Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/ulmcDkBAdFprabTWHwD5Al4TJjk.roa
File: ulmcDkBAdFprabTWHwD5Al4TJjk.roa (raw, json)
Hash identifier: PuoPpEKjSjeLUIfYu2Kq+ArbgIVDxKmZ5fT6jRTSXD4=
Subject key identifier: BA:59:9C:0E:40:40:74:5A:6B:69:B4:D6:1F:00:F9:02:5E:13:26:39
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018FA05E4101AF85A3F401D82B0AE1D20D0C
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/ulmcDkBAdFprabTWHwD5Al4TJjk.roa
Signing time: Wed 22 May 2024 12:54:42 +0000
ROA not before: Wed 22 May 2024 12:54:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 85.204.127.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 13:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a0:5e:41:01:af:85:a3:f4:01:d8:2b:0a:e1:d2:0d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: May 22 12:54:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba599c0e4040745a6b69b4d61f00f9025e132639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:65:ff:71:36:69:e4:98:f2:ae:85:ca:cd:
30:49:f5:a2:d1:a6:18:77:36:69:33:a9:b0:8f:5a:
1d:c4:bd:eb:f4:a1:f9:84:e6:44:05:1e:69:1d:0e:
98:c4:ad:66:10:bd:19:75:ac:60:45:07:4c:0e:63:
e9:cb:cd:63:72:4d:f6:e5:48:10:1b:df:bb:65:ce:
77:6c:e7:a2:77:91:d4:f5:96:c9:06:bc:fb:6a:ae:
4e:87:79:c0:22:0c:05:89:14:48:83:1a:ea:35:54:
32:dc:4f:13:36:12:73:71:86:31:c4:68:9d:e2:69:
5e:3d:31:93:35:f2:b0:98:48:1d:e1:e6:e5:4e:f1:
b5:29:5d:41:8f:9e:ae:ed:07:7c:38:98:fa:17:9e:
f4:6e:43:c5:64:28:ec:8e:6a:05:9f:0e:e1:03:13:
cb:44:f7:7c:7a:7d:12:b1:3c:36:71:bf:1b:07:3f:
97:69:4c:65:d5:bf:8e:14:59:a1:b7:8a:8d:cc:d2:
18:9f:0e:8e:38:e1:9b:b0:22:e3:8e:29:50:fa:cf:
38:8c:23:5b:7f:f8:fc:12:cf:72:90:6e:12:cb:83:
32:a7:ae:62:6e:07:c9:3f:5b:9a:00:ef:c0:04:21:
c8:69:49:2a:cf:37:41:09:76:68:b8:2c:98:84:36:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:59:9C:0E:40:40:74:5A:6B:69:B4:D6:1F:00:F9:02:5E:13:26:39
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/ulmcDkBAdFprabTWHwD5Al4TJjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.127.0/24
89.33.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:9a:7c:57:e4:41:52:93:89:a6:20:34:1e:89:81:6d:1e:20:
03:7e:4a:63:86:64:4f:17:a9:78:dd:9f:09:0b:48:30:69:96:
2f:8b:fd:67:97:db:0b:2d:58:5b:13:02:e5:08:2a:41:f8:f4:
96:15:9e:e0:bc:f9:fd:53:3a:00:8a:85:4d:1e:6a:3e:95:df:
bc:12:5a:49:51:c5:42:0f:28:74:a1:ab:55:e4:80:84:39:11:
73:a0:61:d7:8c:a0:a3:73:99:2f:df:27:af:6a:00:3b:01:c5:
bb:d4:eb:b9:14:b3:c1:22:e2:0a:4a:a3:d3:a3:79:51:df:f6:
60:33:a6:b5:29:b5:76:0d:03:99:9a:6d:a4:7e:b8:4d:4f:a2:
70:1b:78:09:d8:c1:c3:c0:74:41:57:9d:3a:9f:b0:eb:36:78:
cb:5f:16:70:8f:51:fe:c0:b2:d6:89:a1:15:6e:5e:81:53:3f:
e7:bb:0c:4c:ed:c9:45:5f:36:d1:07:a3:5d:21:d7:ca:64:8e:
73:c6:32:c0:2d:38:d0:9b:57:21:21:bd:30:47:79:ed:33:73:
fb:26:f8:8f:22:ec:2c:c4:df:62:93:ac:b1:c1:b6:8f:1e:bf:
7e:6b:4c:9a:7f:d0:4d:43:e8:d4:7a:dc:1f:43:93:d6:6a:bb:
ad:18:1f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org