Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/00Ubhej5_Cs_XBE7D4ukPqEyiwY.roa
File: 00Ubhej5_Cs_XBE7D4ukPqEyiwY.roa (raw, json)
Hash identifier: xellptVqqzCni+WelHWvIZx5+ti+JJmTFz5So1E1Fgg=
Subject key identifier: D3:45:1B:85:E8:F9:FC:2B:3F:5C:11:3B:0F:8B:A4:3E:A1:32:8B:06
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 018B1E2A13C6286DCEF5AB6894F7B059D8BB
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/00Ubhej5_Cs_XBE7D4ukPqEyiwY.roa
Signing time: Wed 11 Oct 2023 09:55:55 +0000
ROA not before: Wed 11 Oct 2023 09:55:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 193.9.124.0/24 maxlen: 24
94.247.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:2a:13:c6:28:6d:ce:f5:ab:68:94:f7:b0:59:d8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Oct 11 09:55:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3451b85e8f9fc2b3f5c113b0f8ba43ea1328b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f0:ed:a9:2f:5f:74:6e:64:e8:1b:c5:6f:71:
46:ce:be:b5:c2:20:db:21:e1:f7:bd:2f:65:76:b8:
66:cb:85:88:69:b3:ee:4d:c8:c1:8d:64:de:92:52:
46:0f:c4:87:08:76:85:bb:5a:38:4f:e5:32:10:33:
ed:c7:f5:2d:66:6a:6d:09:f6:1d:79:84:b0:b1:32:
a9:e8:e7:15:b8:d0:d9:fd:2a:05:2f:21:8b:cc:a1:
ed:a8:d5:eb:67:7e:d0:67:b7:dc:a5:a9:00:b4:3d:
be:92:cc:2d:bb:e9:fa:1d:e4:e1:73:2a:fa:e6:4c:
12:16:1c:b5:9f:aa:d4:96:07:ed:fb:73:b3:31:ea:
ac:50:fa:4d:3a:04:76:c7:28:6f:f4:2f:00:d4:db:
7d:05:0a:b1:7c:b5:e0:ad:dc:ec:14:d2:10:43:62:
de:18:ef:14:82:ff:91:97:1b:6b:78:ef:f6:fc:f3:
19:e4:7a:f4:e8:ff:7e:84:89:4e:02:a7:50:aa:31:
53:9e:8d:fc:36:a1:17:35:74:c9:06:4b:b9:a9:eb:
b8:0c:e2:ef:c3:84:e5:f8:04:32:40:1e:e0:ae:9e:
3b:79:2d:3b:06:b7:22:bf:11:d0:03:c4:86:45:b3:
45:48:83:9e:9e:2f:da:3e:d8:b4:33:07:d9:40:be:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:45:1B:85:E8:F9:FC:2B:3F:5C:11:3B:0F:8B:A4:3E:A1:32:8B:06
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/00Ubhej5_Cs_XBE7D4ukPqEyiwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.139.0/24
193.9.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:cd:ab:c2:61:09:ec:9c:b5:78:2c:0a:a1:14:77:e1:60:89:
b5:8b:cf:bb:68:2f:e1:7e:09:90:f3:cd:24:a9:c6:44:4c:3c:
be:6f:3a:46:41:c5:b9:99:11:61:54:bd:11:26:87:f8:60:93:
63:56:be:ed:b0:bd:7d:a2:e9:0d:dc:02:55:78:23:2f:41:c7:
8b:cc:2b:33:5b:3c:be:b5:f3:b2:36:cd:20:6d:d5:81:38:40:
e0:db:01:74:3f:9c:8f:4d:29:59:44:50:1c:74:af:fa:b9:a1:
17:12:12:d1:c2:ea:5c:35:74:4c:db:bc:65:1e:bf:24:ec:71:
0c:5d:e3:88:14:89:6d:d6:21:7f:62:4c:68:f6:54:ec:ce:03:
e3:8d:65:61:85:f2:2f:9d:60:d2:12:0c:80:99:28:01:9e:44:
ff:ed:ec:83:0d:65:9d:ab:99:ea:68:d3:67:44:a1:6f:ee:59:
fc:e9:3b:c1:3f:10:76:38:0f:05:e6:d5:5d:f5:a4:c3:8e:80:
bd:70:03:65:44:33:49:a0:12:57:14:e9:e9:87:f6:3d:db:c7:
96:35:86:9f:fb:7a:84:7b:c2:37:8a:04:81:7a:22:36:99:ad:
c7:75:1d:57:e8:93:3e:fe:a6:d1:1e:31:58:86:a3:be:68:e0:
56:ff:3c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:00 2024 by rpki-client on console-ams.rpki-client.org