Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/RUElYrXekMZpev4qIhMQfsAWzc4.roa
File: RUElYrXekMZpev4qIhMQfsAWzc4.roa (raw, json)
Hash identifier: KAqBhJD9wMd4jkj/B4G3M7SZdD+7ufqNRKJ/RHhVWc4=
Subject key identifier: 45:41:25:62:B5:DE:90:C6:69:7A:FE:2A:22:13:10:7E:C0:16:CD:CE
Certificate issuer: /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial: 018C6A5295361F2301FFEA8D8AAEDF9A088E
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/RUElYrXekMZpev4qIhMQfsAWzc4.roa
Signing time: Thu 14 Dec 2023 21:54:06 +0000
ROA not before: Thu 14 Dec 2023 21:54:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50427
IP address blocks: 176.116.184.0/21 maxlen: 21
176.116.184.0/22 maxlen: 22
176.116.188.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6a:52:95:36:1f:23:01:ff:ea:8d:8a:ae:df:9a:08:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
Validity
Not Before: Dec 14 21:54:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45412562b5de90c6697afe2a2213107ec016cdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1b:f5:e1:d5:cc:53:e9:89:33:d9:36:d7:31:
44:1e:47:e6:b9:16:ce:84:48:ea:93:90:4d:e5:b3:
88:81:85:71:1e:7f:c8:75:1b:bd:03:fb:18:a2:bc:
1b:f3:6f:6d:4a:8e:19:c1:b0:4d:c8:ac:7e:a3:23:
b3:00:48:62:9b:20:d9:e4:53:86:23:e7:e7:56:5a:
65:63:10:18:87:af:d1:06:1f:50:2a:b5:fa:87:6d:
74:76:35:bd:33:d2:ab:04:8c:b9:fb:1b:db:d9:e7:
44:64:7a:10:ec:00:6e:59:95:62:36:63:14:66:aa:
ad:95:b4:bf:3a:82:ec:98:c2:86:02:0e:29:29:c1:
3c:8e:2b:f7:91:3a:b8:7e:45:8f:66:fe:43:02:1e:
8d:d3:66:29:68:7b:3f:c6:0d:3d:fb:3e:a6:61:6b:
ea:a2:a5:d1:79:db:14:56:55:38:e1:fe:4f:96:cf:
b6:77:cf:e9:df:62:5d:3d:79:70:a5:9e:50:05:7d:
35:ec:6a:60:68:01:db:d3:75:4d:e8:8e:df:25:57:
d0:69:1e:e4:34:e4:d2:c8:ac:4f:e8:70:d7:aa:4c:
34:3a:0b:dd:5e:f5:7f:82:6f:59:59:0d:b2:5f:f9:
e8:2f:78:92:63:18:d1:91:d7:7c:0d:3b:56:54:12:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:41:25:62:B5:DE:90:C6:69:7A:FE:2A:22:13:10:7E:C0:16:CD:CE
X509v3 Authority Key Identifier:
keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/RUElYrXekMZpev4qIhMQfsAWzc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.184.0/21
Signature Algorithm: sha256WithRSAEncryption
51:de:c0:11:81:8f:3a:8e:d7:c7:54:99:6a:a0:7d:b2:9e:cd:
ae:40:f1:18:d1:4a:27:65:65:e1:5c:83:7e:8b:93:ba:e9:dc:
35:e5:63:12:ef:90:51:a9:0d:bd:46:d9:3d:b5:c8:42:1b:af:
c3:ae:4a:34:99:82:f4:5e:75:59:76:7c:48:95:1d:ca:e0:b0:
de:47:a3:aa:21:50:99:96:fc:6b:59:18:af:25:f8:8a:ac:68:
c3:97:74:f0:ba:77:56:2e:a2:67:f8:6a:e6:4c:cc:92:73:d4:
2c:6d:9a:6d:c3:13:a5:eb:c2:4c:0e:0c:72:16:47:90:aa:81:
9c:52:65:4f:e1:bf:13:67:5d:3b:fb:03:5b:de:3f:d7:56:e4:
b1:81:c4:bc:61:25:57:66:18:02:6f:1c:5f:3d:5a:05:cb:91:
05:41:4a:ce:0b:21:a4:92:b5:77:b1:2a:ef:5c:ea:20:cc:de:
58:84:9e:b4:cf:b2:10:e2:a4:e6:34:f6:31:55:fc:8c:32:db:
b9:6d:e1:1a:6e:34:ba:a9:09:af:8c:cf:d4:d2:a2:98:40:7e:
14:1e:7c:dd:b3:8a:b2:96:e5:d2:e7:b8:e4:e4:7a:16:d9:e8:
03:da:66:90:a8:5d:5b:23:8c:06:15:94:eb:2d:3c:db:85:46:
63:3d:46:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:19 2024 by rpki-client on console-ams.rpki-client.org