Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/UG_H5MFLrwCmdHvjDqEaEEep0J0.roa
File: UG_H5MFLrwCmdHvjDqEaEEep0J0.roa (raw, json)
Hash identifier: QCjLpRR33ohzvf4JMu4cY/XFMR20yBpyQqc5Cu8vbsI=
Subject key identifier: 50:6F:C7:E4:C1:4B:AF:00:A6:74:7B:E3:0E:A1:1A:10:47:A9:D0:9D
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018D5AA947FDB885653403C061CBD56DC6D3
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/UG_H5MFLrwCmdHvjDqEaEEep0J0.roa
Signing time: Tue 30 Jan 2024 13:57:39 +0000
ROA not before: Tue 30 Jan 2024 13:57:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50214
IP address blocks: 193.232.65.0/24 maxlen: 24
194.190.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 05:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:a9:47:fd:b8:85:65:34:03:c0:61:cb:d5:6d:c6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 30 13:57:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=506fc7e4c14baf00a6747be30ea11a1047a9d09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:b6:67:0a:1e:98:18:bc:79:6e:77:e8:3c:
ec:3f:c6:08:5e:4d:5a:87:48:93:10:0c:52:bd:04:
f2:d6:89:16:01:e2:e4:2d:7f:e5:0d:1f:0a:28:15:
92:0b:27:8f:a2:89:d0:b2:9b:44:25:8f:46:fd:ac:
d4:e0:cb:b8:7b:b3:46:51:ab:18:ce:f9:d8:10:e8:
bc:4e:d7:4b:3c:19:95:6b:65:63:10:24:0a:8f:eb:
b0:10:22:15:79:44:c8:be:c2:bd:a7:8a:f4:4e:64:
4d:4b:5a:f7:b7:e0:9c:03:54:0d:59:30:9e:e6:03:
2f:c4:a4:bd:7e:1f:90:bf:89:64:40:13:e1:02:ab:
84:a9:7b:48:e4:80:0d:07:f9:aa:5e:7c:f7:be:f4:
2c:6d:e5:e7:c8:e2:a9:66:09:e0:f4:27:f6:d1:4a:
39:52:29:c2:02:5f:8f:40:d5:45:61:66:e9:f2:be:
09:85:a3:41:56:a0:28:f0:e1:9b:e1:6c:cc:fa:62:
50:2d:c0:00:05:a2:3b:5d:db:67:15:c8:0d:8f:a1:
14:95:ab:7b:3e:05:8c:67:f7:36:7f:a0:a3:ce:1e:
d4:57:2a:3e:df:22:ce:64:47:5f:c3:95:28:24:b0:
5b:a6:c6:df:9f:1e:0f:41:a5:ea:57:6e:d3:b8:93:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6F:C7:E4:C1:4B:AF:00:A6:74:7B:E3:0E:A1:1A:10:47:A9:D0:9D
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/UG_H5MFLrwCmdHvjDqEaEEep0J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.65.0/24
194.190.68.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:4d:4c:f4:12:9e:0e:f4:bf:59:3b:4e:f8:ce:32:b2:c1:c0:
b2:cf:28:94:94:11:17:a0:7f:41:74:5c:c4:e3:e4:9f:fe:2e:
5f:e7:1a:c5:96:de:9c:91:03:28:05:01:68:56:18:01:c7:cd:
3e:2e:0e:ac:7c:d1:f2:16:ad:9a:dc:fc:6f:ec:3f:b4:69:82:
12:d3:09:b5:b4:03:68:a0:e0:d6:75:84:b0:17:3c:e6:5d:7a:
46:84:92:d6:df:33:c0:8e:39:37:7e:c5:c7:38:ac:af:21:cc:
94:58:0f:9b:6d:c5:86:8e:36:6b:e2:37:76:f6:7e:36:ee:24:
c9:9d:e8:56:9e:aa:d5:5c:7f:35:ca:be:cb:84:58:57:41:63:
54:18:0f:e6:3f:91:1a:fe:95:39:12:b5:c7:58:69:fa:04:6e:
ea:01:88:bd:66:4e:65:af:bc:b4:3c:10:00:98:eb:e9:cc:48:
13:d5:28:c7:a3:30:25:88:57:aa:ee:2d:8f:98:9e:f3:f9:70:
e2:bc:fc:20:8a:bd:02:f1:b4:40:ad:7d:37:ea:c7:e2:ce:8f:
f4:40:10:0e:e3:ca:c0:cb:d5:60:b1:29:c3:f9:61:ae:e1:22:
a0:78:10:2d:06:4c:60:2d:a9:86:b9:31:28:55:84:03:52:c1:
e5:86:aa:26
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY1aqUf9uIVlNAPAYcvVbcbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjQwMTMwMTM1NzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDZmYzdlNGMxNGJhZjAwYTY3NDdiZTMwZWExMWExMDQ3YTlkMDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpW2ZwoemBi8eW536DzsP8YIXk1a
h0iTEAxSvQTy1okWAeLkLX/lDR8KKBWSCyePoonQsptEJY9G/azU4Mu4e7NGUasY
zvnYEOi8TtdLPBmVa2VjECQKj+uwECIVeUTIvsK9p4r0TmRNS1r3t+CcA1QNWTCe
5gMvxKS9fh+Qv4lkQBPhAquEqXtI5IANB/mqXnz3vvQsbeXnyOKpZgng9Cf20Uo5
UinCAl+PQNVFYWbp8r4JhaNBVqAo8OGb4WzM+mJQLcAABaI7XdtnFcgNj6EUlat7
PgWMZ/c2f6Cjzh7UVyo+3yLOZEdfw5UoJLBbpsbfnx4PQaXqV27TuJMpVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFBvx+TBS68ApnR74w6hGhBHqdCdMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvVUdfSDVNRkxyd0NtZEh2akRxRWFFRWVwMEowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwehBAwQA
wr5EMA0GCSqGSIb3DQEBCwUAA4IBAQBaTUz0Ep4O9L9ZO074zjKywcCyzyiUlBEX
oH9BdFzE4+Sf/i5f5xrFlt6ckQMoBQFoVhgBx80+Lg6sfNHyFq2a3Pxv7D+0aYIS
0wm1tANooODWdYSwFzzmXXpGhJLW3zPAjjk3fsXHOKyvIcyUWA+bbcWGjjZr4jd2
9n427iTJnehWnqrVXH81yr7LhFhXQWNUGA/mP5Ea/pU5ErXHWGn6BG7qAYi9Zk5l
r7y0PBAAmOvpzEgT1SjHozAliFeq7i2PmJ7z+XDivPwgir0C8bRArX036sfizo/0
QBAO48rAy9VgsSnD+WGu4SKgeBAtBkxgLamGuTEoVYQDUsHlhqom
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org