Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/uQy5W_fepQGVDTTVHGAccYEy38A.roa
File: uQy5W_fepQGVDTTVHGAccYEy38A.roa (raw, json)
Hash identifier: W56n3dk/3TlUZ9TDCmaOSqJBjryl/SsMB4RgbohyagE=
Subject key identifier: B9:0C:B9:5B:F7:DE:A5:01:95:0D:34:D5:1C:60:1C:71:81:32:DF:C0
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018571DE8149D8A4A7E90D5CEB5640904C4F
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/uQy5W_fepQGVDTTVHGAccYEy38A.roa
Signing time: Mon 02 Jan 2023 09:44:45 +0000
ROA not before: Mon 02 Jan 2023 09:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 328867
IP address blocks: 185.243.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Feb 2023 01:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:81:49:d8:a4:a7:e9:0d:5c:eb:56:40:90:4c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 09:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b90cb95bf7dea501950d34d51c601c718132dfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:3b:2b:48:65:0f:04:8e:69:78:b5:ff:bb:
d6:89:fa:8c:70:e7:87:78:df:8a:aa:af:d7:ff:0d:
ee:d8:f5:55:1c:17:93:37:b6:2b:e3:fa:d4:04:79:
ec:87:0c:f5:cc:4e:05:83:fe:63:2b:30:d9:73:cc:
14:c1:fa:b3:62:af:eb:82:69:ec:ce:0b:47:41:22:
28:17:5d:7c:a3:93:57:6f:26:68:e4:c2:c3:79:34:
c1:fd:c7:6d:8e:7c:62:55:2d:9e:e4:1e:61:05:d5:
f9:27:39:a0:05:41:d1:51:3f:52:3a:f6:32:a0:a4:
eb:34:a6:f2:10:09:55:94:64:64:49:aa:ba:a1:26:
4f:14:54:1e:f5:42:48:54:14:4a:a9:0d:6c:7e:e6:
4a:f9:1a:dd:a2:cc:5d:9b:80:de:fa:ef:ec:44:91:
2c:a0:78:80:93:af:7a:a3:94:e4:f7:0c:00:c9:78:
31:a7:29:57:ba:43:9f:46:a9:83:1b:4a:7a:b0:76:
20:ce:bd:94:6d:d5:9b:d6:99:6e:18:71:d9:aa:e6:
54:d1:1c:c2:e7:18:b5:f8:5e:6b:65:05:4e:63:b6:
5c:bf:fb:80:fc:22:6c:3f:09:86:f8:eb:b3:67:a0:
46:9c:ce:8b:32:68:59:36:a5:bf:7c:b8:10:8d:62:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0C:B9:5B:F7:DE:A5:01:95:0D:34:D5:1C:60:1C:71:81:32:DF:C0
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/uQy5W_fepQGVDTTVHGAccYEy38A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.7.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d3:9a:bc:c9:87:d4:ac:77:e8:ef:31:58:78:fc:1f:7d:22:
60:a6:e6:33:36:09:af:bd:f5:00:d8:df:bb:7a:4c:5d:04:cb:
e6:0a:99:0f:a6:02:1e:b6:29:47:39:4c:67:bd:91:42:cf:4a:
b8:30:66:de:73:e9:8a:12:c6:f9:aa:37:cc:b7:5d:7d:61:1b:
b6:cc:9a:49:74:37:9e:ec:91:fe:d2:f5:f9:2f:2b:23:e4:5e:
ae:be:b0:20:73:5e:25:d2:6f:89:28:c9:fd:3b:d2:49:80:ca:
a0:3b:f6:4e:45:df:41:18:f7:39:d1:67:b0:b6:41:17:8f:f0:
a3:5d:8f:75:8d:7b:2f:02:62:e6:f0:5b:6d:87:8d:d7:e3:2f:
e3:5a:03:66:b1:df:bf:b9:93:47:ac:db:2a:2e:89:b5:79:fe:
73:a9:fc:fd:16:6b:40:8b:d4:7b:f4:f4:83:5a:96:83:e1:34:
ee:2f:29:c5:e7:14:42:1f:16:75:d2:fb:71:06:a5:93:22:72:
dd:6c:e2:d2:73:b7:57:44:08:2b:00:38:83:79:28:b8:dc:46:
6e:b3:e0:1e:a1:2c:e5:b2:44:25:15:2a:dc:2e:76:9c:0e:95:
50:3b:9a:4d:2f:49:75:3c:f4:08:aa:b9:d6:93:58:60:26:d9:
64:fe:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org