Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UJBec1VANqvh9cZlXeRdk05yHlc.roa
File: UJBec1VANqvh9cZlXeRdk05yHlc.roa (raw, json)
Hash identifier: VLuY9xSCseCl1mpjKUTi3Nf+urSFCC4Iyi20lOLS42s=
Subject key identifier: 50:90:5E:73:55:40:36:AB:E1:F5:C6:65:5D:E4:5D:93:4E:72:1E:57
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B4D3E65F4A6A7C2F8048BBD44BF7AECA1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UJBec1VANqvh9cZlXeRdk05yHlc.roa
Signing time: Fri 20 Oct 2023 13:20:16 +0000
ROA not before: Fri 20 Oct 2023 13:20:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216127
IP address blocks: 194.58.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4d:3e:65:f4:a6:a7:c2:f8:04:8b:bd:44:bf:7a:ec:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 20 13:20:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50905e73554036abe1f5c6655de45d934e721e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:a6:7b:52:cb:ec:1a:e5:dd:bd:89:ba:23:
2a:f6:90:f0:c4:8c:e0:6b:6a:b6:aa:95:61:56:a8:
fa:cf:63:3a:2f:58:45:cb:4b:66:4e:c2:f0:84:4a:
04:c9:63:85:21:56:9c:36:ff:c0:fb:51:1b:82:d1:
21:e5:a2:dd:4b:d6:47:fa:5e:a1:19:d7:e5:e6:db:
79:f8:79:68:e0:78:c0:38:63:49:cf:a8:b1:87:06:
99:3d:80:cc:32:71:8e:55:18:4d:62:48:03:bf:47:
90:cb:03:fb:fb:74:60:1a:ac:b5:f9:ca:7d:50:08:
74:d9:ad:ca:68:0e:e5:68:3b:66:da:05:f3:6b:8f:
f3:fa:0a:28:50:75:1b:5c:27:37:e2:46:4c:10:85:
23:d6:df:0b:87:8d:04:97:dd:6f:83:8c:a2:7c:2a:
b9:0c:5b:62:2f:3f:49:41:51:e8:25:a3:83:2b:2b:
23:c2:c5:e5:6a:c7:f8:81:42:c8:31:4a:a8:bb:20:
95:4d:4d:63:a3:65:29:0f:90:2f:ed:78:ae:64:ba:
1e:75:cd:33:62:e2:f0:10:38:cc:f6:2b:5a:4c:a2:
a1:2e:7d:da:15:be:3e:ad:5b:c6:74:9f:58:b7:f7:
19:2a:49:e6:db:60:ca:03:9f:06:27:be:46:70:40:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:90:5E:73:55:40:36:AB:E1:F5:C6:65:5D:E4:5D:93:4E:72:1E:57
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UJBec1VANqvh9cZlXeRdk05yHlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.33.0/24
Signature Algorithm: sha256WithRSAEncryption
81:04:78:2a:ba:ad:07:c7:ef:b2:05:3a:fb:33:08:2e:36:1e:
d4:3b:a8:74:5a:3f:8c:5e:c7:bf:75:d1:37:be:9e:37:a3:b9:
40:63:13:57:0e:ac:b0:88:77:8e:72:39:a7:7e:39:b2:1a:6d:
8f:d9:75:5e:a9:aa:a9:09:1d:e9:5b:1d:ab:1d:56:8b:b7:a6:
cd:dd:b1:88:be:a6:04:60:50:b5:91:9c:ea:99:fd:00:ef:d5:
dd:8a:6f:2d:a7:5e:cb:b3:69:ef:de:d3:5c:b7:f7:bc:b6:13:
8d:fa:16:1d:b2:d6:26:5a:6c:ab:f6:68:66:f7:f7:1c:0a:9d:
51:16:80:f0:4f:f5:92:ab:cc:64:31:ae:be:85:76:cd:e5:e4:
11:42:37:11:fb:c0:2e:e9:6d:99:fd:5c:1b:56:cd:21:49:6f:
b8:57:dd:64:59:1e:3d:96:e4:1b:e6:36:03:19:da:64:21:61:
7a:82:3f:1c:f8:df:ae:96:b6:b9:1e:a5:7c:5c:5b:e2:85:b7:
ad:b6:5a:16:ff:da:ec:fe:fa:0a:85:4e:a0:2c:81:db:63:84:
c9:d0:fa:65:87:b3:1b:2e:32:77:23:07:fe:fb:32:68:0e:a1:
bf:0b:b2:41:27:e7:65:51:31:2b:37:7d:fe:51:64:02:e7:74:
af:7b:89:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:17 2024 by rpki-client on console-fra.rpki-client.org