Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/UyA09mSfKNCU72m5IxHAL_ZMyzI.roa
File: UyA09mSfKNCU72m5IxHAL_ZMyzI.roa (raw, json)
Hash identifier: AbiZyRLkZFbzgs6NoGx1G8hQk0Uz0U2FkZXOnj7sftM=
Subject key identifier: 53:20:34:F6:64:9F:28:D0:94:EF:69:B9:23:11:C0:2F:F6:4C:CB:32
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 0188785F009F353276BBEE8C310418D673C8
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/UyA09mSfKNCU72m5IxHAL_ZMyzI.roa
Signing time: Thu 01 Jun 2023 19:11:11 +0000
ROA not before: Thu 01 Jun 2023 19:11:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 85.239.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:78:5f:00:9f:35:32:76:bb:ee:8c:31:04:18:d6:73:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jun 1 19:11:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=532034f6649f28d094ef69b92311c02ff64ccb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:c8:d8:22:0d:7c:26:b1:b0:2c:98:1f:3e:
36:de:a6:57:11:ad:d3:3a:3b:a4:12:de:31:9f:46:
2d:e4:aa:27:01:04:91:37:68:d4:b1:b9:c4:90:19:
5b:e7:1f:bf:de:bb:e5:aa:42:01:c0:cc:64:bd:10:
e5:3a:9a:d1:fc:e3:a2:1e:c6:90:0f:01:d9:3e:76:
b0:d6:83:29:e9:3f:2b:60:05:49:c1:86:9b:42:03:
eb:6a:8d:06:dd:b6:a1:39:fe:73:c9:01:87:4a:95:
71:bf:38:8c:32:82:05:8c:4d:1d:e7:2d:18:00:d6:
8d:10:f0:71:da:6f:81:62:01:f3:2e:0c:10:b3:8d:
b7:13:5d:ad:c0:82:4e:82:4d:c8:c9:ea:15:07:21:
63:bd:5b:42:2e:a1:45:bc:03:9d:58:30:f4:fe:68:
54:66:8a:d9:1f:1a:8a:15:6b:56:b6:ab:09:a3:19:
d6:93:40:dd:a8:01:1c:53:fb:8a:d3:55:4a:41:f8:
89:03:7b:c3:33:a8:be:bb:70:71:e9:ed:8f:41:f2:
3f:c8:64:5e:68:26:f4:cd:89:b5:69:70:ee:6b:dc:
d0:08:8b:9b:7a:9d:ab:96:7f:ca:e9:81:84:32:58:
1f:9c:e0:67:a8:f4:fc:b8:59:a8:92:ff:bb:ca:22:
96:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:20:34:F6:64:9F:28:D0:94:EF:69:B9:23:11:C0:2F:F6:4C:CB:32
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/UyA09mSfKNCU72m5IxHAL_ZMyzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.36.0/22
Signature Algorithm: sha256WithRSAEncryption
98:46:d6:d7:e0:ec:c9:6d:8f:d5:30:7b:0f:b9:3f:72:cf:e3:
37:17:ff:47:3c:13:4f:9d:9c:44:d1:09:2f:0c:7b:10:8c:94:
f1:87:db:94:a0:6d:72:ec:3a:0e:cc:1a:f1:f5:88:49:99:52:
c7:21:48:aa:d4:87:97:da:d4:e4:13:45:42:8c:ed:95:3b:0a:
7d:7c:d5:77:18:13:f9:aa:5f:20:86:46:2e:e8:f6:35:03:b8:
e8:cb:39:e8:ea:a7:9e:ed:81:d2:38:60:a2:64:6d:6d:e2:5e:
67:a0:cf:ab:d1:6c:eb:06:e3:6d:00:d2:b4:26:e1:a8:8a:9c:
fd:9d:07:f2:e1:37:03:d4:84:1c:60:e7:52:49:f8:f8:44:2b:
09:52:3c:16:06:4c:ee:e7:60:75:ee:e4:e2:c1:0e:11:16:e6:
bc:31:39:6f:b0:a7:b3:0b:e9:4b:8e:a4:7b:16:86:8c:fe:e6:
de:54:ac:1e:38:f7:3d:32:33:de:f1:88:8a:0d:bd:cb:30:86:
fd:25:03:0a:43:74:0f:fb:ed:98:ad:b8:b0:67:48:81:b0:16:
0d:bf:97:24:e0:3c:d1:ef:ae:91:16:da:60:6e:cb:50:21:21:
00:2b:43:68:a9:be:dc:aa:c7:d6:fe:13:cf:bf:75:55:d5:3a:
4f:fb:de:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:31 2024 by rpki-client on console-fra.rpki-client.org