Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/RZ_UIXm04iqAPfSye-AQnDqqS04.roa
File: RZ_UIXm04iqAPfSye-AQnDqqS04.roa (raw, json)
Hash identifier: uoSh7rB3t45KVlKsWm94DRJyfK2LIGQlBnfR9/HmOhM=
Subject key identifier: 45:9F:D4:21:79:B4:E2:2A:80:3D:F4:B2:7B:E0:10:9C:3A:AA:4B:4E
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 018570B0873F63AA8FF6FC9E490BF22A0596
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/RZ_UIXm04iqAPfSye-AQnDqqS04.roa
Signing time: Mon 02 Jan 2023 04:14:55 +0000
ROA not before: Mon 02 Jan 2023 04:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34994
IP address blocks: 82.193.95.0/24 maxlen: 32
82.193.94.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:87:3f:63:aa:8f:f6:fc:9e:49:0b:f2:2a:05:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Jan 2 04:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=459fd42179b4e22a803df4b27be0109c3aaa4b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:21:bc:bd:a2:b9:19:ca:4c:b2:b2:2d:b3:
4f:e9:25:5d:4b:34:60:24:bb:33:aa:cf:86:ed:7e:
05:6f:99:ff:e8:9a:42:a3:c6:fa:e7:e1:90:c1:56:
7f:86:ce:85:b7:0b:e4:eb:de:e1:ff:eb:64:58:ed:
79:88:6b:d9:1f:03:37:96:bc:ba:d9:39:40:9f:e7:
19:98:ba:ad:e8:bd:7b:4e:fe:f7:1f:88:96:5d:6e:
8d:04:b9:b5:c4:d0:15:46:72:0f:bd:c0:e1:c7:2c:
f2:89:93:d7:96:d8:de:7d:67:73:0c:27:74:48:59:
20:fc:90:f5:bc:dd:03:7b:c2:db:1d:2a:1c:6a:55:
da:55:10:4b:d6:6c:b1:33:f5:07:72:e2:57:2f:92:
9f:45:85:39:dc:0e:dd:62:d1:04:9c:d8:3d:c2:4e:
78:1c:bb:88:3f:9c:9d:44:f5:a5:4d:a9:ea:cb:3e:
db:ad:4f:1b:dc:3b:4b:fc:c8:95:6e:8d:90:9e:6b:
9d:3b:c2:04:9d:ce:84:9f:74:9a:0c:19:5d:58:66:
b9:36:bf:6c:1b:e7:4c:56:d5:ce:35:c1:c5:2d:56:
ed:a6:f1:6a:15:84:7c:a4:1b:f2:23:ef:49:6c:81:
64:8b:73:79:27:af:56:99:3d:f8:87:e8:aa:54:04:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9F:D4:21:79:B4:E2:2A:80:3D:F4:B2:7B:E0:10:9C:3A:AA:4B:4E
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/RZ_UIXm04iqAPfSye-AQnDqqS04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.193.94.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:05:ac:3c:92:fe:50:b4:5d:17:45:f1:c7:d2:aa:bf:3b:0d:
e8:02:0a:c8:22:56:1f:b4:19:9e:c9:1c:f5:f6:e2:b0:6a:85:
41:f7:f0:fe:00:60:91:9f:77:bf:91:d2:d1:36:5f:d5:9d:7f:
c2:14:97:ef:cc:b1:c6:7f:35:39:37:de:d9:0a:14:95:3b:24:
c2:fc:4f:07:55:9d:80:90:0e:35:a6:dc:c9:c1:2c:46:16:b0:
85:32:6e:4f:76:3a:dc:50:23:d1:93:40:ac:12:da:af:8b:47:
25:96:ad:56:2b:bd:b0:c4:6d:47:10:b1:f6:fc:02:5b:ae:0c:
c5:68:af:9d:c9:cf:81:51:9e:c7:cd:c3:c3:85:0e:b4:04:c3:
2f:9d:3f:29:07:85:9b:fd:80:59:09:aa:c5:f9:bd:b6:7a:d3:
b7:48:6c:30:2e:ce:d2:2e:a8:1a:ef:5b:5f:15:de:e4:e1:08:
4b:3c:24:ec:8e:bd:ae:7a:a2:d0:db:0b:2e:7f:3c:67:b0:bc:
96:77:79:3d:59:e2:fe:d2:41:92:71:eb:b5:36:c7:63:06:73:
6c:a6:fa:09:9d:50:3a:ed:34:e7:91:23:f1:60:f5:7f:9d:0f:
9a:d1:be:f8:c1:46:6d:23:06:b5:49:8f:70:94:de:c0:eb:e7:
0f:42:7c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:09 2024 by rpki-client on console-ams.rpki-client.org