Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/ukphCBclCy3Ds9pNZitve5zXYgo.roa
File: ukphCBclCy3Ds9pNZitve5zXYgo.roa (raw, json)
Hash identifier: cV9P5t8DyHDrBQvikNkFxo26gk4349v0jbbIRAwhJ7g=
Subject key identifier: BA:4A:61:08:17:25:0B:2D:C3:B3:DA:4D:66:2B:6F:7B:9C:D7:62:0A
Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial: 01856FCBC36958CB8E65B83CD8D1A60B3A05
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/ukphCBclCy3Ds9pNZitve5zXYgo.roa
Signing time: Mon 02 Jan 2023 00:05:02 +0000
ROA not before: Mon 02 Jan 2023 00:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200924
IP address blocks: 2001:678:c9c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:c3:69:58:cb:8e:65:b8:3c:d8:d1:a6:0b:3a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Validity
Not Before: Jan 2 00:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba4a610817250b2dc3b3da4d662b6f7b9cd7620a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fa:d4:a5:22:c7:8c:83:68:c5:a7:a7:fd:33:
40:fb:f8:a5:6a:8e:e7:ae:9f:a1:c8:cc:f9:77:c4:
9d:63:e5:0a:41:2d:fc:a9:f5:28:e7:80:04:a4:9c:
9d:f0:d2:6d:a7:d8:06:50:82:72:24:54:cb:96:cd:
1e:9c:4c:ea:14:b5:be:ca:8e:60:24:de:26:f8:80:
d7:cc:e2:79:22:7b:ea:8f:0e:03:4f:3f:44:07:99:
4b:8a:88:23:ee:31:c9:47:2c:44:0c:19:7e:e3:82:
6f:b9:ff:c4:a0:a2:39:bf:f1:3a:66:20:c0:e6:46:
04:93:9a:d5:77:b2:7f:d0:1d:07:83:5e:cb:c2:76:
23:c1:03:3e:64:5f:74:42:2b:2d:18:ed:7f:df:19:
de:60:8b:06:3f:92:a3:7c:8e:58:59:6e:5d:5a:b3:
46:52:f3:b8:17:be:99:e0:7a:fe:61:69:e9:24:a2:
e8:ff:d5:44:35:f6:3d:58:fa:b1:ee:8c:d1:dd:91:
78:c6:20:05:48:8b:8b:f1:80:cb:49:dd:ef:ba:46:
46:01:80:a9:bf:ea:f2:07:3d:35:f1:22:1a:b7:f1:
e5:59:91:01:97:bf:bc:e3:56:d3:66:be:51:a7:a3:
a6:b0:54:db:89:84:52:75:1d:74:28:c4:c0:13:e3:
67:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4A:61:08:17:25:0B:2D:C3:B3:DA:4D:66:2B:6F:7B:9C:D7:62:0A
X509v3 Authority Key Identifier:
keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/ukphCBclCy3Ds9pNZitve5zXYgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c9c::/48
Signature Algorithm: sha256WithRSAEncryption
72:ba:8c:69:3c:67:d2:88:07:e2:ab:66:b8:bd:c8:77:e7:d5:
e6:2b:6b:ba:11:d0:8d:5c:42:a6:c2:74:c7:b7:13:3e:c7:20:
64:ab:38:99:71:0b:c6:b1:e5:6f:e2:d7:30:33:b7:9b:51:85:
f5:9b:c4:b3:a0:90:4f:e7:e1:8b:3e:4e:ca:8f:c6:0a:0e:66:
86:ba:dc:17:ed:35:df:e4:de:ea:0e:f3:e2:46:16:5c:d5:63:
58:56:fa:de:25:57:bd:3e:34:5e:b0:6a:ca:e8:7e:ff:7d:0a:
73:d8:cc:ec:99:e6:dc:4b:d7:79:77:b1:8f:cc:11:f0:69:23:
05:34:0c:50:42:99:9d:ce:e4:b6:84:fd:1c:5f:21:85:26:1a:
cf:20:b5:a9:f6:d1:34:ce:88:26:0a:a1:2c:3d:df:bb:e2:e5:
98:4e:7c:03:3c:ce:42:0f:eb:5f:7b:b0:b4:db:81:96:bd:6f:
d6:b1:35:d1:09:08:2a:8c:99:5f:bc:ec:3b:d0:61:b5:6e:28:
8f:53:59:b8:01:45:5c:e1:e2:2a:59:94:7b:42:b1:7b:a0:29:
8f:63:4f:99:7e:6f:f3:87:10:c3:ea:8c:71:b7:14:ed:3c:1e:
83:8e:10:30:26:64:97:8d:ad:1e:58:fa:06:d2:fd:d8:27:90:
6d:d8:58:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:35 2024 by rpki-client on console-ams.rpki-client.org