Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/UBx9DkXoCrAhnnNzVLk8qB_wpqA.roa
File: UBx9DkXoCrAhnnNzVLk8qB_wpqA.roa (raw, json)
Hash identifier: jVYFLXhlkBYpRW7qZNCGs9Y++8Myz6/MOEWEI6eeLfQ=
Subject key identifier: 50:1C:7D:0E:45:E8:0A:B0:21:9E:73:73:54:B9:3C:A8:1F:F0:A6:A0
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185719E7B3B0E5B53273DFA3EC0E0B52A90
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/UBx9DkXoCrAhnnNzVLk8qB_wpqA.roa
Signing time: Mon 02 Jan 2023 08:34:49 +0000
ROA not before: Mon 02 Jan 2023 08:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39337
IP address blocks: 195.208.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:7b:3b:0e:5b:53:27:3d:fa:3e:c0:e0:b5:2a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 08:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=501c7d0e45e80ab0219e737354b93ca81ff0a6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3b:56:70:25:9f:b3:e9:ec:e9:0a:77:90:e9:
8e:4a:b8:30:15:6d:c3:a1:24:8e:5f:5c:a2:cd:73:
71:d7:b0:78:a4:f1:95:d8:e1:53:87:56:58:d3:dd:
55:82:f7:91:a2:dd:26:69:47:91:7c:62:48:45:06:
4a:45:d0:bd:ac:ea:b6:78:75:ed:e5:ed:9b:61:07:
d7:76:3f:f7:dd:0c:aa:aa:62:76:5d:ca:2c:f3:66:
e0:d1:9a:6a:9e:95:2b:86:56:a9:f9:3a:b2:c1:ea:
09:b2:35:e4:77:90:2f:a2:73:1d:81:e3:19:1a:b8:
9b:f8:ec:0b:6d:f4:aa:9d:03:14:da:69:f2:be:f8:
c0:cf:f1:31:f2:fd:4b:46:eb:4b:fb:00:cd:20:21:
18:33:ef:2b:30:00:89:65:8b:35:aa:3b:8f:9e:53:
62:75:29:08:9c:a1:91:62:ce:d1:7d:9b:53:2e:21:
c1:f0:d9:cb:0f:30:f1:27:e9:00:34:e3:11:07:63:
92:c7:e3:98:ea:56:1d:57:74:2f:0b:18:9a:63:8b:
c7:20:e3:f4:26:34:73:0b:9d:5e:0e:1d:f8:c4:78:
e0:0f:c3:6d:12:98:7b:4f:96:a0:21:9d:77:e7:f2:
ae:1b:2f:64:f6:04:75:82:b9:37:66:fc:24:d5:37:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1C:7D:0E:45:E8:0A:B0:21:9E:73:73:54:B9:3C:A8:1F:F0:A6:A0
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/UBx9DkXoCrAhnnNzVLk8qB_wpqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.208.184.0/22
Signature Algorithm: sha256WithRSAEncryption
21:c7:91:2f:41:b8:57:19:47:13:f0:66:79:7d:98:ab:1a:a4:
03:88:ca:9f:16:fc:17:f1:1c:3f:3a:b5:a3:28:d8:c4:2f:12:
61:31:f8:88:d6:cb:af:49:e9:6d:55:06:81:ab:1f:52:71:09:
96:25:f1:19:cb:bd:7e:d0:a1:b9:e1:7d:91:d1:15:98:c6:64:
88:af:57:cb:c4:07:f4:6a:ec:24:88:56:fa:d9:23:84:c0:f1:
d7:b1:d4:0e:25:cd:d8:2c:e4:fc:4f:f2:9a:88:61:82:39:b0:
5a:9a:6f:76:31:c2:db:c6:4d:e1:e0:f3:99:d6:2b:2e:32:75:
b1:c3:8d:68:04:b5:5c:0c:15:81:82:e1:15:18:00:31:5c:3d:
21:b4:c1:e4:ca:3d:c7:07:da:b5:2a:f7:fa:39:da:58:f9:15:
4d:cc:4e:fe:c4:de:31:4a:03:12:74:a7:9e:9f:54:2d:a0:53:
98:b2:84:08:ab:e1:11:53:bb:44:b0:cc:82:eb:86:f2:9f:d5:
e0:4e:15:5e:ec:e9:fa:b4:60:73:e6:ae:43:27:7f:99:05:f5:
9f:e3:99:e2:ae:7a:9a:9e:c4:70:4e:b4:8e:42:61:be:73:2d:
76:57:fc:2d:4d:93:cc:cf:97:cb:7d:c0:34:4a:7a:a9:e9:c7:
92:12:ac:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org