Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/UbyFLFeGiE-OMxGTx2sTWT4Aq6I.roa
File: UbyFLFeGiE-OMxGTx2sTWT4Aq6I.roa (raw, json)
Hash identifier: 4diNbgnesMulISdA5XnYahJrDPvt/LMYOqYJPzhOD3s=
Subject key identifier: 51:BC:85:2C:57:86:88:4F:8E:33:11:93:C7:6B:13:59:3E:00:AB:A2
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 01856FF965498B3693C205E0C4144790AF0D
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/UbyFLFeGiE-OMxGTx2sTWT4Aq6I.roa
Signing time: Mon 02 Jan 2023 00:54:53 +0000
ROA not before: Mon 02 Jan 2023 00:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60706
IP address blocks: 109.104.252.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:65:49:8b:36:93:c2:05:e0:c4:14:47:90:af:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Jan 2 00:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51bc852c5786884f8e331193c76b13593e00aba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:42:94:8d:52:8f:a3:52:b9:a2:f4:b5:20:64:
a4:c3:d9:8d:51:ba:92:c4:80:b9:78:9a:63:61:75:
27:50:72:75:53:f6:6f:76:03:64:ae:fd:9d:a0:d8:
53:8e:01:42:51:1a:f9:57:dc:f1:7c:c4:ef:72:f8:
d0:aa:3b:a9:d4:fc:42:13:67:ac:68:8c:2c:f9:54:
6f:c9:66:49:33:98:2e:c6:b8:57:77:e9:3a:e7:97:
c1:18:35:f0:95:c1:76:0b:b6:a0:b0:91:f9:83:74:
8b:2f:8b:18:0d:17:ad:ca:f0:ed:62:d3:e6:20:ce:
f5:50:df:7f:ea:e9:4d:fd:68:87:c1:55:8d:47:3b:
82:11:8c:10:25:f6:84:18:f4:d2:c1:59:2e:a2:75:
3e:cf:d0:d4:f9:a9:d4:3e:27:36:e6:ac:3b:eb:78:
b1:15:bb:6f:1c:bb:f2:7b:7e:62:42:77:af:36:19:
58:88:ed:a7:ea:df:07:f6:8b:7b:69:2c:ab:a2:28:
19:65:ca:48:0d:b5:9e:59:d9:d1:30:bd:26:ce:b1:
26:05:2c:c8:88:67:6e:70:fd:93:24:36:77:58:fb:
c1:ad:1e:ce:4e:3e:3c:18:7b:4b:20:f0:bd:8d:c5:
87:b8:7b:e2:7e:26:ce:74:32:c5:92:d5:78:4e:59:
70:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BC:85:2C:57:86:88:4F:8E:33:11:93:C7:6B:13:59:3E:00:AB:A2
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/UbyFLFeGiE-OMxGTx2sTWT4Aq6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.104.252.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:97:fb:1f:86:7b:2d:01:a1:95:2f:4c:06:73:53:58:0f:56:
79:18:8a:a8:e4:3e:32:74:95:5c:6f:80:a5:7a:42:28:c5:4a:
a8:f9:22:39:52:77:f1:50:8f:6d:00:54:13:d4:54:85:17:76:
39:ef:77:06:25:bf:e0:4b:54:13:07:58:65:ca:07:2e:4b:a0:
74:8f:2f:6a:e1:40:33:b6:db:20:b0:65:37:b5:8e:46:62:93:
18:4d:1b:c3:2c:96:b4:4b:82:46:cd:97:7b:e4:11:21:81:eb:
dd:8b:38:fc:3c:d2:d8:c5:dc:50:62:a3:54:8c:aa:8d:47:e4:
5e:c7:17:0d:3f:6f:26:ca:6b:da:65:ad:94:7b:3e:fc:42:67:
b1:d9:7b:0a:f6:35:c8:db:5d:10:ab:06:6a:d8:82:01:a7:ba:
98:28:01:cc:0d:f2:3d:e7:ea:93:2c:dc:fc:7d:0e:6e:78:21:
fc:c0:07:f8:a5:72:ef:fa:b0:a5:92:b3:5a:1a:63:7a:c9:9b:
38:6d:41:45:88:85:40:09:14:29:1c:56:98:33:05:5c:99:05:
18:84:99:1a:d6:4f:63:9b:14:c3:43:6d:71:bd:d7:ca:63:3e:
b7:3a:52:2a:30:cd:41:a7:db:b2:9c:76:9d:95:d1:06:cf:9f:
d1:e0:f8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:05 2024 by rpki-client on console.sobornost.net