Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/UTZeakFglSCxJdpQlp4QDdR7JGo.roa
File: UTZeakFglSCxJdpQlp4QDdR7JGo.roa (raw, json)
Hash identifier: AtHY9MulSiDfMQZX4MUMgPVmiGBW9e/XGcjVwtpY6+o=
Subject key identifier: 51:36:5E:6A:41:60:95:20:B1:25:DA:50:96:9E:10:0D:D4:7B:24:6A
Certificate issuer: /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial: 01856F02292CB073FB96FB4A58FBBD5A2536
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/UTZeakFglSCxJdpQlp4QDdR7JGo.roa
Signing time: Sun 01 Jan 2023 20:24:50 +0000
ROA not before: Sun 01 Jan 2023 20:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60654
IP address blocks: 195.5.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:29:2c:b0:73:fb:96:fb:4a:58:fb:bd:5a:25:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Validity
Not Before: Jan 1 20:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51365e6a41609520b125da50969e100dd47b246a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:ec:8f:5a:6d:98:89:5c:9a:67:db:d1:88:
3c:25:50:c9:2e:c3:a3:53:28:ad:2d:86:0d:5f:1d:
e4:ff:55:17:c5:8f:3c:b2:4f:c7:b6:f2:70:f9:f5:
b3:10:0b:77:27:3e:c8:18:c7:6d:9b:9d:00:a4:f8:
3b:5d:83:92:de:cb:86:ff:db:7c:2a:0d:b8:06:67:
52:28:02:f0:70:86:fd:b4:29:16:2c:c7:b6:11:23:
f4:11:81:84:c5:d6:fb:d3:20:cf:a3:82:c7:28:a5:
2a:c4:52:64:ba:7c:a7:1e:6b:b8:2b:80:b9:12:3b:
34:e7:70:64:f4:d3:49:93:47:52:69:18:c0:c4:04:
2c:71:c5:a7:0b:64:a4:1e:d4:cf:3f:04:b2:1c:61:
4e:84:08:dd:a0:aa:bd:28:e9:48:5a:35:e7:47:c2:
30:06:c2:01:a2:ff:75:3c:80:f2:3b:bb:8b:59:e4:
41:0b:2f:cb:fc:96:3e:88:8f:d3:fb:6c:d2:d0:d6:
eb:11:07:d8:82:e1:3b:2f:17:d1:c2:4e:1f:7f:4f:
bf:19:cd:72:3b:3f:37:87:fb:80:40:f3:cf:7c:e5:
dd:58:65:99:7c:04:51:19:65:12:5a:98:b2:cb:58:
4d:5c:c1:6e:8f:d3:c4:63:d0:75:d1:49:f0:de:b3:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:36:5E:6A:41:60:95:20:B1:25:DA:50:96:9E:10:0D:D4:7B:24:6A
X509v3 Authority Key Identifier:
keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/UTZeakFglSCxJdpQlp4QDdR7JGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.189.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a4:e8:14:fe:c0:87:cc:6b:35:de:e6:fb:1c:13:ac:4d:a3:
ff:bf:ec:ee:86:29:02:f7:c9:bd:90:0d:ee:04:49:89:cc:98:
eb:63:9a:70:13:c4:34:98:33:4d:4b:f1:69:f1:36:c0:7d:7b:
6d:3c:f3:a5:85:f2:c3:5b:e8:89:fa:06:4f:e5:b0:8f:60:a4:
bc:5c:3b:e8:53:f3:62:57:dd:a6:b0:b6:63:e1:09:d2:28:74:
15:23:9b:6c:57:57:0b:f7:37:49:d6:48:db:a0:b8:44:04:93:
78:3e:f6:20:14:f7:00:29:aa:31:d6:69:29:e2:f6:b5:1b:f9:
30:6a:31:9b:fe:56:52:6b:bf:e3:fd:c7:7a:42:f5:7d:6e:1e:
67:9c:e9:7a:f9:18:c4:02:3e:43:66:a8:0e:1b:72:9b:7b:0e:
47:8e:58:0b:0d:8e:99:7d:e7:0d:7d:ce:99:94:cf:30:06:e9:
41:09:be:a0:a3:8a:a5:b7:29:61:be:23:ad:bb:5a:24:55:87:
a6:b4:5e:53:38:48:36:ce:88:e9:46:78:85:c1:74:05:a9:46:
c3:be:c8:1b:b8:78:14:9e:f3:57:60:ba:b6:f3:33:8f:03:12:
ae:08:95:f1:0a:d9:4e:fe:4c:d4:9d:33:a2:02:1c:89:bd:7e:
fb:6e:dd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:54 2024 by rpki-client on console-fra.rpki-client.org