Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/UBonDclkFB9X4Q5DFKAB1Y6ea_A.roa
File: UBonDclkFB9X4Q5DFKAB1Y6ea_A.roa (raw, json)
Hash identifier: c3ZHfpLxEj6udnFTafrHpe4SL0UuNMpUbckgnqnVdDc=
Subject key identifier: 50:1A:27:0D:C9:64:14:1F:57:E1:0E:43:14:A0:01:D5:8E:9E:6B:F0
Certificate issuer: /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial: 018CC3B6B8A692B20B2E0E1E938D7DBFEAEF
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/UBonDclkFB9X4Q5DFKAB1Y6ea_A.roa
Signing time: Mon 01 Jan 2024 06:29:41 +0000
ROA not before: Mon 01 Jan 2024 06:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49576
IP address blocks: 193.148.96.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b8:a6:92:b2:0b:2e:0e:1e:93:8d:7d:bf:ea:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Validity
Not Before: Jan 1 06:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=501a270dc964141f57e10e4314a001d58e9e6bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:6f:85:a1:a5:e4:72:9d:ea:19:8e:b9:71:
50:69:8c:02:d2:b8:c4:1d:b7:fd:45:d9:f7:39:0d:
ea:d1:23:56:3a:83:cc:5f:24:cb:94:79:e3:1d:49:
29:95:3e:75:0b:e8:6c:13:b4:d4:9c:a8:11:a6:f5:
49:f6:be:bc:ac:ec:ea:26:45:01:ae:9d:a3:1e:23:
48:6d:39:c2:00:d6:eb:fa:88:6a:a1:7f:60:6b:7b:
94:7f:82:ad:2a:14:09:36:33:cc:2d:60:f5:1b:1e:
09:7f:5f:50:67:81:02:26:5d:ac:2a:2d:27:67:7a:
01:bd:60:2b:b8:d9:94:e4:a3:c0:d6:fb:7b:1d:27:
cd:88:fc:e4:dc:3e:cd:81:a4:9b:e7:92:d3:1e:22:
54:2c:7a:cb:fa:15:e6:0d:56:83:e2:15:4b:a9:9d:
7c:cd:02:d2:4e:59:9b:21:52:3b:c9:0c:63:69:2f:
58:d5:0d:6a:3d:f1:32:a7:4a:04:39:7e:b0:1e:fb:
cf:9d:65:1e:6c:c8:83:f4:02:f4:da:b3:be:3a:d9:
96:0d:5e:dc:67:a6:9c:b5:de:c7:1e:59:80:ac:64:
1d:0d:2f:7c:80:7b:bc:c7:3b:54:c0:61:42:c4:b4:
91:0f:b7:60:1f:f1:ff:ee:47:d0:67:38:57:b3:27:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1A:27:0D:C9:64:14:1F:57:E1:0E:43:14:A0:01:D5:8E:9E:6B:F0
X509v3 Authority Key Identifier:
keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/UBonDclkFB9X4Q5DFKAB1Y6ea_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.96.0/19
Signature Algorithm: sha256WithRSAEncryption
33:b4:a0:f6:8c:53:21:a7:ee:56:a2:26:a2:1f:f5:02:c9:a4:
0a:36:c5:44:d5:ef:ec:81:63:5f:2e:91:43:54:73:0c:3c:ed:
10:11:92:df:a9:11:16:30:7f:15:07:aa:52:d8:e8:4b:f9:6e:
6b:ff:9a:58:8a:9e:27:3d:57:e7:5f:a4:c2:5f:33:40:aa:07:
73:dd:d2:6f:62:d3:cc:8e:e4:18:3c:f7:ad:a2:21:67:9b:48:
91:c6:ba:ab:50:c7:53:6c:f5:01:1a:3c:92:65:3e:e1:fe:37:
61:b6:f3:1a:6c:14:89:76:95:92:03:82:9d:79:1c:fa:bb:be:
15:1f:4a:3e:13:4a:ba:b1:00:b2:bb:ce:18:79:fb:47:b7:d9:
5f:45:93:3a:46:22:3b:e5:67:6f:37:58:06:78:d5:7c:bc:ce:
43:3f:bb:d6:cd:92:27:4d:3f:2e:34:1e:8a:1c:6a:43:90:5c:
d8:e6:18:76:a5:88:0d:f8:9b:2e:37:ed:82:cf:b5:cc:99:db:
dc:da:25:f1:b7:2a:80:7f:ae:00:46:ce:9f:c4:cb:f4:c9:e6:
d7:bc:dd:54:b4:2b:25:a6:01:38:6e:e2:0a:d4:bb:3e:08:71:
12:c6:fd:f6:bb:42:6c:17:11:73:df:6f:3b:69:90:f4:35:83:
bd:6c:64:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:24 2025 by rpki-client