Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/UZO-hHoCnW0EVZf7hZaq8DPt5hA.roa
File: UZO-hHoCnW0EVZf7hZaq8DPt5hA.roa (raw, json)
Hash identifier: c5LRtY8B5njTlpLQYWUbvydV4cfzgW33YosIrlvTbRU=
Subject key identifier: 51:93:BE:84:7A:02:9D:6D:04:55:97:FB:85:96:AA:F0:33:ED:E6:10
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 01856F9DF5B814D36A61E812DC9AED6AD977
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/UZO-hHoCnW0EVZf7hZaq8DPt5hA.roa
Signing time: Sun 01 Jan 2023 23:15:01 +0000
ROA not before: Sun 01 Jan 2023 23:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1213
IP address blocks: 136.206.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:f5:b8:14:d3:6a:61:e8:12:dc:9a:ed:6a:d9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Jan 1 23:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5193be847a029d6d045597fb8596aaf033ede610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:1d:b9:39:37:6c:c4:30:7b:0d:20:4f:3a:
06:be:94:a9:73:a3:37:a2:38:d2:5b:bc:a9:ea:62:
fd:88:5b:cc:24:94:e6:9c:e5:3e:d6:5e:a0:69:da:
6d:50:38:1f:da:3f:9a:31:a2:11:8e:5f:37:21:72:
95:ca:18:86:fe:ea:62:d4:0e:dc:a3:93:30:e2:a1:
d2:56:dc:19:eb:e6:05:f4:02:6f:2a:81:0e:f6:55:
fe:98:99:ed:5f:8c:ad:ec:f4:1f:64:d4:2f:85:b2:
2d:3e:cc:cb:eb:db:7e:e6:f7:48:c1:26:1c:6b:f2:
34:0f:ab:34:7a:73:0b:76:02:29:33:ce:f2:bb:2f:
ae:21:f2:b6:3f:1f:8b:67:03:b2:af:13:1a:e5:4e:
60:da:43:81:b0:00:f3:23:21:ac:0a:ed:04:8a:45:
33:62:9d:5f:4f:89:19:db:b9:33:2a:1a:1d:a3:19:
9d:23:15:d6:6e:33:9f:54:03:15:5f:4b:ce:66:35:
af:7e:44:49:16:a3:b1:df:df:16:f7:20:51:9b:cc:
a7:73:95:06:bb:f0:a3:22:6e:38:2f:59:1a:68:b4:
4e:16:6a:04:9f:c0:5d:ab:62:9a:35:c3:62:2c:3a:
a1:dc:47:09:20:25:fc:d2:5b:44:d5:4a:58:26:e6:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:93:BE:84:7A:02:9D:6D:04:55:97:FB:85:96:AA:F0:33:ED:E6:10
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/UZO-hHoCnW0EVZf7hZaq8DPt5hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.206.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b9:27:15:ef:a2:4a:21:5d:59:55:bd:6d:59:5d:6b:50:c3:01:
a1:88:a5:88:b1:90:2a:87:39:d9:53:2f:b1:ad:c3:af:66:f6:
d2:85:f1:fd:de:1a:94:15:0e:f2:d0:3d:79:ca:61:af:eb:26:
96:a7:b1:c3:a7:38:82:ea:12:b7:ac:2b:19:2f:2f:c4:15:37:
97:db:1d:4b:39:15:8a:b5:82:96:4e:0d:eb:26:89:f5:51:cd:
46:5a:7a:65:c1:e4:f7:39:5d:6f:44:4f:4e:0d:f5:7d:d2:a8:
90:ea:3f:31:cd:12:bb:42:05:39:d0:5d:d2:b2:78:04:9f:86:
42:21:a4:ce:37:4c:a3:a5:9c:6e:bf:08:b4:03:40:64:37:0a:
a3:c1:c4:1b:22:cc:04:7c:35:30:fe:92:e5:5f:7d:75:18:72:
00:28:ed:82:ee:98:0d:23:1a:9b:bf:43:8d:bb:5a:42:4b:a9:
27:39:10:95:dd:29:2a:85:1c:52:64:0b:fe:03:cb:02:59:91:
3f:eb:a8:df:1c:c9:eb:ae:b2:bb:f9:86:cc:ae:61:cc:a6:e1:
f7:ad:79:f1:62:f6:51:9a:19:4f:dc:4d:c9:38:a3:2b:a7:2e:
33:a8:ab:42:8f:e0:a2:fc:ac:27:7f:50:73:7d:c5:44:c0:bc:
cf:5d:b7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:26 2024 by rpki-client on console.sobornost.net