Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/uChBVbv72drHRC0L-f7UDJYAXsw.roa
File: uChBVbv72drHRC0L-f7UDJYAXsw.roa (raw, json)
Hash identifier: HHrRJze7mq6e9TaAxQbEVi5PDdOUwYFiSAkLNJt1CuM=
Subject key identifier: B8:28:41:55:BB:FB:D9:DA:C7:44:2D:0B:F9:FE:D4:0C:96:00:5E:CC
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 01856E140F39B5268FF7EE8B8F1C0774D753
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/uChBVbv72drHRC0L-f7UDJYAXsw.roa
Signing time: Sun 01 Jan 2023 16:04:46 +0000
ROA not before: Sun 01 Jan 2023 16:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15987
IP address blocks: 193.29.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:0f:39:b5:26:8f:f7:ee:8b:8f:1c:07:74:d7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: Jan 1 16:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8284155bbfbd9dac7442d0bf9fed40c96005ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:66:ec:8e:4e:79:6a:c3:8b:c9:a3:18:9c:
a2:e1:92:81:e2:2b:41:a5:d0:a5:0e:7a:62:8c:83:
4f:d8:d7:72:36:f9:74:49:ae:3e:3b:79:40:64:6d:
d8:a5:3c:58:5c:a6:72:d8:56:61:3e:0d:c0:d2:53:
67:0c:56:42:99:7f:80:de:46:1f:cb:83:6f:36:55:
f9:25:76:75:84:3b:76:22:27:62:ce:e7:2a:95:a8:
d7:18:c6:f6:02:d0:83:ee:21:03:45:af:02:f1:03:
1f:9c:90:f7:d5:7a:43:98:49:e2:6f:8a:db:b9:51:
10:d5:b3:25:9b:c9:b7:68:6f:26:0a:35:d7:47:90:
16:98:f4:2b:bd:cc:77:a4:cb:72:7b:77:3c:dc:84:
b3:d9:26:c2:ae:0d:4c:52:54:3c:b1:ad:4f:71:0a:
50:60:93:ff:10:2c:8f:7e:78:97:32:b9:3c:d7:1a:
8c:97:7b:d6:06:a2:0c:65:65:3b:e3:0a:71:8c:1d:
e3:89:25:a4:e4:b9:78:78:57:c9:cd:3c:d1:ec:89:
09:11:d1:ed:75:a2:ed:b2:8c:c6:da:3f:65:a0:04:
56:36:7a:2c:e3:0c:05:f2:ce:90:13:72:ef:7a:c9:
1d:68:48:b7:19:bd:08:26:14:c9:60:47:e7:05:6b:
d1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:28:41:55:BB:FB:D9:DA:C7:44:2D:0B:F9:FE:D4:0C:96:00:5E:CC
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/uChBVbv72drHRC0L-f7UDJYAXsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.25.0/24
Signature Algorithm: sha256WithRSAEncryption
05:07:5f:2d:69:ee:16:6e:a1:e5:c9:a4:b1:75:ad:1b:cd:ba:
60:08:45:92:6c:36:a8:0f:87:ff:55:f7:31:66:56:53:10:9b:
c9:f6:c5:91:7c:65:8d:f1:dd:75:b4:91:d2:83:0d:d4:1c:7d:
44:81:a2:66:b4:01:0c:41:6b:00:08:65:05:39:eb:8f:59:80:
b0:26:3f:8f:93:83:9f:11:47:ca:b7:d6:0a:63:dd:b0:59:12:
c1:4b:97:00:8c:fb:c9:0d:2a:69:6b:e9:57:5c:94:cd:f2:8b:
7b:d9:d0:08:91:9f:ee:eb:2c:f9:35:a4:3e:a8:7d:8a:f6:59:
93:5c:03:27:89:63:3a:47:e4:cf:73:fc:81:c6:83:f8:b5:9b:
ed:e5:b1:c0:9a:9d:9f:50:c2:0c:0e:b6:dd:ba:d8:ac:5b:f0:
fe:51:42:25:07:21:e3:83:a6:7f:4c:dc:02:e6:f1:ad:dd:5c:
4e:60:66:6d:0d:17:8c:8a:6f:41:da:95:63:7d:f1:36:2b:8d:
80:40:3d:89:2e:9e:34:c6:e0:77:14:2d:8e:e5:05:bf:53:ad:
23:95:30:92:23:49:bd:94:9b:89:d3:c8:d7:7f:c1:cd:5f:c1:
43:3a:60:e7:6a:65:a3:78:f0:1a:6e:4f:87:65:9d:38:cb:f5:
b6:30:f8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:34 2024 by rpki-client on console-fra.rpki-client.org