Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/uz7_ucXiqR3EBF_bUuyEww41YxE.roa
File: uz7_ucXiqR3EBF_bUuyEww41YxE.roa (raw, json)
Hash identifier: UmMreHbraRNBjNBGQZP1Qu8u/fWbSKRz6iFaEiKDN+k=
Subject key identifier: BB:3E:FF:B9:C5:E2:A9:1D:C4:04:5F:DB:52:EC:84:C3:0E:35:63:11
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018C11FF8CB96DDACEF21B87022359D801C0
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/uz7_ucXiqR3EBF_bUuyEww41YxE.roa
Signing time: Mon 27 Nov 2023 18:16:49 +0000
ROA not before: Mon 27 Nov 2023 18:16:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47516
IP address blocks: 188.93.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 18:35:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:11:ff:8c:b9:6d:da:ce:f2:1b:87:02:23:59:d8:01:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 27 18:16:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb3effb9c5e2a91dc4045fdb52ec84c30e356311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:3c:3b:51:d8:89:e4:4e:68:f1:a6:3d:01:
d2:d6:b4:b7:f8:3e:e9:a3:36:83:90:13:9c:1e:0a:
02:a7:d4:61:fa:56:e2:34:fb:c9:77:7c:51:b7:64:
d5:40:2e:cb:25:ed:0a:24:39:6b:42:8a:90:da:42:
95:16:0d:fa:9f:cd:d9:d1:49:ac:bb:bd:06:70:7f:
91:e8:3f:1d:1f:93:ae:6a:94:ea:43:2f:75:c4:39:
83:48:d0:4c:30:f9:e9:36:1f:94:08:67:d9:6d:3d:
40:40:89:dd:c2:c9:12:cc:c0:79:7d:ef:ba:d1:da:
b9:d5:79:ab:62:ec:87:e3:34:00:d5:63:78:9b:c3:
eb:f9:b3:5f:2e:57:88:b7:b4:2c:9c:3c:36:5b:97:
f6:4a:6c:31:0c:6a:b6:86:f8:08:bc:56:19:90:14:
7d:2d:af:1a:9c:9f:b6:9a:10:70:74:61:e4:63:8a:
5a:5e:7b:a7:84:00:cd:d7:82:d5:6d:3c:23:f5:43:
5c:0d:97:cd:f5:39:c8:8b:39:fc:6c:2d:fe:a1:2b:
f5:6d:a9:09:75:0e:2f:fd:38:68:75:a4:8b:cf:9b:
2a:b2:b2:94:ef:32:a5:91:93:6c:4d:9c:46:f5:b3:
ed:02:30:50:a6:a0:ac:3b:5f:c8:e9:d8:04:ef:0a:
db:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3E:FF:B9:C5:E2:A9:1D:C4:04:5F:DB:52:EC:84:C3:0E:35:63:11
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/uz7_ucXiqR3EBF_bUuyEww41YxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.138.0/24
Signature Algorithm: sha256WithRSAEncryption
12:57:59:0f:ab:fc:d4:15:ca:43:cb:65:ec:0a:6f:aa:39:4d:
af:06:25:e4:3b:5a:4e:0c:9c:8d:8f:59:f3:d2:1d:c6:d5:4a:
50:97:58:b6:c2:3f:6e:b7:eb:63:ac:e8:a5:78:47:10:d4:d4:
3c:a0:a1:60:b4:df:b0:10:d9:63:a7:d3:43:5d:13:68:26:ee:
7b:51:47:30:79:db:ba:a1:e5:62:d7:c8:53:d2:db:78:68:75:
4c:22:d5:ab:af:d1:52:ab:f7:ff:68:7a:7c:d9:be:34:1b:cc:
41:18:9e:80:60:c2:9f:9d:a7:0d:50:b0:93:73:44:35:62:fe:
36:d9:57:56:10:74:97:33:a3:f3:63:52:31:4d:48:6a:1b:0d:
4a:22:d8:83:c5:38:bd:6f:cf:3a:14:1c:c6:be:d7:3b:e7:9d:
f9:b1:88:4c:f3:ef:ee:85:8e:1b:ab:50:7f:4a:77:38:a2:e9:
61:bb:45:ee:3a:91:7b:41:a7:bb:93:05:25:8e:e9:e3:1f:82:
6b:25:7c:9d:3e:fc:d3:4b:38:20:39:47:46:69:44:b6:b0:81:
82:4c:69:d8:ad:d3:5a:6f:54:25:ba:1d:7f:1e:72:9a:4d:cb:
fe:89:b2:47:46:ba:51:86:56:24:71:5f:15:7a:c1:8f:c4:2b:
8d:ea:65:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:19 2024 by rpki-client on console-ams.rpki-client.org