Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/uunbCoITbPt4sbDF7i-1Gk3Dn-0.roa
File: uunbCoITbPt4sbDF7i-1Gk3Dn-0.roa (raw, json)
Hash identifier: gzytXkRSsEZPHQvsEUtSncBFY7IfRoVyHMblOq2N7wQ=
Subject key identifier: BA:E9:DB:0A:82:13:6C:FB:78:B1:B0:C5:EE:2F:B5:1A:4D:C3:9F:ED
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 01856CF8361CE875469BE5C9C97E7DAC46F7
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/uunbCoITbPt4sbDF7i-1Gk3Dn-0.roa
Signing time: Sun 01 Jan 2023 10:54:44 +0000
ROA not before: Sun 01 Jan 2023 10:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205196
IP address blocks: 185.226.93.0/24 maxlen: 24
185.226.94.0/24 maxlen: 24
185.226.92.0/24 maxlen: 24
185.226.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:36:1c:e8:75:46:9b:e5:c9:c9:7e:7d:ac:46:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Jan 1 10:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bae9db0a82136cfb78b1b0c5ee2fb51a4dc39fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:46:72:39:b9:af:c6:8f:9f:e2:00:42:35:25:
45:0d:49:81:f9:a7:c9:04:57:40:b0:2c:b8:8a:a3:
2d:3c:2a:93:49:6d:47:20:fa:0a:6e:1e:10:fb:a2:
6d:24:93:2b:ea:12:39:ed:44:61:df:4b:8b:a1:87:
03:bd:90:ee:1b:cc:e9:d0:b9:84:0d:ce:fe:1a:70:
1a:ec:88:42:a0:7b:a4:5c:c9:ae:3b:bc:a4:e9:80:
9b:a5:0c:c3:ce:b0:7d:5d:f0:73:cb:36:aa:d5:c0:
35:30:1f:67:2b:79:b3:2f:f3:4b:a7:1b:c9:b2:dc:
49:8d:bd:d8:35:7e:aa:8c:d5:af:f9:92:62:c9:9a:
92:31:11:4a:d1:06:9a:cc:0f:6d:32:34:2c:0e:a4:
fe:62:96:84:51:30:f6:7e:7e:fd:cc:64:8e:77:f9:
1a:4b:77:66:0a:14:e3:96:c3:1c:cd:b3:7c:7b:20:
dd:d6:8d:ea:d6:50:a6:fd:4e:34:c9:6f:f7:41:71:
9a:79:50:2e:c4:77:16:0c:41:b5:63:07:87:5a:0e:
1d:f7:bf:59:e1:9b:03:67:d5:32:79:c4:37:70:c4:
54:a6:7a:c2:76:e5:7b:88:4b:3f:b6:88:eb:1b:67:
16:66:bb:7b:f2:bc:2a:cb:4d:36:60:aa:c5:d2:24:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E9:DB:0A:82:13:6C:FB:78:B1:B0:C5:EE:2F:B5:1A:4D:C3:9F:ED
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/uunbCoITbPt4sbDF7i-1Gk3Dn-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.92.0/22
Signature Algorithm: sha256WithRSAEncryption
96:72:76:62:d2:d7:2c:b7:78:a0:0c:72:a8:43:05:6b:c6:c7:
c7:b9:e0:2f:dd:4e:2e:b0:d9:b7:dc:d6:e3:ce:4a:80:19:0a:
e4:c0:44:8c:4a:cc:1b:81:82:05:5e:0f:e7:97:1f:49:a3:5a:
ee:bc:9c:83:d7:18:b6:d2:9a:f2:58:23:14:78:00:35:8e:ab:
c7:28:32:6e:65:d4:7e:7a:37:d8:ca:94:6f:06:69:7b:af:b7:
bc:ed:aa:3a:97:b9:28:cc:b8:59:4c:db:e4:ed:ab:d5:ed:c9:
6e:06:0b:6b:dc:1f:a3:44:70:08:de:ba:10:16:55:97:06:8d:
79:15:4a:20:6c:aa:d3:ef:38:49:9d:d2:c2:02:4f:8d:21:58:
bd:30:4f:03:63:d8:b3:59:ee:6b:81:6a:7b:53:77:c7:06:a1:
73:72:76:94:8d:92:75:50:80:9b:df:5d:3e:2b:78:24:80:ee:
8f:41:a5:3e:c3:ba:ec:98:5e:61:9c:2a:83:8f:c9:59:e1:7c:
43:85:a9:45:be:9b:d8:8f:14:d9:e5:8e:5e:4a:99:62:ff:78:
9a:a1:70:61:b8:18:ab:ff:6d:f5:c2:5e:99:e9:0d:67:f8:9e:
b7:51:3d:bc:fb:33:2b:92:e2:65:4e:b3:f6:42:80:d9:f1:04:
2c:3d:70:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:44 2024 by rpki-client on console-fra.rpki-client.org