Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ULKHSbkSB_l6l0fJG9jm_0EeXCU.roa
File: ULKHSbkSB_l6l0fJG9jm_0EeXCU.roa (raw, json)
Hash identifier: InQx5mGLId62FCEoomKc7hfgvw8ot26kvFJAxjVpaD8=
Subject key identifier: 50:B2:87:49:B9:12:07:F9:7A:97:47:C9:1B:D8:E6:FF:41:1E:5C:25
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018570399D8EEA160E3EA560F35A9930D347
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ULKHSbkSB_l6l0fJG9jm_0EeXCU.roa
Signing time: Mon 02 Jan 2023 02:05:02 +0000
ROA not before: Mon 02 Jan 2023 02:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5394
IP address blocks: 195.180.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:9d:8e:ea:16:0e:3e:a5:60:f3:5a:99:30:d3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 02:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50b28749b91207f97a9747c91bd8e6ff411e5c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:34:b4:55:1f:93:9a:32:56:ae:b7:cc:d0:7f:
51:15:43:80:69:20:34:0b:62:95:c3:e7:8f:32:f5:
2f:fa:ba:4a:48:31:62:32:87:23:5d:66:cd:3d:35:
de:47:23:dc:10:70:75:b2:a0:45:13:ce:79:35:f3:
e6:14:24:a6:86:37:47:ef:51:02:c2:50:94:53:d0:
0f:ce:d6:1d:30:e9:dc:37:bf:0e:dc:66:92:27:c3:
cf:82:01:d4:63:ac:ba:e1:54:7e:14:73:5c:71:4f:
ef:1f:da:78:65:e0:d3:87:8c:59:82:dd:3a:8a:76:
0a:c1:40:33:61:cf:50:7d:69:25:52:ac:25:5d:3f:
d5:b5:10:98:e3:94:78:2a:0e:6b:83:bc:c9:c8:db:
2d:18:ac:50:73:9b:c3:98:9b:c2:f4:ca:9d:fe:28:
0d:45:28:57:64:65:cb:17:5e:c4:61:72:84:07:b8:
b7:59:f1:5f:8b:5d:b4:b0:4b:b2:9a:e5:9f:b4:00:
0b:7b:10:07:07:83:fa:01:0d:2a:82:c5:ab:0a:fa:
2e:35:12:c4:f3:c5:8e:9d:66:2f:f7:b1:e9:2d:1a:
db:69:ae:6a:31:77:9e:d6:1f:8a:6f:0c:ad:a9:d7:
35:4e:02:6d:f7:b1:3c:d5:29:dc:a6:d0:18:85:4c:
a8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B2:87:49:B9:12:07:F9:7A:97:47:C9:1B:D8:E6:FF:41:1E:5C:25
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ULKHSbkSB_l6l0fJG9jm_0EeXCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.139.0/24
Signature Algorithm: sha256WithRSAEncryption
29:58:94:84:d5:91:7b:e3:45:42:ea:c0:b2:33:d2:76:25:0f:
67:87:19:1c:88:73:05:2f:67:33:4a:c6:50:e0:a4:78:ae:c6:
40:ac:53:52:54:da:07:e7:5c:ca:d7:82:09:d3:47:49:07:36:
6a:ff:01:57:4b:e7:3f:00:09:af:16:34:3a:ef:12:61:20:a3:
74:af:a9:01:33:3f:0f:c2:2d:ab:b0:89:bd:c6:01:f6:53:1d:
af:9d:e0:87:8f:9e:bc:0c:fb:1c:d8:6b:a0:c1:c2:f4:54:75:
8f:ab:e7:87:0e:d3:80:1c:80:d5:42:92:cf:93:72:06:86:0f:
32:60:c0:a3:1e:16:d1:e1:76:d3:f8:f6:81:05:a9:67:97:7f:
92:29:97:10:d3:c9:22:aa:a6:1d:b6:a0:78:6a:5c:1e:17:aa:
8f:6a:28:b0:0a:68:57:51:b7:c0:72:a5:6a:b9:82:b8:95:38:
8e:78:28:af:3d:ed:c6:9b:21:bc:f2:23:2c:38:8a:53:64:63:
93:58:1d:29:f1:a8:8e:9c:77:43:b8:d3:5b:07:c2:4f:3b:86:
5f:b4:c0:df:a7:c2:f7:25:b0:f9:23:eb:c8:45:48:64:06:d6:
26:9c:8f:cb:a8:c3:ee:af:e2:7f:f2:b3:50:92:27:59:99:86:
a4:46:20:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:12 2024 by rpki-client on console-fra.rpki-client.org