Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/uwGekRB6MosaDZK-DkBWBl_Ao-E.roa
File: uwGekRB6MosaDZK-DkBWBl_Ao-E.roa (raw, json)
Hash identifier: GKqOeQ/nBICcjeBFC3v++p/tW6SteaFj7Gddb3dluDI=
Subject key identifier: BB:01:9E:91:10:7A:32:8B:1A:0D:92:BE:0E:40:56:06:5F:C0:A3:E1
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 018EBDE73F259182BE3B5D0D835053DAE0DA
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/uwGekRB6MosaDZK-DkBWBl_Ao-E.roa
Signing time: Mon 08 Apr 2024 13:30:32 +0000
ROA not before: Mon 08 Apr 2024 13:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48359
IP address blocks: 194.50.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 09:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:e7:3f:25:91:82:be:3b:5d:0d:83:50:53:da:e0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Apr 8 13:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb019e91107a328b1a0d92be0e4056065fc0a3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b7:3a:47:d6:f5:f8:56:16:09:b3:cd:a0:9d:
19:fa:9d:14:41:b8:af:25:a9:1e:90:5a:76:c4:c9:
68:2f:7e:10:a6:fc:5d:6b:5e:3b:7f:ca:4e:5e:97:
4c:a3:fc:c2:03:d0:e3:d3:07:ce:72:e6:e6:91:7a:
ee:75:28:25:a0:ff:39:61:bf:b4:57:7e:12:20:1a:
af:00:33:69:21:80:00:b2:ba:d2:8e:d3:08:c2:22:
43:c7:39:86:fc:5a:31:f7:0e:fc:dc:f5:11:0b:d7:
ad:83:91:5a:de:e4:c7:23:5d:8f:83:3b:c7:1e:83:
55:ff:50:2d:c1:15:bb:ac:6c:a1:15:69:89:70:d2:
fd:e9:5b:bf:cb:88:a8:ac:b7:5c:f8:fa:e5:28:6b:
f7:dd:f1:fd:14:21:3a:35:e7:3a:bf:ef:28:04:80:
ad:0b:10:03:91:21:27:0e:c9:9f:41:d3:02:ba:08:
e8:4a:7f:78:b2:4a:04:df:32:b5:96:6e:67:c2:5c:
80:77:c7:d5:15:84:54:ed:7d:32:6f:16:21:6b:48:
c2:98:ff:7b:f5:3f:b5:cd:48:a6:40:90:16:32:2e:
c3:70:11:33:54:ce:80:2e:fd:32:82:ba:f7:ec:94:
eb:d5:f8:90:e7:a9:8b:d4:24:25:37:d0:9a:37:b8:
0f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:01:9E:91:10:7A:32:8B:1A:0D:92:BE:0E:40:56:06:5F:C0:A3:E1
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/uwGekRB6MosaDZK-DkBWBl_Ao-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.169.0/24
Signature Algorithm: sha256WithRSAEncryption
76:63:c8:ff:02:70:3f:88:29:4b:62:69:4a:9a:21:95:3b:62:
43:7c:fe:1f:af:d7:ab:9c:9d:69:0e:32:a9:b0:c6:03:ed:2c:
e3:a3:24:59:02:a2:73:aa:86:ad:c8:3e:8d:86:78:98:3c:91:
40:3b:65:88:d0:6d:fe:a7:16:2a:31:76:a3:55:11:ca:34:e6:
db:9a:03:b6:69:ff:c6:2e:c9:27:80:65:dd:fb:b1:27:af:91:
2c:84:0e:3e:03:8d:4c:07:40:65:32:f7:e3:0f:af:6d:8d:d8:
b6:56:b3:01:48:49:4f:12:d2:86:00:cf:25:f0:d7:2a:f0:8e:
42:4e:b5:ef:55:83:14:f7:43:ae:2f:3a:b2:bf:f3:22:88:63:
d1:ff:96:b7:0e:e5:bd:45:bd:2c:d5:7d:59:1d:d5:a5:ab:7e:
b3:83:77:3c:9d:58:45:fc:94:66:d0:36:9d:37:62:65:54:76:
cb:e6:50:93:6c:5a:4b:b9:b0:c1:47:09:4a:d8:83:da:c1:f7:
2d:fa:c1:ba:be:57:1d:24:16:a0:31:8e:12:b1:75:41:f3:a4:
6a:1d:58:b7:f4:cd:c3:33:88:39:d6:73:7a:fc:fa:e1:c8:df:
11:91:db:8d:6e:30:63:6e:91:b6:1b:b6:a2:ac:b4:ae:fc:e3:
0b:ea:e0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:53 2024 by rpki-client on console-ams.rpki-client.org