Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/U981xYG6_DZjalx22jDzdPGFTkA.roa
File: U981xYG6_DZjalx22jDzdPGFTkA.roa (raw, json)
Hash identifier: wjIc18oyVYPuOJSIaAcr6/DB2Stb9giKWG/K0ZRVwaA=
Subject key identifier: 53:DF:35:C5:81:BA:FC:36:63:6A:5C:76:DA:30:F3:74:F1:85:4E:40
Certificate issuer: /CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
Certificate serial: 0189DE635347E544C6B806890ECD39FDC074
Authority key identifier: E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/U981xYG6_DZjalx22jDzdPGFTkA.roa
Signing time: Thu 10 Aug 2023 07:39:58 +0000
ROA not before: Thu 10 Aug 2023 07:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 194.53.214.0/23 maxlen: 24
194.53.128.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:63:53:47:e5:44:c6:b8:06:89:0e:cd:39:fd:c0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
Validity
Not Before: Aug 10 07:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53df35c581bafc36636a5c76da30f374f1854e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:2f:3c:b4:60:36:63:65:7f:aa:e2:7e:50:
c7:c9:e8:6f:59:7e:cd:80:7a:dc:87:6f:37:f5:63:
0d:66:dc:e6:ae:14:a1:0a:42:69:60:dd:05:49:a7:
e9:53:9d:86:c8:19:0e:f2:b2:f5:40:36:23:97:f5:
b9:aa:7b:08:7d:ca:65:5c:44:d0:b2:fc:66:75:59:
2d:0a:4a:24:1f:27:ce:4b:78:39:f3:4c:91:4f:e9:
a4:d7:90:f8:1f:f3:8b:55:96:89:d5:0e:f6:47:13:
5c:71:38:99:16:e6:e3:71:91:81:66:a8:ec:e9:c9:
26:9a:30:21:e9:69:a3:9a:57:f0:b3:6e:37:03:44:
28:11:74:0b:2e:f6:fb:ea:86:06:77:0b:02:92:ce:
2c:f9:8e:7e:54:ad:3b:48:05:59:9c:2e:62:16:d2:
b7:2a:34:c4:14:29:64:58:f5:6b:6f:1b:48:0f:21:
d2:ee:60:97:f3:ec:c4:31:f4:bb:45:af:fb:ad:99:
0f:18:8b:e7:69:61:18:5e:64:c3:34:f6:a6:9b:28:
1f:03:c6:42:b9:ae:78:e0:15:0d:c0:ad:cf:e8:07:
bd:e1:30:1a:f0:88:11:b5:12:cb:71:4f:64:3e:7a:
f8:fb:b5:b0:c9:0c:d0:cc:da:39:6c:42:74:ad:d5:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DF:35:C5:81:BA:FC:36:63:6A:5C:76:DA:30:F3:74:F1:85:4E:40
X509v3 Authority Key Identifier:
keyid:E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/U981xYG6_DZjalx22jDzdPGFTkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.128.0/23
194.53.214.0/23
Signature Algorithm: sha256WithRSAEncryption
23:3a:a9:e3:81:78:fd:bb:3b:f8:36:fd:ed:8a:72:03:75:5f:
1a:c6:4e:7c:b6:86:34:92:44:f5:ee:c6:cf:d0:7d:0e:04:46:
bc:61:30:b8:19:21:8b:80:5b:a5:8e:13:a9:87:0b:a4:9f:b7:
d0:ce:3c:07:4c:fe:80:13:b8:24:15:66:9a:16:54:cb:c9:77:
52:2a:8d:eb:41:7d:51:51:64:ea:e7:e8:83:73:af:94:a6:0b:
03:b0:20:a0:40:66:84:00:9a:aa:5d:e8:21:62:00:e8:96:1f:
2a:d2:50:56:26:b2:14:49:27:88:9b:b6:fa:28:e7:c9:5d:13:
3c:b0:c0:8b:b0:4e:93:a5:5a:ea:40:74:8f:05:81:db:50:57:
7b:d9:cb:93:6a:fd:5c:02:00:5d:c3:f6:4e:40:7f:79:25:54:
07:89:c6:da:3e:0c:fb:95:58:4f:cd:c2:92:0f:f6:38:b0:56:
9b:df:57:2a:28:eb:f7:97:13:dc:3a:2a:10:28:35:f7:d2:41:
c7:d6:32:08:66:a4:ab:ba:c0:b7:33:cb:7b:ee:d6:45:24:bb:
3c:11:aa:a9:56:24:d1:5a:e0:23:28:c3:6a:2a:1e:d3:16:c7:
43:08:6a:c4:df:07:76:94:b5:6f:9c:85:fa:8e:89:2b:f1:05:
9d:04:3d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:27 2024 by rpki-client on console-ams.rpki-client.org