Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/Uep2xqw81NGdri_FzAS9V633nIQ.roa
File: Uep2xqw81NGdri_FzAS9V633nIQ.roa (raw, json)
Hash identifier: X9hYxA33AOjUoYl4NfrZ+pRq7XTy0NaI86mjHnmb0I0=
Subject key identifier: 51:EA:76:C6:AC:3C:D4:D1:9D:AE:2F:C5:CC:04:BD:57:AD:F7:9C:84
Certificate issuer: /CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Certificate serial: 018E84F1D587C7BC48C113117650B92AFC1F
Authority key identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/Uep2xqw81NGdri_FzAS9V633nIQ.roa
Signing time: Thu 28 Mar 2024 12:03:45 +0000
ROA not before: Thu 28 Mar 2024 12:03:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48091
IP address blocks: 185.140.236.0/23 maxlen: 24
195.93.216.0/23 maxlen: 24
2001:67c:256c::/48 maxlen: 48
2a05:37c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 08 Apr 2024 12:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:f1:d5:87:c7:bc:48:c1:13:11:76:50:b9:2a:fc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Validity
Not Before: Mar 28 12:03:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51ea76c6ac3cd4d19dae2fc5cc04bd57adf79c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:68:69:d5:0c:bb:e0:a6:e1:53:f6:65:86:
19:ec:63:9b:89:1a:09:e2:3b:74:bc:56:40:10:68:
fc:c1:a0:4e:e6:d7:ac:a8:2c:5e:0d:da:9c:92:7f:
61:77:0d:6c:1b:e0:e6:22:99:08:9b:b7:4b:7c:a2:
97:da:a0:b0:3e:de:6a:36:87:11:4d:12:c7:ad:3c:
0c:8e:c8:a6:84:4a:b4:2b:c5:7a:a8:47:5b:ea:ca:
9e:36:d0:3d:98:96:e8:85:b9:65:ed:07:6f:ea:00:
b3:61:43:ac:3c:7f:d2:67:24:eb:92:a4:e8:cd:01:
e0:64:65:90:88:2c:8c:17:e7:d6:ac:5d:21:f9:39:
fc:39:97:d5:59:c5:d4:87:69:9f:70:54:61:03:c2:
05:0a:87:3e:2f:1e:83:99:17:55:45:68:4e:a7:a7:
67:cc:d0:46:20:aa:69:ad:d6:6e:bc:21:54:6a:44:
36:ed:6d:da:6d:22:95:a4:70:13:83:0d:74:b2:41:
01:2b:b6:99:9b:43:3e:fe:ce:6f:70:72:b8:b2:7a:
71:84:d0:40:27:55:0d:f4:02:be:bd:c9:cd:25:04:
60:be:bf:07:2a:4b:c8:13:15:88:08:94:fb:04:e5:
c6:66:d2:5f:99:12:23:39:d0:5e:dc:eb:b7:51:d7:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EA:76:C6:AC:3C:D4:D1:9D:AE:2F:C5:CC:04:BD:57:AD:F7:9C:84
X509v3 Authority Key Identifier:
keyid:A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/Uep2xqw81NGdri_FzAS9V633nIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.236.0/23
195.93.216.0/23
IPv6:
2001:67c:256c::/48
2a05:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
77:f5:de:0e:37:6c:07:a1:4e:ec:50:b9:39:7d:3f:0f:56:1a:
56:74:3c:c5:97:98:fd:c9:2f:41:e9:d7:a1:ad:db:fb:83:d3:
31:e2:f9:ee:93:af:c5:3e:e1:44:59:42:46:bf:0c:43:17:e9:
19:ff:d7:5a:e8:b2:bd:71:4a:3a:f0:8a:9d:08:43:e0:b7:1e:
53:c0:9a:94:7a:7f:2d:94:30:c3:1d:81:49:5c:03:2e:c3:3b:
7d:eb:34:ab:ac:c7:ba:ee:fb:64:5b:78:4a:67:d6:34:63:64:
00:80:e5:19:31:e8:49:02:36:70:d8:02:8c:13:fb:b3:1e:a3:
98:25:3e:df:f8:ad:1c:74:38:c8:bc:64:b9:40:34:ad:92:fd:
b7:fe:6d:b1:03:85:43:67:7b:55:03:fb:be:4c:20:f1:10:da:
e4:b9:33:2d:79:9e:7d:cf:d6:40:61:1d:ee:9b:13:6c:b3:d5:
93:7e:cc:e1:90:cc:ed:a0:4a:97:d5:ba:95:61:d4:50:35:ae:
e0:91:da:8c:5f:a7:e5:2d:ce:5c:4f:40:52:db:d8:b6:16:52:
67:a4:65:d6:ca:cc:c8:fa:a2:1e:32:e3:21:aa:8e:16:1b:2a:
f9:0b:39:1d:65:12:02:e4:bb:b7:81:ca:af:98:02:17:0f:e1:
f5:25:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 16:48:51 2024 by rpki-client on console-ams.rpki-client.org