 +0000
ROA not before: Sun 01 Jan 2023 21:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50304
IP address blocks: 86.111.48.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:3e:52:e5:3a:6f:ca:a0:14:c5:d2:2c:91:7a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Validity
Not Before: Jan 1 21:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba51f083a32bd543e45275ee93f2abaeaf3835c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:09:bf:92:d5:5d:26:30:89:25:b2:c9:33:
67:61:9b:d8:f5:e5:fe:1d:94:3c:e2:52:97:3e:8d:
f2:86:1f:55:ac:f5:9d:ae:d5:c7:f7:7b:b2:15:16:
6e:35:58:ad:71:12:a1:2d:c6:13:88:f1:70:e0:d5:
f2:f4:f3:29:a2:90:61:00:72:29:23:b2:80:bb:84:
93:a7:13:dc:69:2f:f4:31:82:2d:1a:52:58:3d:23:
a3:e5:c5:35:2b:63:21:43:3f:11:17:2d:71:a5:86:
40:3e:4c:ad:d9:8a:7d:3b:13:18:8e:4b:1b:ea:53:
d8:b2:d1:0d:eb:c6:ed:93:24:66:eb:8b:00:02:a5:
cd:c5:77:c8:ca:df:bb:19:b7:79:6b:bf:0c:10:d3:
25:fc:8a:46:7f:54:3c:8c:54:c3:aa:c7:58:fc:87:
1e:9e:b0:6b:38:8c:a9:ad:be:88:9b:73:c8:07:78:
e0:31:12:8d:e4:13:34:ab:c9:e7:76:97:cd:32:4f:
6b:6e:59:45:79:51:53:ff:0a:6d:e6:df:73:ce:a3:
1b:b7:73:a6:0b:1d:7f:79:95:a1:5c:81:93:35:fd:
5a:4b:89:a3:b9:b7:f4:28:38:45:e3:73:e2:47:0e:
db:24:93:29:47:2f:12:ec:9b:09:94:64:8f:4b:7c:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:51:F0:83:A3:2B:D5:43:E4:52:75:EE:93:F2:AB:AE:AF:38:35:C6
X509v3 Authority Key Identifier:
keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ulHwg6Mr1UPkUnXuk_Krrq84NcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.48.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:fb:ac:57:12:2a:09:84:b3:bc:66:e3:a3:0c:4b:31:d5:7d:
7b:fe:a6:43:a5:be:fd:a6:5e:77:cb:fb:3e:e1:64:98:dd:27:
4b:df:2d:a2:b6:6c:67:8b:47:6a:bb:0d:5c:02:6c:3f:50:cd:
bd:b0:33:94:40:b0:8c:74:bb:bd:26:0d:f7:a9:12:64:0a:b0:
1e:62:69:04:05:f2:f5:aa:6e:de:35:45:f5:97:c1:70:9c:ee:
b6:6e:f9:b2:90:24:8b:f3:54:63:df:89:76:9f:e5:26:af:25:
1b:cb:9e:c2:bb:a8:ff:e9:a3:72:85:42:eb:4e:eb:2d:d4:ab:
3f:14:e9:f2:b5:d5:7a:77:6c:d6:cb:cc:ea:38:50:ce:9a:15:
3c:af:c6:b9:55:77:9d:fe:17:69:ea:85:bc:96:b1:c6:f1:85:
68:2d:72:43:aa:50:92:01:42:da:7b:38:1f:a1:ff:d6:bd:83:
1c:b5:5f:1a:28:92:6b:9b:c9:0a:ab:bf:f1:d8:8d:b6:80:8a:
b1:7e:14:07:b1:41:f4:9b:17:9a:ea:88:80:7a:4b:72:5b:69:
e0:f4:15:30:47:c6:1c:01:03:01:20:6b:82:e6:49:ee:f2:b8:
00:27:55:55:95:35:45:b8:98:d0:ef:8b:f9:27:fd:ff:ef:d6:
d3:69:f1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:54 2024 by rpki-client on console-ams.rpki-client.org