Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/UZI6CzrT9fqBPGI08QD94rVQv2E.roa
File: UZI6CzrT9fqBPGI08QD94rVQv2E.roa (raw, json)
Hash identifier: /Gl1Q607D0tSAsbLZ7v7JugkCRDsDN8r9gAay4e6Awo=
Subject key identifier: 51:92:3A:0B:3A:D3:F5:FA:81:3C:62:34:F1:00:FD:E2:B5:50:BF:61
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018B245CAFAEAE1922AE5E6FA6E27532A994
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/UZI6CzrT9fqBPGI08QD94rVQv2E.roa
Signing time: Thu 12 Oct 2023 14:48:55 +0000
ROA not before: Thu 12 Oct 2023 14:48:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42115
IP address blocks: 213.87.192.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:24:5c:af:ae:ae:19:22:ae:5e:6f:a6:e2:75:32:a9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Oct 12 14:48:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51923a0b3ad3f5fa813c6234f100fde2b550bf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:2d:82:dc:26:05:55:32:f0:87:e8:51:41:
af:f4:92:29:58:f6:5d:f1:e5:08:a2:aa:b2:63:cb:
d7:54:4b:d7:e6:6d:6a:0a:2b:7d:95:0b:8b:84:db:
a3:d0:52:da:7e:fb:15:6c:5a:d9:c2:67:8f:9d:04:
10:18:00:ed:1f:06:99:4c:d2:60:5a:5a:9a:b2:c2:
77:dc:05:a2:f5:77:b7:23:1c:2e:eb:c4:cc:78:b3:
2b:31:72:7d:e7:65:d6:52:f2:5b:71:04:d1:21:0c:
97:aa:96:47:4d:df:a9:89:25:28:3e:91:17:cb:03:
61:99:35:34:e5:11:d1:ff:3c:5e:fa:b7:a9:7c:17:
16:fb:8e:d9:79:f0:34:e8:e3:c6:4d:e9:80:d9:6f:
53:b3:92:49:83:21:5b:c5:4e:6e:b8:b0:14:50:4a:
2e:68:b7:e5:dc:8b:05:f9:e1:ef:80:7f:3f:d8:97:
0a:74:0e:2a:52:88:4a:08:b3:46:02:64:fa:ed:ad:
ca:23:18:5d:7b:ab:8b:9d:2b:f3:f3:0c:a6:9b:41:
a7:b9:4d:4f:dd:09:d6:79:2a:59:bc:f8:cf:23:5f:
ae:af:55:6e:e8:30:42:b1:52:5b:f9:8f:3e:c4:3c:
ed:c9:64:83:40:77:f3:f1:9c:35:2e:6a:b4:dc:5b:
4d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:92:3A:0B:3A:D3:F5:FA:81:3C:62:34:F1:00:FD:E2:B5:50:BF:61
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/UZI6CzrT9fqBPGI08QD94rVQv2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.87.192.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:8c:64:98:24:9a:15:6c:3f:d8:2d:a2:71:c4:f1:78:e7:e7:
fb:10:3f:df:9a:1d:8a:65:bc:72:4e:0a:ed:2e:4f:78:c3:c9:
e1:87:12:f5:68:88:95:b4:11:96:c7:55:c2:38:0d:ca:7f:78:
a5:43:a6:af:58:8d:96:29:d3:fe:5c:af:2b:ab:69:ec:1f:99:
54:3d:7d:f3:ba:8e:de:72:a7:43:4a:5d:70:e2:db:65:bf:1f:
1d:81:12:37:95:a8:10:dc:8a:04:06:94:2a:ad:aa:ab:72:4b:
95:08:71:28:f2:f5:d7:d1:94:3b:46:c0:5c:a8:6d:ff:42:db:
fe:23:19:d5:5c:b9:3a:60:a3:f3:a0:48:d8:b5:6e:40:fa:c2:
73:f9:56:ce:a2:9c:2d:4f:bb:8e:a4:20:7e:54:76:8d:a8:5b:
52:1b:9a:e8:80:76:7c:9a:c0:88:36:05:ac:12:d7:ae:4d:12:
52:ee:c0:cf:89:bb:5f:ef:71:42:ab:1f:82:77:da:61:80:42:
21:47:9c:b4:01:51:68:65:09:9e:e0:9c:94:ed:77:e6:c5:82:
1c:85:23:17:a8:85:4b:9f:7e:75:62:a9:97:50:cd:69:e5:b8:
7b:59:01:30:8e:9b:74:5f:9b:2a:2d:50:bd:e2:2e:25:6c:a0:
fd:e0:1d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:21 2024 by rpki-client on console-fra.rpki-client.org