Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/UtYUEUbTj4wYXQ1R5eGqwPNpGT8.roa
File: UtYUEUbTj4wYXQ1R5eGqwPNpGT8.roa (raw, json)
Hash identifier: srQK0zO1QxexQdTJlrvKQP5uQmjAx/5IBYMNujXw2TE=
Subject key identifier: 52:D6:14:11:46:D3:8F:8C:18:5D:0D:51:E5:E1:AA:C0:F3:69:19:3F
Certificate issuer: /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial: 018FBC717CEFB9940AF8050C877195D8BEA1
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/UtYUEUbTj4wYXQ1R5eGqwPNpGT8.roa
Signing time: Mon 27 May 2024 23:45:04 +0000
ROA not before: Mon 27 May 2024 23:45:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 195.93.132.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 26 Jun 2024 22:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bc:71:7c:ef:b9:94:0a:f8:05:0c:87:71:95:d8:be:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
Validity
Not Before: May 27 23:45:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52d6141146d38f8c185d0d51e5e1aac0f369193f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:1d:b3:d6:b1:17:17:6b:be:1d:d7:3d:7b:
ae:66:21:1b:54:e1:3a:19:be:14:f4:04:4f:4b:29:
f0:d0:93:a0:07:09:31:fa:94:18:cd:3a:50:d9:4f:
88:b1:82:3e:a6:45:41:28:d4:e8:39:94:39:bc:3c:
f7:93:2c:42:c1:1e:9d:1e:4c:23:5e:a6:fa:88:22:
47:56:0f:5b:8e:c7:3e:ce:59:af:e4:0d:f1:56:52:
6c:05:5e:8e:80:2c:de:9f:fa:d7:d8:82:e9:48:72:
e2:9f:dd:75:dc:a1:1b:69:27:fe:49:ab:a6:09:f4:
e8:17:db:b7:84:85:83:d7:d5:9c:8d:67:59:54:13:
42:fc:6e:85:ad:0c:9c:0e:e7:af:d2:ad:14:80:fd:
74:7a:d4:72:fd:f3:99:9e:ca:17:fb:3a:b5:2c:e0:
45:e2:eb:4e:68:1c:f2:ad:4f:97:14:3e:44:61:59:
92:9e:ac:7e:b3:89:70:79:1c:02:7d:75:34:dd:40:
c6:27:1a:5d:0b:ce:58:e3:c8:c1:4e:c7:2c:22:81:
30:d2:79:3c:84:7b:2f:02:dd:eb:86:07:eb:7a:ee:
b2:72:2a:a9:be:3e:07:86:4c:df:44:6a:ff:d7:3a:
4e:ad:32:ff:55:28:33:42:ec:f1:d6:1c:6a:75:51:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D6:14:11:46:D3:8F:8C:18:5D:0D:51:E5:E1:AA:C0:F3:69:19:3F
X509v3 Authority Key Identifier:
keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/UtYUEUbTj4wYXQ1R5eGqwPNpGT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.132.0/23
Signature Algorithm: sha256WithRSAEncryption
53:2d:4b:a0:d3:87:66:b8:3f:2d:bb:f7:44:f7:74:60:c4:e5:
61:2f:5a:f0:8a:a3:5e:c9:89:b8:7e:62:47:99:d9:31:5a:bf:
57:eb:4f:46:6f:bb:86:d6:bd:b9:53:3e:de:12:3e:35:1e:12:
66:3a:c2:6c:ba:6c:b1:71:3f:5b:d5:99:6c:c4:e1:79:ec:79:
08:87:36:bc:42:7d:ae:d7:f9:3b:db:ca:99:63:f0:0e:08:d3:
7a:3f:a6:2f:58:79:a4:06:3b:30:76:7d:28:f1:3f:45:18:43:
85:4c:a6:2e:6e:8a:98:41:b6:62:4a:2f:41:dd:5c:04:95:b7:
82:c0:c4:3b:cb:54:8c:b1:6c:67:fb:07:e4:a7:49:e4:a9:16:
e5:0f:63:d4:10:c1:e1:cb:5c:cf:77:d6:04:db:01:b5:d4:8b:
04:2c:35:f5:3d:f5:5c:15:d0:97:48:38:ba:a5:80:b5:65:69:
af:49:bd:a1:31:3b:56:be:62:13:72:9a:be:f5:0f:0b:c7:7f:
c0:fa:ee:62:8a:e5:52:d1:c1:38:63:28:94:4d:37:ef:81:7a:
e7:42:1e:e4:e1:dc:3c:3b:4c:72:b3:0c:3f:a1:04:2d:1c:b3:
a5:b2:a4:7a:6f:a9:f9:0d:f7:a2:3a:32:76:c0:0c:86:1a:12:
86:e0:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 00:22:48 2024 by rpki-client on console-ams.rpki-client.org