Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/U_Cu3N4xFIj_z2UxXKNaNVZ9ZVc.roa
File: U_Cu3N4xFIj_z2UxXKNaNVZ9ZVc.roa (raw, json)
Hash identifier: 3ROZcHnDTs2Phlac1wItyu5AYAxgn+8dYc97/g7Q9c4=
Subject key identifier: 53:F0:AE:DC:DE:31:14:88:FF:CF:65:31:5C:A3:5A:35:56:7D:65:57
Certificate issuer: /CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Certificate serial: 01857139E49AF2E32EDB0BFF300ABE17B362
Authority key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/U_Cu3N4xFIj_z2UxXKNaNVZ9ZVc.roa
Signing time: Mon 02 Jan 2023 06:44:57 +0000
ROA not before: Mon 02 Jan 2023 06:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59942
IP address blocks: 195.245.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:e4:9a:f2:e3:2e:db:0b:ff:30:0a:be:17:b3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Validity
Not Before: Jan 2 06:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53f0aedcde311488ffcf65315ca35a35567d6557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:28:3c:fe:65:df:9f:04:5a:07:dd:d0:14:
52:c3:5d:98:88:9b:b1:19:b9:72:00:27:8c:a0:b6:
f2:64:f2:d5:85:b7:d0:42:af:27:20:7a:94:c8:8d:
1c:e1:1b:21:4f:09:29:86:1e:19:8b:bd:2f:f3:56:
bc:31:36:fd:55:a8:a7:a5:00:62:c1:70:5b:8e:72:
7c:56:a8:6b:81:35:25:3a:7a:59:a5:51:61:67:42:
bc:84:9a:10:0b:f4:50:62:39:74:4a:61:99:f8:e6:
a2:58:50:1d:01:87:4c:8b:3e:d7:a1:6e:34:df:47:
0f:f3:c9:39:e7:89:7d:51:b8:d8:4e:6f:48:2f:7b:
c3:4d:5f:7c:57:e2:89:10:da:64:c2:e9:f6:db:be:
d5:b4:98:79:12:28:aa:9f:87:2a:27:55:fe:83:10:
99:8a:d7:56:8d:5c:73:36:ca:b2:72:6d:2e:71:e8:
c0:17:bd:e2:1b:38:d7:ba:b8:0c:ff:94:e3:b8:b7:
07:d9:ab:0b:2d:6d:0c:52:47:1e:1e:d6:70:03:8f:
d3:0b:ad:2e:fa:94:cb:5d:3d:b1:8b:01:7d:03:85:
50:95:26:bc:96:39:b5:88:94:28:88:bf:03:6f:74:
31:0a:2f:ba:c3:2e:7c:1a:12:e5:9d:24:70:68:3c:
cb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F0:AE:DC:DE:31:14:88:FF:CF:65:31:5C:A3:5A:35:56:7D:65:57
X509v3 Authority Key Identifier:
keyid:6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/U_Cu3N4xFIj_z2UxXKNaNVZ9ZVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:2b:3e:c7:b9:c9:41:b5:8f:d6:cb:b5:a4:46:9a:7a:4d:3f:
32:49:bf:df:52:88:3b:4a:40:a0:db:78:25:48:3f:6e:70:8a:
45:88:4c:6b:d7:1b:0d:a4:59:ba:a7:93:cc:ea:f1:34:6c:1f:
72:66:d3:ca:a3:9d:6e:88:6d:54:3a:c0:47:2a:a3:1d:84:ea:
1d:76:10:d7:fb:63:5c:32:38:5f:da:fe:f3:7b:2d:2a:6b:83:
b7:f5:8e:97:60:9a:6b:38:88:2d:b9:11:b4:ae:81:b0:65:1a:
ea:a6:fc:9b:e1:aa:52:79:f1:ae:24:41:eb:42:c5:1d:25:09:
df:d7:f0:02:46:9c:0b:a0:d8:29:79:30:55:93:46:70:1d:d4:
40:97:71:ac:a9:9e:7a:d8:7a:b3:c6:3e:bc:f9:c0:5e:f7:6b:
b6:52:22:92:e6:ef:d4:09:7e:ef:7b:c8:5e:68:c2:ea:48:62:
94:ed:e5:fd:4d:12:44:b6:e2:59:08:a5:db:dd:9f:dc:16:c0:
08:e1:a1:d0:2e:31:53:27:f4:c2:8d:22:19:67:d3:03:a8:f2:
8c:e9:a2:e0:4d:8d:d8:4d:25:6f:8e:bb:58:80:30:f2:40:cc:
5a:50:6f:17:46:c3:37:42:fb:b4:ef:0c:63:b1:a2:3c:20:71:
89:ef:00:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:34 2024 by rpki-client on console-ams.rpki-client.org