Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/Uucvg5cIwt_r2zbjOaTHc9LVuLI.roa
File: Uucvg5cIwt_r2zbjOaTHc9LVuLI.roa (raw, json)
Hash identifier: z92+UvXH3z453EKj0p3CiTWBlRUlOwkc/i5pCwx77dA=
Subject key identifier: 52:E7:2F:83:97:08:C2:DF:EB:DB:36:E3:39:A4:C7:73:D2:D5:B8:B2
Certificate issuer: /CN=64dfe26d403141be9059ab2144325b402d4cab7d
Certificate serial: 018572559C353D77D4BD327EA44682F7438D
Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/Uucvg5cIwt_r2zbjOaTHc9LVuLI.roa
Signing time: Mon 02 Jan 2023 11:54:51 +0000
ROA not before: Mon 02 Jan 2023 11:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12952
IP address blocks: 176.241.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jan 2023 18:44:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:9c:35:3d:77:d4:bd:32:7e:a4:46:82:f7:43:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d
Validity
Not Before: Jan 2 11:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52e72f839708c2dfebdb36e339a4c773d2d5b8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6e:a9:8f:b9:3a:45:cc:a9:7f:f3:34:84:a5:
79:84:85:5d:1b:b0:e9:19:c7:81:a6:b8:dc:25:75:
15:b2:1d:ae:94:38:46:56:22:86:ea:f0:53:bf:99:
7e:a9:e6:c5:1f:f1:b7:1e:b5:ca:53:ce:43:df:eb:
4a:4b:7c:8f:3c:63:99:1f:80:3a:dc:84:68:56:4f:
42:5a:10:6a:d9:0b:fa:36:42:aa:b5:11:8d:a8:c6:
d2:e2:0b:48:bb:90:4b:01:f3:c9:b7:52:ed:de:8e:
4c:cf:3b:41:8c:00:e2:4d:72:6d:5e:11:39:07:26:
f8:f3:2f:f9:a2:f5:a2:8b:09:9b:32:41:ca:ed:dc:
ba:0f:99:73:d2:45:63:0c:8b:35:ec:6a:88:af:75:
6f:19:ef:43:8b:6c:58:55:a6:46:b4:03:7c:31:6f:
5a:f2:c2:19:78:3a:96:f3:33:22:ce:de:6c:82:66:
42:a0:c0:14:d9:36:30:d8:e4:43:bd:ff:11:62:a2:
83:87:6d:6d:85:c1:7a:32:de:55:f7:de:82:19:28:
2b:59:a8:43:e2:42:6a:bf:57:6a:77:d9:e3:bc:62:
d2:3c:3e:42:fd:d0:c0:ea:e8:bc:52:9b:5d:30:fa:
66:04:87:42:39:0e:0a:2e:03:1f:4f:61:1a:8f:1b:
b6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E7:2F:83:97:08:C2:DF:EB:DB:36:E3:39:A4:C7:73:D2:D5:B8:B2
X509v3 Authority Key Identifier:
keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/Uucvg5cIwt_r2zbjOaTHc9LVuLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.241.93.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:7d:79:c1:28:33:f6:f5:2b:3c:e9:0f:84:31:83:32:84:9d:
91:02:58:5d:98:c1:c2:e8:52:32:5c:37:9e:eb:80:b8:78:3f:
c1:6d:ed:0e:66:1b:0b:fb:da:ea:1b:08:8e:ab:af:9a:aa:89:
d8:93:55:10:b0:8a:4e:3a:ed:46:77:d3:7d:04:8f:08:bc:f7:
9a:67:db:af:25:b4:02:d7:96:5f:74:8e:3f:d8:3c:ab:bb:4c:
f3:4d:29:c3:3c:93:8b:9b:b2:63:60:dd:b2:e6:f2:1b:34:cc:
0c:c2:d6:0a:d7:96:00:00:ad:c7:15:f1:13:61:e5:75:22:57:
e7:b8:b3:3a:85:ac:33:4b:02:2f:48:41:2e:50:d6:44:e9:c4:
be:7d:62:f0:21:69:0d:fc:2f:12:a5:06:f6:9a:d5:f8:2d:97:
fa:cf:3b:c2:95:b3:f0:dc:d5:40:44:da:db:cc:3f:6d:2b:91:
53:58:f7:8a:21:e1:01:92:87:5c:20:e7:c6:e2:c5:24:0b:68:
02:85:b7:10:d8:6c:4d:ae:89:13:e1:58:64:c1:c3:b9:ef:e4:
24:fc:4b:bc:d0:28:29:42:62:2a:0c:43:fa:64:86:c1:bb:a4:
a3:46:b3:8c:3f:8a:d7:bf:58:b8:13:58:b3:47:a5:83:56:15:
48:df:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:24 2024 by rpki-client on console-ams.rpki-client.org