Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/uHZGLQZgkD-L8ZLnMLCEZuD6m_8.roa
File: uHZGLQZgkD-L8ZLnMLCEZuD6m_8.roa (raw, json)
Hash identifier: 0YSvWDgvo3jzMmRvvyd9QilRe0I9LC93eicFkanFufg=
Subject key identifier: B8:76:46:2D:06:60:90:3F:8B:F1:92:E7:30:B0:84:66:E0:FA:9B:FF
Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial: 01856C0106BB299DBFDA81164A3B0776AA83
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/uHZGLQZgkD-L8ZLnMLCEZuD6m_8.roa
Signing time: Sun 01 Jan 2023 06:24:44 +0000
ROA not before: Sun 01 Jan 2023 06:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24631
IP address blocks: 185.229.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:06:bb:29:9d:bf:da:81:16:4a:3b:07:76:aa:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Validity
Not Before: Jan 1 06:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b876462d0660903f8bf192e730b08466e0fa9bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:90:c7:75:b6:3f:f7:df:19:e6:4f:4d:e8:32:
44:c4:f8:38:fe:ac:ea:d0:18:66:b3:2e:f4:56:c2:
0b:69:83:06:ff:c0:1d:83:51:3f:a3:40:82:cc:0e:
6c:0e:d0:a6:92:7e:a6:4f:5d:12:a0:3a:ed:3a:d0:
d0:cf:30:de:25:23:27:47:89:f9:fe:19:1d:fa:fb:
14:fd:1d:73:d7:c9:41:6b:d7:fc:e3:b1:a8:49:56:
62:b4:1c:e5:8b:11:1d:d2:e5:c8:71:23:1e:fe:3e:
0d:1e:a7:1d:e2:86:af:cc:25:7b:5c:49:20:c4:86:
35:0b:a3:96:29:cb:9b:18:93:38:db:b2:1b:8e:e9:
6f:b3:d6:8d:41:bc:59:64:76:c8:23:85:2b:97:4c:
29:ed:ba:b7:0d:95:e9:cd:6e:2f:08:a0:87:ec:0b:
9f:98:49:a5:46:af:6d:0c:fc:ec:5b:ad:92:37:65:
9c:28:4d:f3:6a:31:7e:45:24:cb:71:64:18:a7:46:
d8:1c:a2:8e:62:8f:a5:aa:0b:88:f6:ea:96:81:f6:
f5:e5:51:e4:70:63:11:d9:b6:6f:75:00:fa:54:1d:
c1:90:74:af:87:e7:71:27:67:0e:d2:b8:d1:14:f9:
5d:0f:63:d2:cb:a4:e1:33:83:09:e1:3d:cc:50:f6:
fa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:76:46:2D:06:60:90:3F:8B:F1:92:E7:30:B0:84:66:E0:FA:9B:FF
X509v3 Authority Key Identifier:
keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/uHZGLQZgkD-L8ZLnMLCEZuD6m_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.29.0/24
Signature Algorithm: sha256WithRSAEncryption
58:4b:d1:60:fa:c1:97:52:3b:a9:20:4a:eb:ff:74:0f:11:4a:
f5:8a:2d:2d:7f:be:72:66:ed:b1:84:70:2b:0a:d1:5e:79:70:
56:bb:82:73:02:fe:53:95:26:95:ad:8b:e0:9a:24:03:63:9c:
90:c3:c4:7e:09:ff:a8:1f:48:a0:e2:aa:be:8f:28:2a:f7:53:
86:5a:52:de:ed:79:48:81:b9:b7:1b:66:44:a8:97:ad:b2:14:
b4:93:e7:69:73:55:4c:67:39:a4:a3:4a:70:30:7c:6d:f5:5f:
0e:41:d9:57:4c:43:e5:40:b8:50:ee:53:82:80:7a:62:a0:ba:
8a:91:6a:3e:66:03:ec:4c:43:2c:2f:3e:a5:a2:ad:2f:37:dd:
b8:c2:db:08:80:a6:8e:70:7b:35:f5:db:df:1e:f3:f6:4c:4c:
cc:24:96:32:d8:07:dd:9d:0c:17:eb:3e:f8:12:3e:42:65:77:
d0:de:52:30:27:12:c4:5a:66:5f:b9:0b:c5:de:10:93:00:ec:
a2:51:68:39:22:0f:11:bd:9f:6b:a8:68:e7:e0:7c:21:6f:00:
d7:29:37:4a:44:ac:02:84:41:f2:e9:1e:60:ad:17:01:4e:e9:
3f:c9:a6:c6:cf:fa:49:40:90:27:f4:48:43:cd:16:85:ab:69:
63:50:c1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:01 2024 by rpki-client on console-fra.rpki-client.org