Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/ubwrIzOxy0q24caGhzF00usFYEc.roa
File: ubwrIzOxy0q24caGhzF00usFYEc.roa (raw, json)
Hash identifier: siD9qWTeJrCT7GEfgUQ3xeeVSOFpkAjas//uV7dFh9A=
Subject key identifier: B9:BC:2B:23:33:B1:CB:4A:B6:E1:C6:86:87:31:74:D2:EB:05:60:47
Certificate issuer: /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial: 01925C9E4340CE758D04EB7DBACA65E08A46
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/ubwrIzOxy0q24caGhzF00usFYEc.roa
Signing time: Sat 05 Oct 2024 12:18:48 +0000
ROA not before: Sat 05 Oct 2024 12:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6205
IP address blocks: 185.73.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 15:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5c:9e:43:40:ce:75:8d:04:eb:7d:ba:ca:65:e0:8a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Validity
Not Before: Oct 5 12:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9bc2b2333b1cb4ab6e1c686873174d2eb056047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:24:a4:e1:15:d5:02:d2:75:57:44:01:46:
d0:9a:a6:46:75:9f:38:04:fb:82:aa:1f:a0:f4:1d:
36:25:b2:38:ac:34:c5:26:2f:2b:13:69:bd:81:24:
9d:40:45:50:58:3c:48:f1:a1:d4:5a:a2:4e:7b:c3:
5c:99:8f:c9:76:c5:0b:8b:f7:d4:72:6e:3a:60:fd:
59:7c:1f:31:c9:3e:d4:f1:5c:e8:fc:2c:d1:fc:56:
87:c6:70:45:00:79:9c:e6:ef:3b:24:66:bd:9c:42:
3c:75:d7:4c:72:e1:a9:af:b4:d8:89:13:06:80:a8:
c1:e6:05:97:74:71:d8:ea:fe:b5:bb:93:04:ef:ac:
0a:fb:c7:95:7c:6b:03:ef:a5:f5:19:6c:24:e2:e3:
ef:f7:72:51:7e:59:5c:27:b4:02:f1:3b:2a:49:2b:
75:d4:cd:f2:42:44:f0:33:44:3d:3c:58:4d:e5:8f:
c0:32:15:a5:a2:1e:ef:7f:d9:5b:f6:3d:ff:bc:ef:
ab:69:a9:e5:33:af:3b:b4:ca:45:ad:02:0a:25:37:
18:3b:56:37:72:96:98:ea:c6:a3:ce:99:46:dd:58:
64:43:78:6f:15:7f:06:0f:ff:28:6e:89:8f:d2:07:
32:31:2c:9e:30:1f:48:99:bc:cf:15:30:ff:1b:d1:
56:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BC:2B:23:33:B1:CB:4A:B6:E1:C6:86:87:31:74:D2:EB:05:60:47
X509v3 Authority Key Identifier:
keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/ubwrIzOxy0q24caGhzF00usFYEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.128.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:89:ea:b5:01:40:10:1a:3f:53:1c:78:d0:f2:0e:23:0c:d9:
b3:48:db:14:a6:ab:59:70:c7:d5:57:e8:42:d1:6e:42:01:4a:
6e:ff:6a:ee:9c:e1:88:1c:9f:ea:c3:6a:26:17:be:48:e3:6c:
06:4d:8d:72:e0:64:9c:0f:98:10:6b:da:d3:12:69:a1:c5:33:
3d:f5:51:01:c9:66:d5:1b:89:19:ba:84:5d:e4:5d:46:47:2c:
50:51:22:07:11:10:33:30:81:9a:a3:00:5a:98:e1:d5:53:89:
4f:79:af:0c:73:81:96:71:a5:36:5f:23:d8:c3:8d:33:63:63:
be:98:26:b0:60:e1:59:f8:c2:97:b5:cf:1a:9a:bd:ae:75:af:
ab:f5:3f:e7:11:95:43:a7:15:91:a0:66:2a:75:9e:0c:68:41:
a2:d8:30:80:4c:e5:cb:84:76:f1:99:10:dd:e9:83:5d:fa:2e:
d0:37:81:b7:40:2a:7e:a3:c8:f8:df:a5:d0:cd:93:63:ef:a2:
ba:58:44:1c:dc:8e:32:41:14:97:68:70:7f:86:f0:c2:1e:bc:
7f:67:e9:55:3c:27:a0:3c:c3:85:89:08:fd:3f:c1:b6:ac:75:
11:23:05:c8:8d:6c:51:8e:2f:3e:42:3f:57:2f:77:c3:75:8f:
09:2c:41:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 20:37:57 2024 by rpki-client on console-fra.rpki-client.org