Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/uVGRGMdPwYRfO1uWE0xn-dfY8ZM.roa
File: uVGRGMdPwYRfO1uWE0xn-dfY8ZM.roa (raw, json)
Hash identifier: ssUP0vs4JcxMRoLA+D82beeD9plEJpukYQVWuaAzt8Q=
Subject key identifier: B9:51:91:18:C7:4F:C1:84:5F:3B:5B:96:13:4C:67:F9:D7:D8:F1:93
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0187C8C0A6B6C88B67539B43C9662CD7EBA4
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/uVGRGMdPwYRfO1uWE0xn-dfY8ZM.roa
Signing time: Fri 28 Apr 2023 16:44:41 +0000
ROA not before: Fri 28 Apr 2023 16:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198711
IP address blocks: 195.88.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Aug 2023 10:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c8:c0:a6:b6:c8:8b:67:53:9b:43:c9:66:2c:d7:eb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Apr 28 16:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9519118c74fc1845f3b5b96134c67f9d7d8f193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:03:aa:91:f1:72:f6:29:d1:a6:e3:7b:8a:
45:0e:29:dc:13:d6:55:d2:37:d7:58:2b:56:95:fb:
32:82:a3:87:28:4f:38:06:3b:4a:a0:74:16:1e:3b:
ae:4a:08:0e:ff:f0:51:d4:49:89:92:e6:84:57:7b:
bb:d3:d6:59:5b:46:cb:31:23:30:98:15:d9:4f:8f:
72:68:49:30:66:6e:95:d1:bd:11:4e:eb:8f:6e:01:
2f:c6:c2:2d:dd:b8:45:68:44:4c:49:b5:ff:dd:d7:
eb:5d:a3:54:98:a6:0e:01:91:a1:1e:56:6a:6f:42:
84:62:48:22:b3:b1:80:c8:83:f3:a5:4e:40:0c:35:
f7:62:c0:5a:56:09:7b:24:75:80:a0:e6:b8:6b:5f:
06:96:11:df:03:dd:ec:ac:1d:3d:cc:58:a7:37:8f:
f4:0d:b2:1c:92:6a:ad:9d:8d:1f:53:33:54:17:a2:
99:58:27:7d:9d:18:ff:f8:de:db:05:0e:e8:af:69:
0e:d6:ca:55:8c:d4:91:63:99:08:b3:cb:a6:04:87:
bf:5e:22:cd:30:16:dc:a9:16:b1:54:0d:dc:00:28:
41:42:ba:b1:76:a3:24:6e:84:be:58:06:fd:5e:76:
92:d8:e6:7a:c8:9a:40:f5:d3:2b:0b:a6:22:f0:96:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:51:91:18:C7:4F:C1:84:5F:3B:5B:96:13:4C:67:F9:D7:D8:F1:93
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/uVGRGMdPwYRfO1uWE0xn-dfY8ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.227.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:1d:ae:86:c4:ed:68:a6:8e:dc:26:73:78:46:27:83:64:e0:
ef:9a:22:d6:8e:c9:cc:df:01:d7:5f:bd:a4:d4:50:c2:01:e6:
b7:72:84:1e:2f:6a:ec:aa:47:a2:16:a2:98:fa:44:8d:61:f5:
b7:df:7d:b8:40:a0:21:13:1a:27:19:b9:67:76:d5:2e:fd:c2:
ae:17:dc:47:70:a2:be:f5:37:4c:0a:37:70:63:d1:0d:34:b0:
05:d2:11:54:c7:ee:a7:d6:d9:73:ba:51:9b:84:5b:c4:59:0b:
9d:76:2a:03:6e:ab:fa:b6:24:0a:aa:30:a0:47:ac:62:dc:ef:
4c:ac:a8:db:7e:3c:48:0c:14:4d:2b:4c:95:ba:f2:68:95:d5:
11:16:36:16:a1:65:95:e0:a8:cd:5f:12:8f:e8:01:0a:46:b7:
b7:52:b5:fc:f2:0a:3a:1b:78:d8:5b:99:0e:99:33:8c:f7:9b:
c8:bf:02:e0:34:de:b3:76:cb:2e:5e:da:e3:06:3b:96:31:d8:
76:83:40:b1:02:a8:27:15:4f:46:8b:a8:36:c3:37:3c:5f:30:
ca:b3:7c:02:42:19:e5:1d:1c:9d:7b:02:b6:aa:42:3f:88:bc:
04:44:73:82:08:cd:b3:8f:32:1c:99:d9:66:96:a6:01:a1:d9:
18:1a:92:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org