Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/UFQq7hbRSBMQcx1l4FOcgegZcbM.roa
File: UFQq7hbRSBMQcx1l4FOcgegZcbM.roa (raw, json)
Hash identifier: t0LhvynPH/f6IpJn+MXGtzo9l1lkkavXfj+ICAMqB+Y=
Subject key identifier: 50:54:2A:EE:16:D1:48:13:10:73:1D:65:E0:53:9C:81:E8:19:71:B3
Certificate issuer: /CN=888166463a1a301ca5b6eb98bddd07e397091986
Certificate serial: 018CC8014F3C81846A184EDE4E2544527540
Authority key identifier: 88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/UFQq7hbRSBMQcx1l4FOcgegZcbM.roa
Signing time: Tue 02 Jan 2024 02:29:38 +0000
ROA not before: Tue 02 Jan 2024 02:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9211
IP address blocks: 194.156.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:4f:3c:81:84:6a:18:4e:de:4e:25:44:52:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888166463a1a301ca5b6eb98bddd07e397091986
Validity
Not Before: Jan 2 02:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50542aee16d1481310731d65e0539c81e81971b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:80:6d:cf:79:a7:8e:a5:89:e0:2e:47:52:
f5:5d:96:66:f0:90:2a:cf:8e:e2:d5:ad:42:95:0a:
46:9a:90:b5:1d:71:4e:2f:a5:88:39:ab:1a:be:01:
91:b3:52:af:2d:54:3a:28:fd:73:ff:ef:d4:72:b5:
84:af:3e:e5:f8:39:bc:4a:8f:c2:96:04:8a:cf:04:
a5:7e:88:ec:1e:0b:6c:7a:f4:10:2a:05:6b:87:3c:
54:f7:d2:b2:bd:84:29:2c:6f:18:ec:80:6b:b2:0f:
bf:72:13:47:bf:39:af:d3:5e:7f:9b:e1:57:2b:18:
c8:8a:96:15:e8:c3:b9:1e:76:81:d6:ca:eb:74:2e:
fa:aa:18:b8:35:28:7f:c1:3e:ac:d6:a6:35:db:41:
1d:e0:ad:93:2e:49:31:56:f3:ef:28:97:e5:65:84:
3d:c9:92:d9:2d:dd:71:90:90:a8:47:23:7b:6c:c6:
32:67:cc:26:63:79:76:ec:28:b9:18:16:f6:76:12:
6d:2d:2f:3c:08:cd:32:1d:30:ee:5c:ec:a2:c9:25:
9e:12:87:e2:4f:39:f6:8a:df:8a:7d:c2:32:46:a5:
3f:3c:80:44:a8:71:2f:be:8c:20:82:51:1f:3b:80:
7d:47:de:c0:da:e9:d6:f1:69:23:9b:28:f6:73:67:
75:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:54:2A:EE:16:D1:48:13:10:73:1D:65:E0:53:9C:81:E8:19:71:B3
X509v3 Authority Key Identifier:
keyid:88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/UFQq7hbRSBMQcx1l4FOcgegZcbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.189.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:f7:c5:a5:4b:4b:8b:c6:c6:3f:f9:5d:83:5f:9d:67:41:bf:
22:cf:a0:b5:e3:72:c5:82:31:08:4e:e4:e7:26:b8:c8:d6:08:
a3:40:75:8a:3d:aa:37:da:94:53:a1:77:72:2c:b7:a4:95:e1:
ce:c6:30:94:cd:22:f3:65:7c:b5:4a:fe:f1:14:51:33:ae:5b:
78:47:70:8b:ad:fa:f8:9b:45:fc:a0:34:3e:12:d3:50:d9:8c:
98:40:34:f4:8a:e9:03:aa:25:97:da:54:f9:d6:54:ed:da:3e:
d0:bf:15:f4:93:57:10:3f:f6:59:d5:9a:f8:02:be:cc:14:a5:
e5:5f:69:a0:65:11:5d:f5:60:7e:5b:3c:09:5c:6a:c3:fc:10:
57:61:3f:22:2e:70:a6:06:2d:90:7c:c5:fc:29:9b:c5:59:c7:
22:eb:5c:44:bc:70:ca:91:6d:35:28:da:f1:ea:6e:61:2b:e6:
6b:f4:be:0f:af:39:69:89:29:f5:5b:e7:94:89:8d:7b:c9:bd:
03:6f:29:db:87:7d:7a:84:36:50:d9:23:f8:3f:56:c8:12:64:
53:49:1f:2f:e8:ee:64:43:78:71:a3:ff:38:96:7e:03:f5:2c:
ca:be:90:03:44:4a:ff:5a:8d:18:c1:2e:dc:6b:84:01:48:48:
1e:85:d4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:26 2025 by rpki-client