Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/UalSsRK-qVDonOYjWPKXbkJ6f44.roa
File: UalSsRK-qVDonOYjWPKXbkJ6f44.roa (raw, json)
Hash identifier: BkAjNv0SbxxpP3nBs4UP3mr2CIo524g2e5zqZyedaGc=
Subject key identifier: 51:A9:52:B1:12:BE:A9:50:E8:9C:E6:23:58:F2:97:6E:42:7A:7F:8E
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 01856C25E99EAAB658D43811BBD04DE1ED51
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/UalSsRK-qVDonOYjWPKXbkJ6f44.roa
Signing time: Sun 01 Jan 2023 07:05:01 +0000
ROA not before: Sun 01 Jan 2023 07:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61003
IP address blocks: 185.39.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:e9:9e:aa:b6:58:d4:38:11:bb:d0:4d:e1:ed:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Jan 1 07:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51a952b112bea950e89ce62358f2976e427a7f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d5:00:d9:0a:75:ad:a6:88:30:b4:ac:93:90:
b0:99:aa:9a:39:59:07:45:da:b7:65:08:30:89:34:
d7:10:68:f7:54:b9:f1:b8:09:db:b1:04:0e:6f:32:
3a:c4:68:08:f3:72:5c:f8:70:5d:ae:f9:63:77:62:
3d:31:d5:eb:27:27:25:7f:3d:9f:b3:de:33:b3:87:
f6:e3:16:33:cd:ae:df:d4:07:ba:c4:55:61:8c:ef:
43:be:d5:6f:7b:3a:91:3e:37:55:05:bb:36:05:3e:
59:e8:7c:0c:88:a6:51:25:bc:4c:18:e8:2a:41:cf:
b6:e0:a9:fb:9d:72:74:c4:00:81:51:5f:35:57:79:
34:36:05:34:7f:c4:f0:be:41:43:da:a1:d3:56:18:
51:97:54:b8:b0:bd:5e:0d:d8:4a:74:60:a2:ea:63:
87:0b:36:aa:21:cb:fb:78:62:d1:c9:fb:bb:6e:a4:
11:e2:1c:ba:55:6a:cd:aa:1d:0d:d8:11:b7:b8:9f:
13:6c:b9:01:ff:7d:94:8c:e3:19:3d:0b:9e:4f:7d:
3f:81:a9:af:3c:47:29:15:1a:ed:60:9f:f2:da:b0:
1a:5b:6d:ec:e4:8a:19:dc:6c:c0:9a:1a:42:fb:96:
3d:03:16:36:67:a9:7a:d0:da:4f:f9:9e:12:f7:96:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A9:52:B1:12:BE:A9:50:E8:9C:E6:23:58:F2:97:6E:42:7A:7F:8E
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/UalSsRK-qVDonOYjWPKXbkJ6f44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.51.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e9:22:67:78:99:31:c6:e7:d8:8b:44:8a:f6:25:6e:b3:d4:
92:7e:48:db:16:7d:04:39:74:a2:b6:15:d3:fa:62:c3:ea:35:
f4:4d:fb:52:b3:b3:33:6c:6b:03:1e:57:59:47:66:fa:97:7f:
b0:48:66:b6:e4:c7:6e:2b:42:d5:3f:68:7b:5d:1b:08:c2:65:
ce:5f:97:2b:b9:1e:f2:09:0e:b0:49:f2:36:a9:69:1b:21:bf:
d2:da:7c:af:fd:15:ee:02:9c:33:4e:28:38:b5:c3:b5:e2:ac:
6e:07:ba:45:13:9a:44:16:73:e0:bf:bb:98:d3:db:88:02:04:
d2:ea:26:74:25:14:04:aa:82:47:3d:7c:66:73:35:39:c9:bb:
ce:74:a6:63:30:04:b4:ca:1a:ec:4d:a5:83:52:88:a9:62:3e:
8d:15:13:4b:a6:4f:61:0f:b9:92:58:21:cc:f5:31:3f:7d:96:
28:7a:82:d1:81:03:e4:9e:1d:27:b6:e8:0c:31:ac:1a:8e:56:
89:61:3c:90:b5:76:3f:49:6d:db:e7:29:b4:e3:ea:84:ff:ff:
40:ec:a0:17:f8:88:da:eb:5f:ce:71:51:84:f4:94:d9:e8:3c:
07:d0:57:63:f3:24:24:57:0d:7b:40:e0:d6:21:ef:28:2c:39:
7c:6d:cc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:55 2024 by rpki-client on console-fra.rpki-client.org