Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/ueHb7-4lFPTbfBI_HOt6KAG7qdA.roa
File: ueHb7-4lFPTbfBI_HOt6KAG7qdA.roa (raw, json)
Hash identifier: d0ifjUzv1sTJ9GakpVI0zuIgNQS06pTEO3rXBezaLKc=
Subject key identifier: B9:E1:DB:EF:EE:25:14:F4:DB:7C:12:3F:1C:EB:7A:28:01:BB:A9:D0
Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial: 018571277735D37F2F2C40AB72CAC6FC8349
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/ueHb7-4lFPTbfBI_HOt6KAG7qdA.roa
Signing time: Mon 02 Jan 2023 06:24:49 +0000
ROA not before: Mon 02 Jan 2023 06:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47576
IP address blocks: 185.126.20.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:77:35:d3:7f:2f:2c:40:ab:72:ca:c6:fc:83:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Validity
Not Before: Jan 2 06:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9e1dbefee2514f4db7c123f1ceb7a2801bba9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:65:f3:a8:bd:0b:9c:a6:51:c7:8e:ba:d6:c2:
3c:63:39:51:7d:db:40:78:b4:1d:13:d0:67:1a:b6:
25:8a:a2:0f:b8:41:b9:6d:45:4e:9d:84:0a:e1:31:
0e:ef:18:c1:55:39:af:27:f3:da:7b:97:40:c1:85:
f0:d6:85:f2:34:0d:30:b4:03:5f:ef:27:01:91:2b:
d1:c3:63:c1:b2:05:4a:ba:c3:12:f3:75:96:d7:6b:
d0:c6:93:61:31:db:b8:18:a5:55:d8:c4:a4:bd:1b:
cc:ae:f1:80:de:52:a6:52:62:22:0f:a4:bf:ac:e3:
12:a7:ca:94:82:3f:e0:11:eb:9d:e2:e0:91:21:05:
27:65:e6:10:37:ba:19:0c:14:dc:d5:9b:1e:1f:35:
f7:b6:22:8b:76:36:32:28:56:c3:fa:17:ca:b9:5b:
32:3b:a0:3b:3b:ff:19:72:63:34:30:75:28:bf:fe:
a8:0b:7a:91:e3:81:2e:70:14:b7:0e:d5:97:28:60:
f9:8c:4b:79:a2:0d:05:a1:99:fb:b2:5b:88:8d:eb:
69:ca:90:6a:36:16:bb:1f:be:4a:64:17:f9:53:d9:
a2:b8:66:6c:6d:1f:95:23:99:53:82:f5:8c:21:88:
c0:9f:fd:49:64:e6:09:ff:ac:35:d6:56:36:68:b1:
90:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E1:DB:EF:EE:25:14:F4:DB:7C:12:3F:1C:EB:7A:28:01:BB:A9:D0
X509v3 Authority Key Identifier:
keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/ueHb7-4lFPTbfBI_HOt6KAG7qdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.20.0/22
Signature Algorithm: sha256WithRSAEncryption
70:83:c8:54:14:95:a2:92:c6:84:dd:e5:f4:83:06:08:5f:f9:
e9:d8:2d:2e:c1:80:73:0c:ef:8f:49:c3:06:c4:ab:4d:f1:88:
ea:f1:22:14:5f:d2:77:cc:dc:cb:7d:a9:d6:76:44:07:76:2f:
66:f6:07:28:08:96:0e:ed:62:52:8a:cf:45:7d:e0:bd:2e:79:
79:db:4b:60:03:5a:7c:05:de:19:ce:bb:ab:03:b2:16:f7:98:
c3:06:9a:81:bf:bd:79:f4:c4:27:3a:ca:2e:8a:f1:8e:d4:a2:
10:e0:99:56:1c:4d:ee:ad:4d:6a:26:03:11:4c:9d:7c:3d:bb:
06:ce:1d:e1:7f:79:9b:4c:ce:1e:1e:28:e0:5a:a1:81:97:d0:
a4:00:c3:5b:cb:de:4b:ae:45:c1:cf:c3:a5:de:d6:af:1a:1e:
50:8c:e1:57:e0:7a:ba:ad:f3:da:17:54:4f:76:c8:b9:12:0d:
30:65:d0:ae:0c:d1:21:df:41:21:00:8b:8b:be:6d:a0:15:65:
9e:ce:5f:d9:26:80:19:99:78:bb:00:f7:50:af:29:14:51:fd:
98:18:04:c3:8f:61:f0:49:53:92:8d:ae:4f:2a:da:5c:18:da:
00:86:7f:ee:4f:cf:8b:74:54:6c:b4:7a:5f:7b:6b:95:28:6d:
96:df:bf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:37 2024 by rpki-client on console-fra.rpki-client.org