Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/uZPfXzET2XoOUsFlKEH9nGm5nz4.roa
File: uZPfXzET2XoOUsFlKEH9nGm5nz4.roa (raw, json)
Hash identifier: 46PWtgpLl2mDaXqNrCKAk+8Mh/qxevbxAXS4g12HI0Q=
Subject key identifier: B9:93:DF:5F:31:13:D9:7A:0E:52:C1:65:28:41:FD:9C:69:B9:9F:3E
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 018CC26D7C9F549542660A69955375377264
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/uZPfXzET2XoOUsFlKEH9nGm5nz4.roa
Signing time: Mon 01 Jan 2024 00:30:04 +0000
ROA not before: Mon 01 Jan 2024 00:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41952
IP address blocks: 193.32.192.0/24 maxlen: 24
193.32.192.0/22 maxlen: 22
193.32.194.0/24 maxlen: 24
193.32.193.0/24 maxlen: 24
193.32.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 08:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7c:9f:54:95:42:66:0a:69:95:53:75:37:72:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Jan 1 00:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b993df5f3113d97a0e52c1652841fd9c69b99f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:ea:2b:89:60:2f:4e:97:11:2a:5b:6c:26:
1d:32:14:f3:7e:83:49:a3:5f:89:3b:c9:62:fd:ec:
1e:2f:05:85:61:59:19:2e:7a:51:59:93:3d:48:25:
7a:26:12:96:63:62:ff:3a:1f:c3:94:14:25:aa:1d:
61:22:26:22:98:8c:3f:0f:37:ed:7e:ca:6e:b5:58:
5f:f8:bf:35:86:53:99:06:a8:8e:03:76:ba:35:79:
dc:14:1e:78:18:74:03:7d:c9:9f:2f:a5:10:d2:e3:
7f:aa:31:af:4d:3c:3a:46:5a:01:1c:0b:4d:64:04:
e6:06:73:29:2a:e1:51:c0:94:69:7c:dd:29:42:06:
32:7a:f7:92:21:9b:b8:a7:05:36:5b:0d:6b:dc:a6:
19:0c:1c:a4:b2:4b:c7:dc:ff:1e:42:67:6c:ae:39:
e0:16:b8:bc:dd:9b:e5:43:86:fa:76:4d:4b:1a:03:
24:c1:1e:10:f0:c6:38:60:4b:a3:34:ff:4d:66:2c:
25:0d:ee:78:a7:01:5e:55:33:f0:33:68:80:77:58:
9e:46:ce:0d:53:61:af:8d:b7:9f:13:2d:29:d3:de:
be:e1:06:ad:92:72:e0:4a:65:8c:83:bc:a5:b4:3a:
58:e2:9d:60:ab:10:bd:35:84:46:60:3a:65:4a:1a:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:93:DF:5F:31:13:D9:7A:0E:52:C1:65:28:41:FD:9C:69:B9:9F:3E
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/uZPfXzET2XoOUsFlKEH9nGm5nz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.192.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:2f:25:57:eb:1b:07:82:ea:ee:23:5a:0e:9a:c7:b2:49:50:
a2:16:87:81:d1:12:a6:9b:f4:bd:71:97:43:8d:ee:9b:1d:09:
96:a7:0c:60:6a:de:15:4a:79:aa:55:ce:d9:eb:49:5b:e2:5a:
c3:48:8c:e4:3e:3b:df:fd:6a:fb:c8:78:9d:37:86:eb:14:bd:
f1:37:ce:c8:36:6f:93:db:e6:2e:61:b0:0f:9a:33:a2:62:37:
f4:24:bd:26:dd:1c:9d:2e:3b:a9:71:85:1d:d0:67:c0:b6:56:
85:50:11:33:79:a7:0c:83:7a:a9:5a:ec:3c:62:59:d1:8f:44:
95:7d:70:75:9c:4a:b5:27:7d:e8:53:f8:d3:ad:30:9b:a6:00:
76:51:fa:28:6c:ca:a9:7d:e9:5e:fb:ad:01:e1:5e:6e:a3:11:
1b:94:fb:80:fb:3c:59:d2:bf:44:85:01:b9:a1:75:f5:6d:7c:
40:66:76:78:6f:b8:b5:43:72:fb:7c:5b:48:5c:65:dd:17:5f:
50:22:e5:f4:44:9b:f3:48:22:4e:4d:b7:fe:a8:d6:0b:25:be:
db:f8:e3:f8:7f:62:22:49:18:12:9c:84:04:cf:e0:6a:f3:55:
36:ff:3d:a5:6c:06:9f:1b:25:a6:c3:49:38:21:5d:4b:a5:13:
13:a1:23:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:21 2024 by rpki-client on console-fra.rpki-client.org