Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ufDxHIPBRJEwXxLIHg6GYAXTDgg.roa
File: ufDxHIPBRJEwXxLIHg6GYAXTDgg.roa (raw, json)
Hash identifier: jZ2KipI1zvlbsHoWb3teeSd8L6CkAbFWg5ZEwYDcp/4=
Subject key identifier: B9:F0:F1:1C:83:C1:44:91:30:5F:12:C8:1E:0E:86:60:05:D3:0E:08
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0185D04CE182B91D5ECFBAF0CFCF86968227
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ufDxHIPBRJEwXxLIHg6GYAXTDgg.roa
Signing time: Fri 20 Jan 2023 17:49:37 +0000
ROA not before: Fri 20 Jan 2023 17:49:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204229
IP address blocks: 178.213.180.0/22 maxlen: 22
91.238.40.0/23 maxlen: 23
91.245.188.0/22 maxlen: 22
64.43.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Oct 2023 12:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d0:4c:e1:82:b9:1d:5e:cf:ba:f0:cf:cf:86:96:82:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 20 17:49:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9f0f11c83c14491305f12c81e0e866005d30e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:0f:bd:14:15:51:69:10:6d:d1:a8:11:9d:
c5:9d:f4:36:be:1b:fe:01:4f:9a:ff:9b:7b:1d:a4:
fa:52:f3:74:1b:c9:5e:22:9b:68:51:54:e9:7b:a9:
08:4e:08:95:01:55:3e:63:00:f4:5f:81:a5:9d:01:
a2:77:e3:2e:38:7b:c6:47:80:a6:ae:e9:0e:be:e9:
bc:f6:e2:e5:5f:14:9a:98:3f:db:e3:e1:15:f1:cd:
36:f4:a8:d4:33:1b:95:e2:4f:dc:b0:13:31:43:2c:
c1:92:05:e6:28:c9:42:5c:81:7b:d7:a9:5c:e4:d1:
c5:91:30:2f:a7:86:f8:28:79:12:12:d8:be:7d:e6:
0c:53:2a:eb:49:56:e7:7f:4e:5d:9e:88:cd:8e:02:
47:45:7e:b1:c1:d4:06:2a:ac:35:e0:16:e4:2c:57:
e3:86:55:41:60:b4:0c:81:84:c9:24:56:cb:0c:0e:
c2:38:cc:6b:c7:23:79:d8:01:97:52:89:4f:33:13:
b2:24:95:a2:09:64:52:b4:a0:d0:ed:06:36:1f:6c:
87:ca:23:83:a1:4b:fb:96:75:0d:02:27:83:d6:f1:
e7:88:5a:76:5b:23:c9:bc:75:e5:4f:a5:20:6c:78:
1f:7a:a3:65:d7:86:45:4a:d6:4a:0c:4c:f4:3f:38:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F0:F1:1C:83:C1:44:91:30:5F:12:C8:1E:0E:86:60:05:D3:0E:08
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ufDxHIPBRJEwXxLIHg6GYAXTDgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.43.73.0/24
91.238.40.0/23
91.245.188.0/22
178.213.180.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:4b:67:d4:e8:e6:fb:94:64:e6:df:1e:42:86:7a:c7:bb:3e:
47:a2:34:e7:8f:8e:f6:56:50:8b:00:b9:c5:ce:16:d3:1b:26:
d9:12:db:99:75:89:d5:98:2a:83:fe:92:07:a1:4b:3a:2c:60:
da:8e:57:46:29:44:45:61:01:25:8b:24:c2:ba:c8:8e:2d:2d:
ac:b4:22:29:1f:c2:74:89:bd:51:d8:6a:0e:a4:c4:64:6b:ac:
e9:09:8e:9e:5c:f6:01:b2:e8:48:5a:3b:ac:ac:8d:25:a3:a1:
6b:07:b5:c5:26:18:4f:83:b4:e6:e0:44:22:b7:43:ab:5c:31:
9f:3c:9d:a8:2d:85:38:50:ad:6f:7f:0a:f9:a7:3a:46:85:a7:
f8:77:ea:68:6c:6c:b6:ce:74:74:77:35:4f:00:60:00:83:85:
3b:08:0a:7d:a1:c2:74:4a:c6:00:bc:9d:cf:31:4b:00:0a:45:
9d:8b:e5:e1:23:37:62:aa:97:28:66:c1:1e:57:55:dd:65:04:
53:53:9c:7e:16:1e:16:24:8f:9a:53:72:d1:f4:6e:f6:c8:5f:
2d:96:c4:34:48:c3:8f:f9:51:80:71:9a:87:81:c3:37:c9:3c:
24:32:bc:83:a6:89:fd:4d:f9:60:1e:1a:95:5a:7b:60:cf:d7:
b5:ad:36:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org