Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/uSiC3sZblgP2PlgyoHofwCcwNw4.roa
File: uSiC3sZblgP2PlgyoHofwCcwNw4.roa (raw, json)
Hash identifier: Z/luDqCGbRxj6dnAOOqfOkk2tA+YHR6hrKuPw2lw4dY=
Subject key identifier: B9:28:82:DE:C6:5B:96:03:F6:3E:58:32:A0:7A:1F:C0:27:30:37:0E
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01856D0AD6F66F1176742F5427EEFFD2961F
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/uSiC3sZblgP2PlgyoHofwCcwNw4.roa
Signing time: Sun 01 Jan 2023 11:15:04 +0000
ROA not before: Sun 01 Jan 2023 11:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47206
IP address blocks: 188.224.0.0/17 maxlen: 17
93.182.192.0/18 maxlen: 18
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:d6:f6:6f:11:76:74:2f:54:27:ee:ff:d2:96:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 11:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b92882dec65b9603f63e5832a07a1fc02730370e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:aa:64:20:93:8f:72:16:04:2b:08:c0:db:
ba:3c:17:bb:6e:4d:ee:5f:b8:8c:6c:3c:b3:4e:7b:
92:bf:63:e8:24:65:0a:3d:8a:c0:d7:f7:36:a8:3f:
74:2d:aa:f5:7b:c3:32:39:00:46:31:06:c4:37:74:
61:b1:dd:57:3e:f4:c5:15:b0:e8:7c:c8:bd:db:7d:
e0:c5:0a:b7:44:84:4f:c3:61:71:c7:ad:8f:a0:7a:
65:13:0e:27:db:3c:c3:ea:73:6b:78:78:f2:d3:cd:
b2:2e:6e:39:36:0c:c1:13:d8:86:5b:6d:a2:e8:70:
4d:f9:3b:61:11:14:c5:bc:70:d8:2d:75:f7:f4:a2:
2b:26:2d:69:a1:ac:d6:03:c2:4b:24:28:30:e4:c1:
e4:50:14:0e:be:41:59:10:42:54:3b:b4:66:5f:1d:
ab:e8:a8:95:80:a0:f6:e3:64:b5:92:36:36:4d:21:
ba:85:51:6e:cc:09:23:9f:fc:a6:c0:7e:c2:40:c2:
45:8e:d4:c7:6e:0b:f7:d0:e7:1a:b1:5c:7a:22:35:
d0:e2:a6:6a:73:1e:63:6d:36:d3:c7:78:ee:db:b5:
53:46:27:e3:6e:88:0f:09:52:19:9f:bd:c1:50:8d:
18:bf:21:36:cd:6b:8f:dc:26:13:90:36:66:cc:3d:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:28:82:DE:C6:5B:96:03:F6:3E:58:32:A0:7A:1F:C0:27:30:37:0E
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/uSiC3sZblgP2PlgyoHofwCcwNw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.182.192.0/18
188.224.0.0/17
Signature Algorithm: sha256WithRSAEncryption
0b:15:99:e6:89:3a:43:c7:15:c8:ed:36:78:2b:85:44:97:fb:
84:b7:7a:4c:43:23:f0:31:ef:5d:97:1b:d3:f6:dd:75:80:cb:
ee:ee:3f:f3:82:7f:5c:b8:32:c7:d1:d0:75:3c:52:7b:15:18:
0e:d3:b9:8a:61:92:6b:09:3d:b6:50:87:36:b3:88:73:f6:25:
63:97:d2:4a:36:19:f3:2c:1f:19:ea:1c:43:37:4d:9b:3d:97:
34:50:c3:97:5f:93:c7:5e:18:a6:64:ce:cb:45:f0:82:84:da:
ee:ca:64:5a:c3:c4:c8:50:99:20:55:d5:87:e2:50:b8:83:e7:
21:2d:b7:82:02:23:d4:59:e7:ac:fe:df:ba:be:e7:ed:84:c4:
55:18:e2:2b:ec:79:35:d2:75:09:35:29:9a:fe:2f:f2:79:cb:
64:ce:05:2b:9a:fa:76:49:72:51:d3:5e:d9:a7:2e:71:66:01:
e2:2f:da:51:1f:cc:2c:be:4d:cd:03:78:8b:b5:ee:25:8d:1f:
3f:99:e2:a3:61:6c:f2:ab:b6:a5:19:69:d1:75:31:78:15:7b:
19:61:15:a9:f5:a9:af:b3:c1:b0:19:e0:b5:75:de:26:12:d8:
bb:d1:01:1e:e4:63:5d:2d:71:ff:7a:0b:bd:df:51:f6:28:84:
b3:44:c6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:51 2024 by rpki-client on console-ams.rpki-client.org