Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/UBXqBmYemK7kCW6ehs7eqPWFbwE.roa
File: UBXqBmYemK7kCW6ehs7eqPWFbwE.roa (raw, json)
Hash identifier: jd3meSTWcC/58+UiRF2sRZ8pIm/pJwbp6II5KgiA3Bc=
Subject key identifier: 50:15:EA:06:66:1E:98:AE:E4:09:6E:9E:86:CE:DE:A8:F5:85:6F:01
Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Certificate serial: 0192543407F08E5FBB683309F1A12340B81E
Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/UBXqBmYemK7kCW6ehs7eqPWFbwE.roa
Signing time: Thu 03 Oct 2024 21:05:48 +0000
ROA not before: Thu 03 Oct 2024 21:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207388
IP address blocks: 185.115.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 21:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:54:34:07:f0:8e:5f:bb:68:33:09:f1:a1:23:40:b8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Validity
Not Before: Oct 3 21:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5015ea06661e98aee4096e9e86cedea8f5856f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:60:63:90:36:a7:c3:74:52:4f:c7:1b:5b:
cc:5a:14:3d:ca:5f:a5:70:34:d6:b9:23:48:c2:f8:
92:24:28:c9:b0:29:90:58:40:5a:ce:d3:8c:f4:75:
f7:36:5c:ba:84:cb:2f:1b:9b:7e:d6:c5:d0:62:d1:
c2:24:e6:68:d5:4a:9e:92:e1:a9:07:59:87:f1:05:
8d:d0:9a:8c:77:30:cf:4d:03:9b:c2:72:a4:ed:ac:
79:1e:64:f5:0a:39:e3:73:45:3b:83:c0:02:15:30:
d9:44:2e:38:4d:45:78:6c:7a:0f:20:f6:42:1a:67:
14:d7:77:72:7b:42:3d:cb:a0:8d:56:f7:e4:6f:b3:
75:50:71:c7:60:1d:b1:f4:29:81:81:93:ea:db:ea:
63:1a:56:6c:d1:9d:c2:d3:74:f6:30:be:e0:4c:cd:
20:4e:1b:e6:85:e3:8c:d6:ec:fc:4b:7e:29:34:d4:
c7:b0:27:cf:0a:7e:e0:93:b3:40:ed:5c:a6:40:d7:
1c:82:e1:b7:8d:67:06:8a:02:4c:53:b3:e6:1d:00:
c8:0a:1a:b4:05:dc:1a:c0:6e:39:44:0a:1c:3d:4b:
f8:1e:bc:dd:95:8d:c7:db:39:0e:3c:5a:17:b2:86:
8c:4f:38:ce:20:00:1e:26:02:b2:6d:6f:f2:50:a0:
ba:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:15:EA:06:66:1E:98:AE:E4:09:6E:9E:86:CE:DE:A8:F5:85:6F:01
X509v3 Authority Key Identifier:
keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/UBXqBmYemK7kCW6ehs7eqPWFbwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.162.0/24
Signature Algorithm: sha256WithRSAEncryption
35:78:e9:68:0f:2d:8d:5a:1a:00:51:a5:d7:6e:47:29:bc:b1:
8f:fc:f2:b9:03:2f:8d:af:47:82:76:e0:75:fc:6c:bb:8e:a2:
de:d3:02:e1:cc:c0:31:b3:3e:5f:35:23:be:f5:e3:0b:d4:2d:
28:bf:87:d8:a6:2b:4e:4e:aa:60:97:e4:e7:3a:08:71:54:10:
6d:3d:70:f6:51:c9:fd:e8:18:2d:02:2d:fe:0d:c0:c1:7a:d9:
f7:e2:b9:9c:88:17:c4:86:3d:ca:7c:ec:37:86:cc:73:b7:df:
52:af:67:5b:9a:0d:c9:7c:38:00:e8:b5:5a:c8:2d:b2:7b:bd:
80:8c:41:6f:57:1b:78:5f:28:b2:1c:22:8c:a9:3b:98:0c:81:
c6:c9:74:23:26:d6:f9:52:31:ee:ee:8e:2f:90:e6:ce:64:e1:
c8:f7:5f:c2:cb:60:f8:a2:ad:a4:fe:8f:d0:7c:81:9e:65:72:
9d:9b:40:15:b7:3f:66:00:49:bb:4f:f6:06:28:4b:62:0c:ae:
20:13:be:61:4d:01:14:ad:ee:14:b2:57:b9:3c:85:d5:7e:40:
37:eb:80:49:50:2f:df:b2:c2:56:92:e4:a7:ab:ca:fa:f1:f5:
12:48:7d:b4:21:4a:a9:0f:18:7c:bb:c2:63:e7:e4:84:1b:35:
0d:24:c8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 23:58:51 2024 by rpki-client on console-fra.rpki-client.org