Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/UJSns2GlghjZ64XVz-G8Z8XjYeY.roa
File: UJSns2GlghjZ64XVz-G8Z8XjYeY.roa (raw, json)
Hash identifier: eNtLWALJ8zOCOmd8w3ZGTrMLSW8OjJcR4FiXfNSAW1c=
Subject key identifier: 50:94:A7:B3:61:A5:82:18:D9:EB:85:D5:CF:E1:BC:67:C5:E3:61:E6
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 018572034BFCBA20781E2F01DA72DE8DAD04
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/UJSns2GlghjZ64XVz-G8Z8XjYeY.roa
Signing time: Mon 02 Jan 2023 10:24:56 +0000
ROA not before: Mon 02 Jan 2023 10:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15506
IP address blocks: 62.169.4.0/22 maxlen: 22
62.169.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:4b:fc:ba:20:78:1e:2f:01:da:72:de:8d:ad:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Jan 2 10:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5094a7b361a58218d9eb85d5cfe1bc67c5e361e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:e7:3b:26:05:fe:d5:06:2c:1a:b2:ab:48:
74:51:bd:d9:9a:e5:d9:a0:4d:a2:1f:2e:e3:53:7e:
28:7a:6a:82:fd:2f:2c:d3:52:b9:7c:9c:3f:a3:fb:
df:90:4c:56:f8:21:cd:e6:4f:98:0d:0a:19:3b:1f:
49:8f:4a:91:5a:60:ea:a5:05:24:40:3b:3a:85:db:
6d:7e:7c:98:e9:b9:d6:9f:52:ac:e6:e3:75:db:eb:
1e:9b:70:e3:9e:36:be:1e:0b:fa:30:c3:36:d5:e2:
01:4a:13:87:13:ea:89:19:21:95:c4:4f:06:36:e6:
07:21:ea:73:60:36:5a:13:11:9f:e6:ec:07:74:26:
40:3d:71:12:60:91:30:ea:0d:2e:62:33:b5:78:8c:
4c:03:8a:dd:f9:fe:6d:84:4a:6b:9d:ec:b3:64:37:
3e:41:63:f1:fd:ff:f5:94:e0:fb:6c:2f:ad:36:ec:
db:20:45:21:69:4e:6d:b5:45:3e:00:9e:2c:75:df:
df:3f:69:c7:ab:09:10:a4:be:91:b2:a4:9a:5e:46:
f4:c5:66:2a:15:e9:13:76:09:a7:d5:63:a7:c8:a1:
5b:78:1b:b3:cc:c8:e2:a5:2d:33:33:e5:4e:a5:21:
97:01:e8:ea:3c:c9:50:9e:f2:72:78:aa:f7:18:cc:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:94:A7:B3:61:A5:82:18:D9:EB:85:D5:CF:E1:BC:67:C5:E3:61:E6
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/UJSns2GlghjZ64XVz-G8Z8XjYeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.0.0/21
Signature Algorithm: sha256WithRSAEncryption
bb:b3:7a:02:df:61:ad:d3:21:e8:cd:b5:56:47:bb:b0:13:6a:
22:70:7c:b5:ae:74:96:d8:a8:56:e5:39:dd:6d:fd:0c:16:ca:
ca:7a:22:96:16:92:df:65:47:b0:f9:bb:44:dc:b3:5c:f8:12:
9e:19:6a:55:74:5c:22:42:4b:b1:14:a8:1f:4d:96:74:ac:ce:
f9:24:84:67:b0:16:f8:c4:51:db:06:ca:28:60:be:73:71:bc:
fb:e6:1b:ad:3f:5b:c8:8f:91:3d:51:44:32:8b:1c:d5:28:d8:
7b:be:ff:8c:e7:74:61:1b:6c:ce:d7:96:33:75:13:b4:b1:fa:
d6:a1:e4:8f:04:30:36:de:a3:91:6e:e0:36:d5:c9:cc:11:80:
a3:e9:74:cb:1c:65:9c:37:9f:96:86:21:af:28:09:05:ab:eb:
c0:5b:80:60:de:36:03:30:78:18:a1:60:e5:6a:07:53:f7:3e:
f3:88:6c:bc:66:18:96:b2:72:97:2e:d2:1b:90:85:8e:88:28:
93:3f:cf:df:ba:51:d0:fa:8b:37:9a:8b:ce:e2:06:40:87:60:
d7:4f:25:f3:36:54:d0:5a:fa:a1:ce:63:06:a6:ec:7f:61:0a:
28:1c:ca:90:b2:d9:63:18:33:44:44:88:c1:27:1a:82:27:2b:
ab:fc:28:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:11 2024 by rpki-client on console-ams.rpki-client.org