Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/UFuUjayFOTw0YCi3-GVuA1m0aYw.roa
File: UFuUjayFOTw0YCi3-GVuA1m0aYw.roa (raw, json)
Hash identifier: lAOsMM/RWQkYKRIzN/ZwM5siid7gubgQY6u6fBj6jLA=
Subject key identifier: 50:5B:94:8D:AC:85:39:3C:34:60:28:B7:F8:65:6E:03:59:B4:69:8C
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 018570CBEC6AAECBC4ED5B6F283344EB98F5
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/UFuUjayFOTw0YCi3-GVuA1m0aYw.roa
Signing time: Mon 02 Jan 2023 04:44:50 +0000
ROA not before: Mon 02 Jan 2023 04:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207066
IP address blocks: 176.103.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:ec:6a:ae:cb:c4:ed:5b:6f:28:33:44:eb:98:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 04:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=505b948dac85393c346028b7f8656e0359b4698c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:83:7a:b2:6d:d5:42:f6:6a:6f:86:6a:38:7c:
3d:a8:0f:75:af:74:9c:c1:1c:a7:20:5a:a1:55:53:
ca:ae:a6:16:a5:58:25:c4:70:f5:30:1b:59:2c:ce:
47:b6:2c:60:b5:33:c3:d7:d3:43:2f:22:db:c7:27:
6b:d1:75:c3:75:84:10:59:44:1b:f7:dc:46:c8:ad:
9c:dc:3a:f6:b3:79:14:ad:f2:7b:a8:4e:ed:76:a6:
82:20:58:1d:06:1b:58:70:30:13:eb:22:98:30:f8:
53:83:4d:50:cc:21:bf:99:7b:58:da:ba:82:cb:90:
63:e7:d9:83:53:95:c7:33:46:58:f2:db:13:35:cb:
91:f7:58:a5:8b:40:32:56:84:d2:0d:ed:75:03:36:
54:0f:79:4b:46:fe:9d:bf:6a:24:dd:8c:de:49:14:
bc:d1:d8:71:d1:53:c2:42:b2:8b:a0:e5:44:08:a3:
4b:dd:96:48:e1:aa:de:d9:14:21:36:b5:fc:3a:b4:
fb:51:ab:cb:8c:e5:09:33:d8:87:25:c2:75:e9:42:
b7:7c:f5:08:57:6f:25:95:c6:72:66:fe:71:0f:09:
c3:29:b3:8c:5a:ec:ea:22:ab:a7:53:64:72:df:55:
44:c8:f5:6c:94:d3:35:ea:de:39:4e:24:f7:bc:bc:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5B:94:8D:AC:85:39:3C:34:60:28:B7:F8:65:6E:03:59:B4:69:8C
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/UFuUjayFOTw0YCi3-GVuA1m0aYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.185.0/24
Signature Algorithm: sha256WithRSAEncryption
00:9e:54:7a:91:ae:b9:df:4e:4a:f9:5a:01:2e:96:8e:47:10:
f0:5f:41:33:c8:fa:8d:ab:df:4c:23:13:39:6a:04:2c:c5:4c:
cb:e3:dd:fc:e6:73:0c:41:32:b7:d7:a3:43:74:f2:89:68:5f:
bb:21:9e:2c:0f:1a:14:a2:d6:75:cd:c6:67:f2:c2:20:2c:9a:
da:3d:6e:29:a1:08:08:ab:3c:69:2c:5f:3c:ed:19:93:3e:d4:
7b:6b:1b:db:4a:11:6f:05:e3:84:48:dd:a9:bd:50:ad:bc:d4:
6e:7b:e1:41:cf:f3:82:fe:59:44:e8:53:d3:06:6f:a6:e8:81:
4c:68:39:7d:1c:1e:57:10:2b:b4:9d:15:da:6a:02:b7:91:70:
6a:43:f6:51:dc:f3:96:f0:84:2c:f6:cf:0b:0d:f7:56:09:97:
bd:39:a7:8f:19:db:16:d9:0e:e7:ca:2a:3f:27:6b:29:a6:bf:
c2:0b:ba:94:28:9d:f8:1e:00:6c:6a:7e:0f:9c:51:a1:6a:34:
a6:5a:75:21:60:e8:ff:5b:d7:06:4f:cd:b6:14:2a:56:12:74:
af:c6:72:30:73:e5:ed:ee:8a:1f:d5:d6:7d:60:29:d6:a1:93:
2e:3d:f5:27:ab:ac:0f:fa:1d:ea:0e:b6:08:42:55:d2:1e:29:
01:16:04:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:49 2024 by rpki-client on console-fra.rpki-client.org