Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/ue8znCxU0-y66_GdpWG8mDrKwa4.roa
File: ue8znCxU0-y66_GdpWG8mDrKwa4.roa (raw, json)
Hash identifier: MVwuqBy8IpbhS2jrglF1LS68JGw48SLHbhSSJ61clfA=
Subject key identifier: B9:EF:33:9C:2C:54:D3:EC:BA:EB:F1:9D:A5:61:BC:98:3A:CA:C1:AE
Certificate issuer: /CN=270fff2185665b9df9008c9e1be62601189a7d7c
Certificate serial: 018612B4E4D3EB17621FBAFFADE094ABC1D2
Authority key identifier: 27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/ue8znCxU0-y66_GdpWG8mDrKwa4.roa
Signing time: Thu 02 Feb 2023 15:18:10 +0000
ROA not before: Thu 02 Feb 2023 15:18:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60855
IP address blocks: 194.5.173.0/24 maxlen: 24
194.5.172.0/23 maxlen: 23
194.5.172.0/24 maxlen: 24
194.5.171.0/24 maxlen: 24
194.5.170.0/23 maxlen: 23
194.5.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:b4:e4:d3:eb:17:62:1f:ba:ff:ad:e0:94:ab:c1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270fff2185665b9df9008c9e1be62601189a7d7c
Validity
Not Before: Feb 2 15:18:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9ef339c2c54d3ecbaebf19da561bc983acac1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:c3:39:72:07:e5:94:bd:5a:55:02:9c:04:
ff:1f:ea:da:38:e1:f6:d2:be:dc:95:2c:c1:15:30:
7f:33:a0:50:6d:66:b1:dc:25:0b:10:b8:ec:85:12:
67:26:2d:86:cd:b9:31:63:c0:ab:9f:90:7f:32:5b:
79:3a:d3:21:b5:5d:ab:43:7a:49:a7:ca:ca:dc:aa:
03:b1:46:60:3b:08:87:a1:6b:33:f2:c4:b0:66:09:
d6:65:aa:08:5a:9a:43:17:e8:d4:e2:0c:93:41:ff:
f5:90:eb:10:66:b9:6f:87:ec:84:dc:d7:0f:c0:25:
af:5c:f3:68:05:c8:59:00:d3:42:53:61:fc:2e:cc:
62:18:77:98:30:b4:95:cf:32:db:cc:a5:bf:e3:b5:
1f:8a:fa:bc:fa:87:04:42:32:1f:60:1b:ed:c3:14:
7f:9a:5d:20:5d:e0:33:90:8c:6d:2f:14:e3:d8:1d:
fd:c7:74:bd:c1:05:e9:f5:28:b6:62:d5:08:22:5b:
0d:55:81:25:e1:62:51:21:cc:a6:55:ef:4f:5e:32:
26:8c:a0:a2:79:15:e7:cb:c0:48:cc:d1:21:f4:aa:
f2:95:7c:71:64:ea:4b:dd:18:7c:0e:b7:05:06:56:
4c:5a:e2:37:ff:05:f4:ee:29:37:13:4b:bd:25:95:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EF:33:9C:2C:54:D3:EC:BA:EB:F1:9D:A5:61:BC:98:3A:CA:C1:AE
X509v3 Authority Key Identifier:
keyid:27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/ue8znCxU0-y66_GdpWG8mDrKwa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.170.0-194.5.173.255
Signature Algorithm: sha256WithRSAEncryption
28:fe:0e:75:51:3b:81:81:15:6c:96:ae:08:4f:6e:cb:2b:cb:
36:36:ae:13:d3:c9:04:d0:27:c9:05:f4:b5:52:6d:67:23:c5:
d4:0a:c4:db:75:de:dd:8c:c3:8a:bd:fd:2c:81:3c:14:18:54:
6d:c5:ac:51:f7:a0:23:3e:b6:5c:4f:d7:41:29:8a:fe:1a:65:
3a:88:e5:20:09:c1:d1:74:c3:6e:11:2e:fb:03:fc:04:b3:dd:
0c:55:af:b0:d3:38:c6:f6:b3:8c:f7:e4:07:88:a6:de:c1:7c:
a2:db:13:b0:34:ea:d5:48:b1:75:a6:9e:1e:66:1a:52:68:49:
f7:34:33:c7:47:e0:8b:33:4a:ef:46:94:fb:e6:37:d2:9d:43:
24:6f:8c:2d:05:02:01:10:64:bf:e0:f7:16:11:f0:d9:a9:80:
f2:e6:a6:08:d3:2e:dd:a7:ee:59:5a:a4:e1:b0:92:90:5d:17:
a0:1a:25:5a:6e:91:19:0f:ff:8a:e5:62:2b:3f:2a:d9:73:8c:
30:fd:fe:f3:5a:aa:55:c0:9c:28:90:c3:17:33:0a:2d:b2:5a:
5a:bc:05:c0:11:0e:3b:bb:6d:d9:7b:82:3f:0f:f7:46:33:10:
b7:7f:0f:8d:11:1e:2e:a8:4c:b0:20:d2:4d:75:a6:8e:01:f7:
c7:6b:6a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:21 2024 by rpki-client on console-fra.rpki-client.org