Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/UEBRd9KdwLZ_9Eea25AnmCvBS80.roa
File: UEBRd9KdwLZ_9Eea25AnmCvBS80.roa (raw, json)
Hash identifier: jbhPCzD8F1ZoK1H/QEz1KoQBoO1HJu7V/FCoF0EH3uw=
Subject key identifier: 50:40:51:77:D2:9D:C0:B6:7F:F4:47:9A:DB:90:27:98:2B:C1:4B:CD
Certificate issuer: /CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Certificate serial: 018570B05D1CA8878A3AB524299E3D8D5927
Authority key identifier: 5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/UEBRd9KdwLZ_9Eea25AnmCvBS80.roa
Signing time: Mon 02 Jan 2023 04:14:44 +0000
ROA not before: Mon 02 Jan 2023 04:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49736
IP address blocks: 213.108.184.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:5d:1c:a8:87:8a:3a:b5:24:29:9e:3d:8d:59:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Validity
Not Before: Jan 2 04:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50405177d29dc0b67ff4479adb9027982bc14bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:0f:39:cd:34:5d:80:0f:d8:7f:cd:95:8a:
d1:f0:e2:d7:09:8c:6a:f7:4f:ba:bf:f7:82:98:e2:
28:d1:67:47:32:d0:4b:71:40:b1:89:59:26:b1:23:
4d:ec:b9:0e:77:2c:33:6d:70:97:0c:62:98:4b:2e:
32:3b:4d:7a:7c:b9:50:4a:a2:36:2d:41:68:80:35:
57:73:44:97:a8:cd:b7:ec:bb:b7:34:3c:ab:d6:af:
49:04:ee:3e:82:03:6e:bd:23:f2:0e:cb:6d:41:d0:
b8:08:b1:e8:3f:27:6e:e7:03:fa:db:02:22:de:fa:
d7:83:88:b3:be:55:f8:f1:73:31:1d:1b:01:23:e9:
f0:0b:c6:1a:78:09:97:b5:03:3d:41:4a:b4:10:f3:
38:9f:38:e6:75:ee:8c:85:74:e2:e8:fb:cd:12:6b:
0d:b9:73:e3:0a:55:58:d6:6b:87:71:43:59:7b:49:
9b:b7:4a:09:62:c3:1e:cf:7f:1c:a9:d9:f8:97:8a:
79:ff:e7:c8:4b:9b:bf:d5:d3:b6:2a:93:9d:91:69:
a7:07:57:9f:1b:31:67:f4:f2:1d:4f:47:7b:6c:32:
94:8d:f9:52:34:a3:75:b5:6b:95:e0:31:e3:cc:0a:
de:2d:cf:f1:fb:75:e4:aa:07:d7:fd:e0:d0:fb:95:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:40:51:77:D2:9D:C0:B6:7F:F4:47:9A:DB:90:27:98:2B:C1:4B:CD
X509v3 Authority Key Identifier:
keyid:5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/UEBRd9KdwLZ_9Eea25AnmCvBS80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.184.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:e8:da:e9:e7:96:6d:ab:05:72:d1:f2:6a:5a:e5:6d:8d:3d:
3c:b9:05:c3:a6:22:f0:a2:32:5b:70:cd:15:45:3d:2b:93:60:
c8:de:b2:37:f6:ca:65:b8:97:96:32:fa:a4:ea:ab:b2:09:12:
20:c5:02:87:d1:e0:5e:16:69:24:38:d6:ad:f7:b1:78:46:40:
a3:38:13:b8:84:62:0e:81:14:ed:ac:07:a6:14:d9:eb:65:cb:
fd:63:2f:c8:f1:57:b5:b6:f8:79:d3:67:2c:1d:32:ed:4b:44:
f5:9f:c0:e6:1e:cb:29:43:22:fe:f5:b7:a7:d1:b5:6f:f4:27:
32:77:bb:9b:4b:50:44:70:60:ea:de:c2:6b:b4:81:22:e9:1b:
b5:18:06:7a:49:25:8b:ad:32:d1:b7:ee:2a:0d:c0:35:e7:58:
24:87:76:1f:c1:2b:0a:9d:75:b8:07:95:86:1f:62:47:ce:7b:
ef:d5:29:c8:b4:f8:f0:9d:26:27:63:51:b6:65:32:4f:f9:20:
c1:fc:d7:b6:40:5b:12:7f:15:01:a5:d1:98:73:67:58:50:a0:
f6:16:db:4b:08:2b:d2:3c:e5:3b:32:cf:b8:af:0f:b0:da:e5:
af:49:47:06:20:ee:1c:d8:07:d4:cd:3a:9a:c4:d1:8e:ae:94:
0f:ae:3b:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwsF0cqIeKOrUkKZ49jVknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNmQyYzJiNjljMjQ4NTE2MjNiZjkxNDc2OTAyNjM1YTRj
ZTA5ZWEwHhcNMjMwMTAyMDQxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDQwNTE3N2QyOWRjMGI2N2ZmNDQ3OWFkYjkwMjc5ODJiYzE0YmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUYPOc00XYAP2H/NlYrR8OLXCYxq
90+6v/eCmOIo0WdHMtBLcUCxiVkmsSNN7LkOdywzbXCXDGKYSy4yO016fLlQSqI2
LUFogDVXc0SXqM237Lu3NDyr1q9JBO4+ggNuvSPyDsttQdC4CLHoPydu5wP62wIi
3vrXg4izvlX48XMxHRsBI+nwC8YaeAmXtQM9QUq0EPM4nzjmde6MhXTi6PvNEmsN
uXPjClVY1muHcUNZe0mbt0oJYsMez38cqdn4l4p5/+fIS5u/1dO2KpOdkWmnB1ef
GzFn9PIdT0d7bDKUjflSNKN1tWuV4DHjzAreLc/x+3XkqgfX/eDQ+5W0mQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFBAUXfSncC2f/RHmtuQJ5grwUvNMB8GA1UdIwQY
MBaAFF5tLCtpwkhRYjv5FHaQJjWkzgnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG0wc0sybkNTRkZpT19rVWRwQW1OYVRPQ2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zOGE0MDEtZjI3Yi00OTdhLWJiZmEt
ZTdiYjUwYmMwODFiLzEvVUVCUmQ5S2R3TFpfOUVlYTI1QW5tQ3ZCUzgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8zOGE0MDEtZjI3Yi00OTdhLWJiZmEtZTdiYjUwYmMwODFi
LzEvWG0wc0sybkNTRkZpT19rVWRwQW1OYVRPQ2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1Wy4MA0G
CSqGSIb3DQEBCwUAA4IBAQAK6Nrp55ZtqwVy0fJqWuVtjT08uQXDpiLwojJbcM0V
RT0rk2DI3rI39spluJeWMvqk6quyCRIgxQKH0eBeFmkkONat97F4RkCjOBO4hGIO
gRTtrAemFNnrZcv9Yy/I8Ve1tvh502csHTLtS0T1n8DmHsspQyL+9ben0bVv9Ccy
d7ubS1BEcGDq3sJrtIEi6Ru1GAZ6SSWLrTLRt+4qDcA151gkh3YfwSsKnXW4B5WG
H2JHznvv1SnItPjwnSYnY1G2ZTJP+SDB/Ne2QFsSfxUBpdGYc2dYUKD2FttLCCvS
POU7Ms+4rw+w2uWvSUcGIO4c2AfUzTqaxNGOrpQPrjvY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:08 2024 by rpki-client on console-ams.rpki-client.org