Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/UXGTN81Dp2X5s0ru4ChXKHSCSgU.roa
File: UXGTN81Dp2X5s0ru4ChXKHSCSgU.roa (raw, json)
Hash identifier: re+urg5VbEz9NxrbPqaY7QN7giwFHUEGmOIWZ6OPSBI=
Subject key identifier: 51:71:93:37:CD:43:A7:65:F9:B3:4A:EE:E0:28:57:28:74:82:4A:05
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 01887E42E0E6BBE46131AC8B140D2D14FD48
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/UXGTN81Dp2X5s0ru4ChXKHSCSgU.roa
Signing time: Fri 02 Jun 2023 22:38:12 +0000
ROA not before: Fri 02 Jun 2023 22:38:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209799
IP address blocks: 194.15.100.0/22 maxlen: 24
92.243.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7e:42:e0:e6:bb:e4:61:31:ac:8b:14:0d:2d:14:fd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Jun 2 22:38:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51719337cd43a765f9b34aeee028572874824a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:81:d5:e0:19:d5:0f:51:d4:2c:e6:d4:0e:ff:
74:94:5d:0f:c1:55:8c:ee:54:1d:ee:e5:fd:4a:30:
cb:31:77:76:60:79:4e:00:88:16:d8:54:05:3b:8a:
2f:c2:93:19:2e:fb:aa:2b:c7:7d:1a:d2:84:df:ad:
95:7b:81:65:87:4b:2f:48:a7:c5:99:a8:ec:e7:5b:
f1:1a:12:e8:90:f0:e0:c1:84:52:3d:03:e7:a0:ae:
0f:45:69:63:a0:13:e0:ba:41:9a:89:64:77:99:aa:
c1:05:b9:f4:16:f0:b0:f3:26:ec:b1:83:28:b3:87:
85:86:3b:82:8b:f9:67:80:49:ce:0f:36:f1:c1:ea:
6a:6c:43:42:8f:64:0f:ff:e6:8b:88:8a:21:35:28:
eb:78:e0:02:95:78:7d:b5:2e:b9:9f:f5:8c:56:e0:
24:77:2c:05:34:3e:4f:59:4e:ba:84:10:a9:45:ba:
ab:44:38:75:c3:2c:69:93:af:9d:31:0d:f5:51:ca:
f9:5e:6b:fa:16:2a:2a:ff:b1:9e:f0:b3:c7:ef:28:
41:dd:b5:a9:32:6c:4b:02:a5:5c:07:62:05:b3:35:
01:78:b3:89:69:fe:00:7d:1e:38:2a:03:a0:7a:03:
5d:f9:b3:ab:da:77:6e:0f:87:c5:82:ef:d5:dd:8e:
5d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:71:93:37:CD:43:A7:65:F9:B3:4A:EE:E0:28:57:28:74:82:4A:05
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/UXGTN81Dp2X5s0ru4ChXKHSCSgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.85.0/24
194.15.100.0/22
Signature Algorithm: sha256WithRSAEncryption
d5:cc:55:2b:0d:22:5a:f5:aa:cd:d0:00:da:2d:2c:88:b3:eb:
66:e1:ff:aa:09:4b:3d:69:c8:ad:c5:29:1f:00:5e:34:66:c5:
39:6e:18:b0:d0:95:83:4d:0f:cc:2b:11:ee:14:84:7b:9b:2b:
8d:40:1a:d3:ea:b2:24:8e:fb:10:fe:36:2a:34:21:c3:16:7d:
a5:bc:f3:83:a5:dc:59:96:4b:72:e7:4c:88:36:35:41:a1:98:
1b:94:37:0d:30:1e:e7:22:5d:08:02:69:c1:20:1b:e0:b7:3f:
e8:bc:00:d5:53:61:b6:34:d7:f0:03:79:e1:36:eb:1d:35:be:
20:9d:60:9a:a8:22:62:e8:1e:f2:3e:7d:6c:cd:29:34:ee:9a:
11:8c:d2:29:fd:4c:53:9c:9a:cf:a9:54:d5:89:94:c5:fc:bc:
d5:2b:44:9a:b9:59:bb:d1:97:19:7b:a8:35:13:c3:b1:47:63:
3c:12:8c:3b:84:04:d8:eb:5b:42:b6:c5:c4:30:63:dd:87:b6:
8d:5d:10:56:08:e2:bf:2f:b2:51:2f:3a:09:ba:a1:8c:94:b7:
e2:5f:0f:75:1c:3e:36:29:f3:43:0d:d2:3b:0a:93:18:80:8e:
78:1f:aa:fa:6b:cd:4c:91:09:5e:dd:20:25:14:3b:76:a4:ae:
19:46:07:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:48 2024 by rpki-client on console-ams.rpki-client.org