Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/uFiQ6R1ss-0pKvDHz6n-FHE9rn4.roa
File: uFiQ6R1ss-0pKvDHz6n-FHE9rn4.roa (raw, json)
Hash identifier: Q80R+NAU4wWOTurcBd1lq2ooNGTwUW2i1jDyIvzrOE8=
Subject key identifier: B8:58:90:E9:1D:6C:B3:ED:29:2A:F0:C7:CF:A9:FE:14:71:3D:AE:7E
Certificate issuer: /CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Certificate serial: 01856F5DC7F0010186FD1C34017AE065380F
Authority key identifier: B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/uFiQ6R1ss-0pKvDHz6n-FHE9rn4.roa
Signing time: Sun 01 Jan 2023 22:04:55 +0000
ROA not before: Sun 01 Jan 2023 22:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9159
IP address blocks: 193.110.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c7:f0:01:01:86:fd:1c:34:01:7a:e0:65:38:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Validity
Not Before: Jan 1 22:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b85890e91d6cb3ed292af0c7cfa9fe14713dae7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:8f:8d:97:2b:65:db:ad:a9:bc:6c:c9:70:
37:be:f2:91:b5:2a:25:2e:63:22:05:32:9c:68:b7:
97:38:ac:68:b7:80:63:c9:7b:6e:23:29:bc:97:10:
2e:0c:73:94:44:e6:b3:57:f1:3f:12:6f:9c:52:c0:
3a:9e:29:2c:96:e0:33:28:71:ea:db:da:de:49:6c:
be:2f:41:9e:69:19:c5:6a:ac:91:fb:17:7c:5c:23:
28:5f:b9:a2:69:f7:d6:41:f9:bf:de:eb:49:bb:6e:
d6:e2:ee:f4:6e:18:a2:e2:aa:ba:0b:d8:5b:6a:b5:
6f:e3:6c:38:8f:e9:2b:30:0b:06:c6:eb:91:f6:ed:
83:96:1f:52:1e:64:47:fd:dd:5a:7f:ef:77:34:57:
54:7d:d1:c5:c1:1e:37:5a:16:85:03:e7:bd:c7:84:
96:9a:4d:34:ea:0d:95:d4:28:b0:c0:1d:e6:1c:0a:
76:26:36:d7:bf:9e:4e:64:af:42:85:83:80:bd:66:
f9:87:29:46:35:2b:4b:88:2f:d9:b5:c9:61:53:30:
ca:4d:88:10:35:e0:7a:42:67:57:e9:b9:b5:9a:eb:
cd:43:27:0c:0a:23:dc:17:25:6d:7d:12:93:76:ad:
f3:84:24:0d:ca:be:be:a3:6b:71:28:e3:9f:a6:f4:
f0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:58:90:E9:1D:6C:B3:ED:29:2A:F0:C7:CF:A9:FE:14:71:3D:AE:7E
X509v3 Authority Key Identifier:
keyid:B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/uFiQ6R1ss-0pKvDHz6n-FHE9rn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.152.0/24
Signature Algorithm: sha256WithRSAEncryption
89:18:a2:21:c9:35:ba:fa:21:0d:c4:44:66:f4:bd:9e:9c:84:
eb:9b:47:90:53:89:31:b3:6f:b7:52:43:10:ff:a5:31:a8:52:
72:9f:4f:46:3a:14:a0:9a:7e:c7:52:6f:84:99:f9:e3:19:8c:
4e:46:94:61:8d:da:d0:51:9c:db:32:bd:2e:77:da:14:52:02:
2a:cd:e6:88:4b:a3:be:a8:a9:06:5a:7a:7f:51:24:30:06:e8:
bc:8e:d7:60:09:1b:ac:7f:b5:49:a4:e7:f9:09:52:3d:92:13:
c4:d2:39:34:6c:cc:c4:d7:f3:cc:7f:de:26:2c:54:d7:b3:32:
75:20:0e:e0:96:15:f8:4e:61:6c:42:fa:0a:d0:6f:0c:c5:93:
68:cc:44:48:3d:6b:2c:3d:9e:78:26:4b:66:33:2e:25:db:ee:
51:e2:d1:75:28:40:23:8f:90:65:ca:40:b7:1e:c7:27:97:f7:
94:fe:01:b0:f4:27:2a:d3:55:36:a3:34:89:24:99:f7:f4:f6:
97:f6:3a:3c:ce:97:c4:ba:d6:18:27:1c:0d:ac:ae:0b:c1:90:
9b:9b:e5:e5:86:f7:06:85:08:df:88:e1:57:af:e0:5e:c3:9b:
9f:32:dd:ff:6f:9a:05:91:f9:df:da:ac:a9:90:8f:2b:9d:cf:
f2:9a:24:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:20 2024 by rpki-client on console-ams.rpki-client.org