Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/UK1XGHQDjhZQZUnl-T9p7hT8_og.roa
File: UK1XGHQDjhZQZUnl-T9p7hT8_og.roa (raw, json)
Hash identifier: 5fLyatlsbUU4zLwid24XrhJeYXpYMvUj8YzqkauMCIQ=
Subject key identifier: 50:AD:57:18:74:03:8E:16:50:65:49:E5:F9:3F:69:EE:14:FC:FE:88
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0186C7E7F5840A08BFA0BEB41DEBEFD80571
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/UK1XGHQDjhZQZUnl-T9p7hT8_og.roa
Signing time: Thu 09 Mar 2023 19:45:13 +0000
ROA not before: Thu 09 Mar 2023 19:45:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199565
IP address blocks: 188.255.146.0/24 maxlen: 24
188.255.169.0/24 maxlen: 24
188.255.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Mar 2023 20:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c7:e7:f5:84:0a:08:bf:a0:be:b4:1d:eb:ef:d8:05:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 9 19:45:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50ad571874038e16506549e5f93f69ee14fcfe88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:8f:82:f1:40:e5:ff:15:9f:a7:01:b0:06:
8b:43:26:71:e6:9e:44:94:f2:88:6b:82:06:e3:0f:
53:1b:5c:07:ef:2f:d6:d9:8d:52:e7:cf:b4:a7:f4:
90:10:69:50:e4:4f:57:17:d7:17:04:4b:35:a0:40:
3e:4d:3b:c2:82:64:77:7d:0d:0b:ac:43:1b:3d:95:
fc:d1:0d:ff:80:2b:44:f6:52:30:8f:88:ec:4a:40:
c5:1a:37:e4:b5:12:0f:d2:df:b3:2e:14:00:3e:04:
d2:da:25:3a:d3:e0:09:ae:91:20:fd:c9:13:22:f5:
16:8f:92:98:e6:31:35:b0:1e:93:0d:ca:a4:2a:ae:
63:a2:ec:8f:55:c7:8a:09:1b:80:20:a9:6d:99:06:
fc:16:be:7c:6f:57:7d:1f:f8:2c:2b:06:e5:e2:65:
60:4f:63:61:d2:c8:17:3c:2d:85:ef:b6:ad:35:4d:
f4:4b:2b:b7:ec:f1:da:89:4b:2e:5d:45:97:eb:09:
f8:e8:2c:5f:8e:6e:23:e7:92:73:69:8a:29:56:97:
ec:4a:a7:cf:1a:75:6a:cb:fe:ab:af:8e:18:d6:90:
ac:4e:74:b1:9b:f3:43:bf:bd:a2:e6:7a:08:06:93:
e0:f7:9e:a8:bf:6c:ef:02:be:86:52:41:c6:c8:bf:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AD:57:18:74:03:8E:16:50:65:49:E5:F9:3F:69:EE:14:FC:FE:88
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/UK1XGHQDjhZQZUnl-T9p7hT8_og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.146.0/24
188.255.169.0/24
188.255.184.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:83:a0:b5:5f:b1:71:e4:a7:9c:e5:2e:27:7b:65:36:ca:f3:
f3:a7:7d:2e:8a:7b:79:8f:6b:c6:ef:3f:72:39:c8:7f:a6:eb:
d5:3a:cb:c8:2f:9a:2c:24:0e:ff:c9:24:b5:e6:0f:ec:bb:08:
2b:27:4c:68:41:70:b4:9f:0d:1c:00:bb:2b:33:6f:bd:52:a8:
08:cf:7e:d7:23:98:df:2d:02:2a:ac:43:09:1b:7c:a6:55:85:
a8:1e:4d:f8:74:74:4c:cc:08:69:58:29:fa:b9:d0:63:95:fd:
e6:e0:ac:38:62:4e:89:33:05:ed:82:9e:6e:d3:02:dc:bb:78:
1f:30:a0:4d:9f:2d:c4:8a:8e:08:67:95:04:18:90:62:44:2b:
c2:c7:9c:34:73:72:26:f0:08:b6:c3:8b:b8:b8:e3:1a:e8:db:
b0:41:01:09:f2:c3:68:03:b2:cd:ab:18:48:d4:02:21:52:8a:
b3:b3:6b:16:82:3c:23:42:b0:c4:3f:bf:49:ab:38:7e:53:8f:
6d:0c:3c:23:51:fb:a0:43:f6:ed:aa:46:01:c6:e3:17:aa:44:
87:60:08:a8:46:92:b2:68:ec:cd:1d:b8:52:23:4d:83:47:73:
7e:22:30:c1:4d:10:7b:82:49:0d:da:f1:b7:c1:97:16:46:4e:
b7:e8:81:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:04 2024 by rpki-client on console-ams.rpki-client.org