Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/uTcYHcxkhJ-TduB902yEF8F7BFQ.roa
File: uTcYHcxkhJ-TduB902yEF8F7BFQ.roa (raw, json)
Hash identifier: YONjjRGREewhZIqgItTQhk+zTt1/8TL+/WM+ZO6mtmU=
Subject key identifier: B9:37:18:1D:CC:64:84:9F:93:76:E0:7D:D3:6C:84:17:C1:7B:04:54
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 018CCA2A290EE65C4D14CCBC21A06FC01F8B
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/uTcYHcxkhJ-TduB902yEF8F7BFQ.roa
Signing time: Tue 02 Jan 2024 12:33:29 +0000
ROA not before: Tue 02 Jan 2024 12:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197674
IP address blocks: 91.92.115.0/24 maxlen: 24
85.202.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 12:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:29:0e:e6:5c:4d:14:cc:bc:21:a0:6f:c0:1f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Jan 2 12:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b937181dcc64849f9376e07dd36c8417c17b0454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:55:fc:3c:6a:c2:f7:97:cd:84:4f:b7:5b:
ad:0b:ff:71:54:97:98:a5:e6:17:3c:1c:a9:44:02:
41:75:ec:7c:18:01:78:8a:6c:a4:bd:18:4e:11:97:
d3:16:be:4d:55:66:cb:e9:eb:20:8d:18:3f:2c:e1:
44:95:7b:68:f7:e6:9e:c5:80:e6:1e:d4:c3:54:34:
1f:e5:50:62:ec:d6:ed:43:8f:50:32:0c:60:1c:6f:
16:79:13:c0:35:dd:3a:f5:0b:4e:fc:4f:16:72:68:
57:89:b6:47:0c:05:96:b1:5e:9d:83:f5:cd:a2:39:
41:59:21:e9:0b:22:1b:cc:c4:3c:37:ed:d6:c5:5f:
f6:85:81:94:50:0b:0a:03:cc:fe:cc:b6:59:f4:1b:
9f:52:e1:9b:73:fb:5c:be:0d:d0:d4:ca:ad:12:8b:
0c:26:b3:67:cc:68:72:63:6e:41:53:3c:96:33:f3:
5f:ca:65:c6:d2:2e:5a:b9:9f:99:b9:60:11:f9:60:
a0:f9:b9:6a:14:23:e5:f8:8b:3c:c3:f9:c9:ff:a2:
2c:1e:6d:42:0b:60:7e:8d:e5:67:9f:e5:b1:99:31:
97:ed:49:b8:7f:34:c0:ae:30:e4:48:36:fe:39:c0:
6e:b1:a5:22:03:9b:af:b0:bb:e1:cc:58:3d:b5:4b:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:37:18:1D:CC:64:84:9F:93:76:E0:7D:D3:6C:84:17:C1:7B:04:54
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/uTcYHcxkhJ-TduB902yEF8F7BFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.95.0/24
91.92.115.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:32:51:48:35:d8:1a:c6:9f:25:0f:0f:6d:72:20:6d:69:6a:
1c:8b:3a:9d:80:ae:80:c3:11:43:d0:73:37:f8:bd:fe:ea:86:
3e:d5:72:25:80:dd:70:7b:fe:48:57:4d:d1:04:34:12:06:67:
cd:18:8a:ad:57:27:5a:cd:fd:82:39:59:0a:77:09:63:9e:ce:
45:cd:d2:ed:53:8f:33:db:d2:ce:b3:95:09:f3:9a:db:75:37:
12:5d:ab:a1:42:31:43:74:f1:1b:a8:46:92:12:24:04:72:38:
c5:40:10:67:a8:2d:02:fd:68:e0:d1:34:46:82:d0:00:ab:52:
4b:60:e7:9b:cc:40:41:64:b2:72:e4:53:c3:e1:4e:07:1e:32:
30:1f:97:26:ac:79:22:f4:6e:85:38:aa:63:e5:fb:79:23:a6:
78:22:fc:aa:af:97:dd:08:42:d2:bc:d9:a4:5e:b9:82:fa:82:
2e:4d:89:a0:98:e5:ac:64:40:ad:d4:67:7a:61:22:de:58:e9:
93:e7:36:de:76:94:fe:a1:58:39:38:d5:3d:25:a3:6b:9d:8d:
5c:14:a5:69:eb:54:6a:0b:37:a1:16:00:fe:66:d7:f9:cc:13:
86:fd:f0:56:54:75:ad:5f:05:5c:8a:a6:66:a9:12:2a:a5:d8:
84:d9:4d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:23 2024 by rpki-client on console-fra.rpki-client.org