Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/UIt2FDbw30UAoq5j7p1iPDOuHVQ.roa
File: UIt2FDbw30UAoq5j7p1iPDOuHVQ.roa (raw, json)
Hash identifier: pCdV504WS8ghNwmxKNhPmtg39pgFJRXqqifEkx0RUHY=
Subject key identifier: 50:8B:76:14:36:F0:DF:45:00:A2:AE:63:EE:9D:62:3C:33:AE:1D:54
Certificate issuer: /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial: 01856F42E28217EE5EEF2F510B6A5EE420F6
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/UIt2FDbw30UAoq5j7p1iPDOuHVQ.roa
Signing time: Sun 01 Jan 2023 21:35:32 +0000
ROA not before: Sun 01 Jan 2023 21:35:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34542
IP address blocks: 156.28.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e2:82:17:ee:5e:ef:2f:51:0b:6a:5e:e4:20:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Validity
Not Before: Jan 1 21:35:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=508b761436f0df4500a2ae63ee9d623c33ae1d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:61:23:53:e2:c1:81:1b:c9:e3:1c:c0:aa:a4:
85:19:a7:f0:d5:d3:c7:37:61:b0:04:22:90:4b:4b:
c6:98:29:18:3e:aa:9d:b0:09:1b:f0:87:31:0a:4d:
46:93:63:f7:fa:cc:e1:3a:57:0b:a3:f1:fe:8a:0f:
89:41:79:d4:c7:83:bb:34:29:00:31:88:89:ce:80:
99:83:72:7d:12:bb:9d:92:2e:b8:3c:51:15:6d:5b:
17:2e:7e:76:fa:ca:01:59:b7:f2:40:ac:92:c4:3a:
b2:ab:c6:5a:bb:c9:38:cd:f1:cf:86:09:c2:1d:1f:
ae:d6:6e:01:de:97:19:f6:26:25:6c:50:cd:71:89:
07:63:d2:8c:8f:60:40:c0:5b:4e:b8:a0:47:12:55:
10:3a:9f:95:3c:19:0c:90:f9:cf:5b:4b:fb:17:f5:
b3:7e:d5:b0:c4:46:60:86:9a:0a:63:8f:f6:78:47:
3f:2f:ec:67:ad:40:cf:72:8a:ce:96:55:c1:cf:9b:
16:6f:5a:f7:31:0a:48:d0:c7:1b:3b:cb:00:31:5a:
38:38:a1:8e:32:ea:a9:11:3e:89:e9:77:e5:24:1a:
71:27:6d:00:98:47:9e:70:f8:39:b2:22:7d:a8:de:
4b:1a:92:24:dc:66:8c:8b:5b:7d:db:da:4a:7e:96:
51:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8B:76:14:36:F0:DF:45:00:A2:AE:63:EE:9D:62:3C:33:AE:1D:54
X509v3 Authority Key Identifier:
keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/UIt2FDbw30UAoq5j7p1iPDOuHVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.28.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:49:a9:2c:8c:9c:cd:d7:ef:25:af:df:1f:6d:6b:83:8e:ac:
07:66:21:67:2a:00:c8:f9:35:9e:bf:fe:20:db:55:ff:8d:19:
77:8a:4f:47:38:21:a8:50:ee:60:87:b4:a1:10:01:18:c6:0e:
70:71:29:ef:5e:f4:23:31:9b:1a:ba:c2:4b:42:bf:4d:10:88:
63:5a:c9:03:10:8c:42:dc:e1:6c:fe:67:d1:b1:6a:da:3d:26:
d0:0f:a2:18:2e:e8:65:8c:0d:c4:79:ee:fa:0c:ad:a3:6a:f9:
44:69:8b:06:44:c3:96:58:60:71:85:39:04:97:cf:08:0e:42:
1e:f8:b2:a5:6f:04:a4:32:08:d1:e8:1f:fe:70:65:69:2c:ea:
00:df:17:27:0d:36:41:f3:d9:c4:e0:16:d4:d8:86:59:e4:07:
18:c4:78:e7:5e:bc:cf:b9:65:53:ab:6c:4f:39:13:09:9f:89:
d6:1d:56:d4:95:af:7b:6c:2f:90:89:99:12:f8:69:a2:78:3a:
eb:aa:2c:dc:36:c5:da:6e:cc:8f:1a:c9:67:f0:79:d2:9b:93:
85:a4:34:5b:42:65:dc:96:b3:ce:8d:5a:92:71:48:df:aa:88:
c9:aa:54:28:97:4f:57:aa:da:fd:c2:65:67:55:4e:12:28:dd:
21:b5:9b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:40 2024 by rpki-client on console-fra.rpki-client.org