Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/UTIMzer-sWxY4Higkup0hrSkdTg.roa
File: UTIMzer-sWxY4Higkup0hrSkdTg.roa (raw, json)
Hash identifier: XSNLheo/8M+30gMe7ifWZil/E7ECNgRYo5cCUONLgoM=
Subject key identifier: 51:32:0C:CD:EA:FE:B1:6C:58:E0:78:A0:92:EA:74:86:B4:A4:75:38
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE66207EAA808E3B29C678CCD50B5AF
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/UTIMzer-sWxY4Higkup0hrSkdTg.roa
Signing time: Sun 01 Jan 2023 10:35:15 +0000
ROA not before: Sun 01 Jan 2023 10:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196801
IP address blocks: 95.87.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:62:07:ea:a8:08:e3:b2:9c:67:8c:cd:50:b5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51320ccdeafeb16c58e078a092ea7486b4a47538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:53:bb:51:4c:bd:22:fb:54:34:90:80:fc:
c2:23:3e:10:b1:f6:a3:01:74:5e:25:1b:1c:1a:4e:
55:ee:ba:89:0f:e2:96:24:69:63:22:d0:28:5d:39:
9a:2a:00:6b:02:fc:1e:d7:18:72:5c:5c:f1:17:54:
70:ac:ca:de:f6:ad:b8:22:72:d8:fd:0b:71:c4:d0:
b1:12:78:e0:c9:df:2f:c8:fb:09:0d:44:f3:dc:d5:
c4:ab:7d:36:ef:8a:ab:02:30:24:71:c6:32:21:87:
bd:8f:c1:c9:5c:16:7e:f8:d6:9f:43:bc:2c:74:5e:
0c:e9:40:27:13:85:04:13:70:ed:47:c6:41:dc:0b:
34:e6:e1:5b:fa:1c:c5:c7:61:53:48:cd:80:5f:6a:
80:19:24:d7:86:c2:66:0a:9c:b2:96:e5:33:93:7e:
53:de:73:58:ed:b6:80:c4:63:85:83:fc:12:03:4d:
09:6f:b1:5b:7d:ff:81:28:f2:b4:67:65:2a:38:f6:
26:00:a5:4f:04:a3:95:e5:a4:df:f3:78:0a:14:ec:
1a:b3:a6:e5:21:e5:be:c2:a4:99:9b:4f:4b:c3:fa:
bb:c6:9f:32:7c:92:1d:f4:a4:95:3b:56:2f:d3:be:
c3:cf:2d:e4:6d:03:94:57:77:dd:c3:5d:f2:24:20:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:32:0C:CD:EA:FE:B1:6C:58:E0:78:A0:92:EA:74:86:B4:A4:75:38
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/UTIMzer-sWxY4Higkup0hrSkdTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.87.251.0/24
Signature Algorithm: sha256WithRSAEncryption
46:37:cc:ab:44:6f:df:70:e6:11:cc:b9:a8:ba:6d:ab:62:39:
b3:0b:34:76:d1:30:e1:5f:37:80:59:34:98:f5:30:21:8f:23:
c6:fd:48:70:a9:3a:5f:de:4b:d5:58:4b:04:fa:8b:52:2e:d1:
fd:b2:c5:8d:ea:bb:95:8c:7c:e3:e5:4d:ce:49:4a:f1:f5:d3:
13:53:34:54:b2:d9:0d:ba:35:b4:86:c1:1e:b0:00:e4:6f:5c:
43:16:d3:f3:83:41:7e:33:85:ab:41:0e:53:df:c6:d6:03:75:
b0:14:24:b8:35:28:c6:04:b4:ea:a4:96:34:fb:60:08:ff:bc:
46:90:70:04:9e:fc:03:3c:bc:eb:94:dd:7b:98:e7:df:89:a1:
a4:4f:45:d0:0b:8d:ca:b2:24:b2:4a:ce:f5:df:6c:bb:01:60:
0b:e7:db:22:19:fe:fc:d6:df:36:a0:5b:b3:f9:75:77:74:83:
9f:07:2c:35:72:ff:ad:b2:d7:2a:99:3e:15:5f:1d:55:e7:d6:
db:e9:52:e1:2e:6f:01:c1:9d:65:18:7b:3e:85:dc:01:d4:f6:
9c:40:c3:41:09:2f:42:6d:d2:83:0c:55:79:a0:ad:7d:27:d5:
20:2e:c4:cc:c7:73:d3:39:6a:31:bc:ac:0e:d5:18:39:ef:12:
fb:35:11:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org