Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/uLpgKeKSQnSF5MSkRDVDjLLpF8w.roa
File: uLpgKeKSQnSF5MSkRDVDjLLpF8w.roa (raw, json)
Hash identifier: mc5U4fpI97r+qXN6EU+wBOGcR4X3r2bOgo1Mxk9ep18=
Subject key identifier: B8:BA:60:29:E2:92:42:74:85:E4:C4:A4:44:35:43:8C:B2:E9:17:CC
Certificate issuer: /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Certificate serial: 01856BDC7504215264DBDF77AE012D088891
Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/uLpgKeKSQnSF5MSkRDVDjLLpF8w.roa
Signing time: Sun 01 Jan 2023 05:44:47 +0000
ROA not before: Sun 01 Jan 2023 05:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41432
IP address blocks: 193.164.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:75:04:21:52:64:db:df:77:ae:01:2d:08:88:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Validity
Not Before: Jan 1 05:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8ba6029e292427485e4c4a44435438cb2e917cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6f:52:83:95:67:3f:47:3c:bd:d8:12:5d:71:
3d:47:8d:f5:4a:f7:e4:e0:76:bc:69:64:2d:3f:a4:
01:0d:ff:6f:73:95:db:e7:df:89:53:54:79:c5:6b:
0b:31:fd:a1:49:f8:45:4a:1b:5f:aa:e3:d0:f1:6a:
14:f4:02:14:a9:de:8c:27:39:38:fe:79:08:da:93:
df:c9:52:0e:55:dd:a5:92:38:61:d3:44:ab:fe:9c:
db:ef:b8:62:ec:78:ab:4b:ac:f4:79:ed:7a:dd:d8:
79:61:fa:78:23:53:08:bb:65:a9:5e:3a:9d:e3:64:
c3:18:b4:a4:c0:08:f4:08:bd:04:79:88:cc:fa:2a:
58:f1:e7:c9:ce:54:91:f6:59:73:a1:f7:5f:dc:cd:
32:11:b0:a0:54:f0:00:d5:d1:b8:bb:72:96:a8:1b:
b4:a3:a4:3d:29:dc:e5:a3:e3:b2:d2:02:dd:93:e6:
e8:1a:35:c2:0b:69:c6:4c:00:c4:de:02:55:c4:94:
48:1b:72:aa:cb:96:3d:1c:41:b9:75:ed:e3:d0:38:
4b:8f:27:42:52:c5:40:83:24:30:bb:22:75:63:e5:
1b:5c:fd:d4:68:57:ac:d3:80:7a:4a:e0:42:dd:84:
78:95:ab:d3:7a:35:04:3c:be:2f:0b:45:4c:70:ca:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BA:60:29:E2:92:42:74:85:E4:C4:A4:44:35:43:8C:B2:E9:17:CC
X509v3 Authority Key Identifier:
keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/uLpgKeKSQnSF5MSkRDVDjLLpF8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.136.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:27:99:d4:9c:29:39:89:4f:b2:50:c0:03:71:7a:e1:78:c1:
a2:91:5a:ca:04:7a:d2:a8:ee:32:d8:37:56:b5:ad:94:22:75:
de:7a:0f:6b:64:9c:f0:d5:16:c4:2d:c3:56:be:4c:4c:f3:69:
04:f4:54:de:f4:57:51:23:77:78:78:1e:50:98:57:00:98:f8:
3b:0a:5d:54:87:a7:aa:f4:d7:f9:1e:b6:1c:ec:11:85:52:14:
7e:bb:d6:ff:09:f4:ae:c9:6c:d3:35:95:c7:35:de:03:44:f6:
5e:87:ec:95:74:1b:65:81:fb:6d:a2:97:ef:a7:f7:59:18:94:
ab:d8:7c:70:25:9a:3b:ea:64:0a:37:ae:33:68:aa:1d:84:92:
fd:5d:53:ac:b5:4f:86:f8:9a:a1:b0:25:a7:50:55:87:7f:93:
c3:c7:19:e4:32:c8:45:1a:d4:a1:88:f2:c0:49:a8:a4:6e:9a:
c0:28:57:b0:40:a6:ff:c3:60:fd:0e:2b:44:de:7b:4e:c2:c1:
94:1d:1d:95:1f:73:e1:4c:93:1c:35:1e:70:57:90:7c:dc:c4:
14:79:b8:69:02:09:62:bf:12:58:e7:15:79:f3:c8:64:57:1b:
c3:36:57:6f:62:f0:d8:c8:bd:df:3e:51:6e:52:05:57:f1:fc:
cd:aa:f8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:39 2024 by rpki-client on console-ams.rpki-client.org