Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/UcoN7wefMM2xIwCVoLPnxXNqdXw.roa
File: UcoN7wefMM2xIwCVoLPnxXNqdXw.roa (raw, json)
Hash identifier: bfW2ar/fOPT/033nqLRLZ1Rt6GOMRcdpHTmlbVWFxeE=
Subject key identifier: 51:CA:0D:EF:07:9F:30:CD:B1:23:00:95:A0:B3:E7:C5:73:6A:75:7C
Certificate issuer: /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial: 0185723A334582953619E6827FA3D4070AB9
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/UcoN7wefMM2xIwCVoLPnxXNqdXw.roa
Signing time: Mon 02 Jan 2023 11:24:54 +0000
ROA not before: Mon 02 Jan 2023 11:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35740
IP address blocks: 195.170.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:33:45:82:95:36:19:e6:82:7f:a3:d4:07:0a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Validity
Not Before: Jan 2 11:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51ca0def079f30cdb1230095a0b3e7c5736a757c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:8a:dc:81:a0:43:73:65:69:aa:47:ba:17:
73:8c:34:44:0b:a4:2c:09:c5:7d:a1:d1:ff:c7:7a:
f0:5a:e3:3d:23:e3:b4:9c:a4:ac:95:35:92:86:ff:
45:f1:d9:88:24:57:81:ff:d7:dc:38:20:4c:33:ae:
24:73:91:8d:32:87:0d:d2:27:8d:4a:bf:22:8a:78:
dd:7d:7a:2b:77:46:32:fe:22:c6:e1:7a:aa:7f:0e:
3b:79:d2:93:bc:fd:97:17:21:d2:90:38:48:ad:5a:
e0:f2:33:cb:0c:e6:2f:76:da:69:de:8e:3f:ca:91:
ce:c8:37:59:28:de:3a:cc:e7:84:b8:f3:df:d5:1b:
8e:23:9d:02:b7:d7:32:ee:94:cb:5b:de:51:de:53:
89:03:4f:cb:4c:5c:b0:8e:48:93:2c:99:c6:fc:41:
a9:0f:02:ad:af:45:5f:7a:b4:4e:e0:3b:20:67:b4:
f0:e1:8a:fb:b9:e6:47:ed:d3:e1:bb:80:2f:08:c7:
73:38:f3:be:3e:e3:bd:44:8c:06:0a:a8:0e:8e:64:
e1:95:5d:e7:87:ad:f5:98:5e:df:40:7e:14:5e:4f:
45:11:c1:02:5d:02:95:7a:26:3c:34:b7:c3:cd:de:
dc:8a:d5:46:d6:b0:b0:d8:eb:35:aa:38:11:56:6f:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CA:0D:EF:07:9F:30:CD:B1:23:00:95:A0:B3:E7:C5:73:6A:75:7C
X509v3 Authority Key Identifier:
keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/UcoN7wefMM2xIwCVoLPnxXNqdXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.170.0/24
Signature Algorithm: sha256WithRSAEncryption
17:14:24:df:56:5e:bf:c3:fc:44:d1:27:ef:da:94:da:46:81:
40:71:3b:12:82:85:67:09:da:ef:b9:84:cb:c7:2f:c4:0a:d2:
89:cc:be:8f:c3:90:55:31:de:42:40:74:90:7d:dd:f8:93:e9:
9e:33:c7:5b:4c:d8:4c:a3:12:6e:54:bd:3e:43:fe:d2:90:1a:
4c:37:2b:bb:df:02:1b:29:99:7a:69:0f:51:1c:c0:7c:17:46:
9e:17:b7:ad:36:0b:45:11:6d:d5:8f:de:0b:92:06:4f:ba:ab:
4a:6a:fb:81:78:43:d4:da:b3:41:39:61:15:b0:92:5b:47:f0:
70:99:a3:4d:85:13:7a:2c:ec:da:87:c0:dc:22:64:30:80:49:
62:dd:f4:04:f1:be:d5:2d:e9:27:b9:9e:17:7d:4d:b9:d6:9d:
4b:55:47:16:c9:45:75:5a:63:55:7a:09:e7:91:26:4e:9b:1a:
dc:07:5b:54:90:0b:04:66:b1:0b:63:a3:7a:92:ed:91:bc:1d:
03:c1:c8:11:1c:2b:c3:0f:d0:c9:07:97:cf:f9:ab:34:4e:61:
6f:34:36:2f:2b:31:bf:5e:ea:bc:99:64:b2:66:f2:02:81:3c:
5a:a6:cf:a4:f9:8b:44:73:62:18:56:3f:8b:43:62:76:de:c2:
29:d2:53:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:41 2024 by rpki-client on console-fra.rpki-client.org