Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uVM5hEcre2lEJXvJsRiMCA55V1M.roa
File: uVM5hEcre2lEJXvJsRiMCA55V1M.roa (raw, json)
Hash identifier: qKoCfEnt6wVOYXjcVPq/6jQqrC//kzIxfdO1RkyQNPA=
Subject key identifier: B9:53:39:84:47:2B:7B:69:44:25:7B:C9:B1:18:8C:08:0E:79:57:53
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188B5B515292121311235DA198A34326162
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uVM5hEcre2lEJXvJsRiMCA55V1M.roa
Signing time: Tue 13 Jun 2023 17:02:03 +0000
ROA not before: Tue 13 Jun 2023 17:02:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 194.58.155.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Jun 2023 13:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b5:b5:15:29:21:21:31:12:35:da:19:8a:34:32:61:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 13 17:02:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9533984472b7b6944257bc9b1188c080e795753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f2:b6:f2:9f:da:c3:52:ae:0b:f7:05:34:d2:
34:44:47:b8:13:40:25:64:7b:91:d1:aa:4d:bd:1a:
42:03:7b:5f:15:cb:76:e4:0f:b6:93:0c:d0:7d:ae:
7f:c1:4f:e6:f8:69:af:68:dc:6f:e9:80:e3:39:22:
38:c1:c8:d9:89:9a:ff:96:1d:a2:6e:0a:e6:aa:c4:
6d:07:7e:9b:e2:09:13:77:57:4f:f9:41:7b:19:e5:
f8:cc:a2:10:8c:1f:b5:8d:48:6c:19:80:8b:68:14:
45:68:10:e2:78:84:5f:83:8b:b5:e3:69:98:ae:c2:
a2:94:f5:45:80:28:40:6f:64:ad:6c:d3:3d:ee:9a:
a7:b5:a9:4f:91:c3:32:64:51:3d:99:c8:d5:d9:ee:
a2:fc:4c:c1:59:2d:aa:43:99:8b:fc:c5:40:cc:b4:
13:25:db:d2:52:2a:33:a8:a4:aa:97:89:54:9c:18:
71:de:d7:08:a8:cc:ad:e7:83:26:6a:df:06:70:77:
e0:69:76:28:75:cb:e5:20:c6:72:c4:ed:5d:8e:c3:
00:e2:a7:50:0f:6f:bb:a6:2d:d8:d2:ff:05:3e:31:
de:60:53:7c:a7:83:57:ec:d9:85:e4:b4:54:f0:92:
12:43:d4:93:b1:98:00:e1:88:fe:3e:f4:72:07:bb:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:53:39:84:47:2B:7B:69:44:25:7B:C9:B1:18:8C:08:0E:79:57:53
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uVM5hEcre2lEJXvJsRiMCA55V1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.155.0/24
194.87.63.0/24
195.58.58.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:b4:02:58:31:cf:b2:5f:bd:05:39:dc:83:9d:a8:b3:f9:02:
c4:e2:69:06:41:13:b0:f4:65:5c:02:72:03:ec:d7:53:04:cf:
98:f1:3c:2e:0f:6b:c9:64:35:7f:e3:e1:88:e9:40:ad:0e:1a:
0a:30:ce:d3:a1:a0:b1:51:c5:99:fa:64:9f:4e:55:ff:a4:b1:
c5:85:06:d1:35:8b:94:a3:27:5b:27:6c:e1:3a:12:72:a6:df:
48:b7:c0:07:86:fe:b2:ac:50:0c:a3:d2:80:e5:e3:d8:ce:d6:
60:cf:3b:56:8d:68:aa:05:f3:d1:02:87:0f:54:bc:bc:5d:dd:
73:a3:62:7b:ec:43:bb:7e:e4:1a:c4:bc:ee:53:dd:93:41:bd:
ca:3e:f5:26:c8:a6:77:f1:9b:79:4c:ff:f9:df:36:08:e2:ef:
1d:08:99:e2:96:df:13:3a:12:5a:61:19:dd:46:c5:3a:19:22:
5e:e1:1c:8a:46:22:6f:20:ba:62:46:3b:fc:67:ff:1d:4b:5c:
4f:b1:50:b0:1e:57:15:a0:e4:94:9a:f6:71:e5:b6:4e:c4:fb:
63:92:9c:b9:38:43:e0:a0:03:4f:d4:10:31:d7:02:42:b1:0f:
93:b9:95:43:4a:8b:45:ef:a7:e7:8f:0b:24:f4:fe:ed:e0:ad:
89:9b:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:29 2024 by rpki-client on console-fra.rpki-client.org