Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/UqoxJpz5yhT-ohjkhxNj4sGbspE.roa
File: UqoxJpz5yhT-ohjkhxNj4sGbspE.roa (raw, json)
Hash identifier: IlAvJZFKKzy2fLR3Y3q6n18TYPZpt1jBvcfdAa24l+E=
Subject key identifier: 52:AA:31:26:9C:F9:CA:14:FE:A2:18:E4:87:13:63:E2:C1:9B:B2:91
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 01856B936149A7179B9D9F71771D94D1DEB3
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/UqoxJpz5yhT-ohjkhxNj4sGbspE.roa
Signing time: Sun 01 Jan 2023 04:24:58 +0000
ROA not before: Sun 01 Jan 2023 04:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35831
IP address blocks: 94.31.54.0/24 maxlen: 24
213.152.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:61:49:a7:17:9b:9d:9f:71:77:1d:94:d1:de:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 04:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52aa31269cf9ca14fea218e4871363e2c19bb291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:0e:83:a3:83:4e:b5:ee:58:ab:c2:9c:63:
65:67:72:08:af:80:71:d3:e9:33:0c:5d:03:8c:a0:
8a:fe:b3:d7:c2:29:19:38:33:0d:5e:0d:3b:19:6a:
6d:26:bd:19:6c:fb:1f:42:f7:91:f7:f3:d0:44:3f:
2b:47:02:dd:15:03:9c:d8:e4:22:78:b1:40:5c:0d:
13:f6:97:f5:ba:4c:38:53:fe:5f:45:e0:07:98:89:
63:6d:11:e4:9f:fa:f5:c9:9f:d2:96:f4:cc:5d:c6:
12:13:94:87:73:55:cd:f9:ed:f5:af:2b:a8:98:ee:
6d:7a:69:31:c3:24:b2:0d:9e:fe:70:c3:fc:17:15:
c2:03:2c:2c:b5:0d:d7:c5:51:53:0b:ce:4d:49:38:
70:ce:d2:ab:b7:73:79:52:09:69:55:dd:7c:7a:c4:
61:a5:81:7f:66:9d:3a:cb:5b:1c:36:38:2f:27:02:
dd:21:94:1f:ab:bd:0a:9b:ed:e5:71:d5:f6:87:4a:
ea:a7:b4:f5:11:81:dc:1e:70:d3:6a:dc:f2:92:1b:
ea:ad:fa:8b:4c:50:ce:21:9d:0a:b0:54:b5:ad:1a:
ff:13:9d:96:b0:38:a0:ca:04:0c:bf:31:e3:ce:1f:
0a:4a:92:3f:d0:bb:44:42:93:58:c9:b9:7e:1e:12:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AA:31:26:9C:F9:CA:14:FE:A2:18:E4:87:13:63:E2:C1:9B:B2:91
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/UqoxJpz5yhT-ohjkhxNj4sGbspE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.54.0/24
213.152.251.0/24
Signature Algorithm: sha256WithRSAEncryption
60:50:c1:db:05:dc:cd:16:f1:7d:68:b3:7f:a8:8d:df:71:54:
a7:46:d9:2c:0b:53:2c:82:d7:e8:70:02:9d:47:4d:78:e4:9d:
9d:dc:75:dc:a1:b8:2d:24:9f:45:aa:03:bf:15:9b:ee:2a:f4:
69:b6:a1:a1:e3:e1:62:c3:80:37:b3:1d:fb:03:c8:c6:23:b4:
c9:37:fc:8e:2f:b0:50:11:87:f8:30:32:21:28:1d:51:02:c8:
1b:19:9a:05:08:b8:b7:b4:95:01:8d:f1:e0:4a:45:9f:39:3d:
5b:51:a9:c7:47:00:09:6d:5c:1b:9f:af:f1:47:ff:14:93:dd:
ab:a5:05:11:18:f8:6f:d9:d0:86:91:de:65:3d:eb:6b:4b:5b:
c5:6b:b6:e6:3f:07:34:03:99:70:ed:43:e5:11:52:d5:59:15:
c1:d3:cd:02:f5:49:2e:e3:a0:b4:1f:5b:5e:a4:df:1e:3c:06:
59:1f:80:f4:3f:3d:5b:3f:b4:f2:e7:d9:c0:7a:20:ce:10:e2:
66:3f:2d:4c:4d:00:09:d6:47:97:fd:2a:3d:f0:03:fc:58:bd:
44:8c:f3:12:54:58:eb:41:91:c4:23:c5:33:dc:89:c6:26:da:
1d:4c:92:fc:75:ec:3f:79:d9:3c:9d:2b:54:b0:2c:c6:ea:c6:
01:b3:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:46 2024 by rpki-client on console-fra.rpki-client.org