Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/UFJQ34DGPaMGQFQAQdr7afK4JKQ.roa
File: UFJQ34DGPaMGQFQAQdr7afK4JKQ.roa (raw, json)
Hash identifier: j3VaHgnJisBLnycRnpMTy/q3XxzzxRUMQ3r7uow4Rnk=
Subject key identifier: 50:52:50:DF:80:C6:3D:A3:06:40:54:00:41:DA:FB:69:F2:B8:24:A4
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 0185A14223FF1F9036016CE956DFCD0BB06C
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/UFJQ34DGPaMGQFQAQdr7afK4JKQ.roa
Signing time: Wed 11 Jan 2023 14:35:44 +0000
ROA not before: Wed 11 Jan 2023 14:35:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50607
IP address blocks: 185.48.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:42:23:ff:1f:90:36:01:6c:e9:56:df:cd:0b:b0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Jan 11 14:35:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=505250df80c63da30640540041dafb69f2b824a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b4:f3:0d:38:40:17:d2:d6:e5:f7:75:23:5f:
27:41:26:13:55:e5:66:72:1f:11:30:dd:3d:16:db:
16:ab:71:4b:5f:86:7f:12:e7:ee:13:fd:a5:e9:44:
41:fe:96:d6:15:8d:0a:2a:64:1b:77:3e:a6:e7:8a:
5a:f9:3f:66:71:78:06:47:42:30:ae:b4:01:d9:bf:
f8:9c:7d:fb:9b:ab:33:b7:dc:fa:e3:41:a3:df:c2:
c1:10:54:16:07:66:4f:1d:ae:0b:79:58:ec:66:74:
98:26:10:8e:56:54:4e:a5:e7:2e:6a:f3:2f:81:e7:
6f:d2:4a:b9:90:3c:37:a1:15:72:b2:16:21:21:bf:
79:b8:d0:93:1b:b9:76:f3:e4:4e:a1:e0:17:50:0d:
c2:59:a8:57:a5:b6:cc:88:da:9a:3a:1e:5e:08:42:
1c:dd:f0:66:e6:e1:f8:aa:9f:43:02:b7:c5:d0:9c:
21:35:17:7a:24:f8:c2:3b:85:26:95:a2:ac:8c:0d:
65:51:ec:8a:78:57:a7:f3:fd:37:e2:d3:21:27:af:
1e:5b:8d:a9:5a:10:00:c0:be:bc:d1:6f:ae:88:41:
80:19:13:ce:06:0b:f9:0f:ac:d3:a9:63:ef:0f:f2:
07:e1:a8:48:02:6b:b1:4a:3b:c5:26:50:d3:10:19:
98:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:52:50:DF:80:C6:3D:A3:06:40:54:00:41:DA:FB:69:F2:B8:24:A4
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/UFJQ34DGPaMGQFQAQdr7afK4JKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.9.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:f9:cd:fb:13:78:18:56:e3:c0:f2:42:a0:99:a3:37:9f:93:
d8:a5:7a:2a:36:fe:35:87:e7:66:56:a5:52:c2:b1:6c:d6:13:
4d:7d:02:c8:f5:60:89:e3:7b:00:a7:d3:4d:0e:26:82:96:47:
94:d1:d1:b2:33:ce:3a:5b:8b:0d:83:29:5b:ee:8e:13:a6:26:
be:af:67:8c:0d:d2:cc:68:8d:d2:58:64:79:21:70:a0:52:03:
60:5c:0e:84:fc:4d:54:1a:4c:3f:78:0d:e2:73:32:c6:9b:8b:
fe:c9:91:88:58:2f:20:c6:b2:29:00:6d:98:e7:c1:86:48:9c:
d2:b6:9d:d0:a3:d9:9c:1a:39:e4:dd:d3:c0:d6:e8:16:20:1b:
45:ed:ca:3f:45:a7:b4:50:c9:0c:29:ab:3e:c2:3b:ce:02:3e:
a1:82:25:10:1d:98:d4:b8:af:1a:2c:1c:aa:ec:f6:33:59:6b:
f9:65:5e:68:9a:17:3c:11:7a:0e:9c:08:f3:58:49:c0:cd:64:
74:ef:50:95:51:d9:54:56:ce:76:fa:75:69:d7:be:95:d2:e2:
1e:f8:61:ca:77:4f:73:25:3e:6d:76:5d:35:99:cb:72:0a:c1:
30:6e:69:8f:8a:43:32:07:72:f5:dc:42:bf:43:3a:11:49:e0:
fa:33:69:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWhQiP/H5A2AWzpVt/NC7BsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Yjg3YjNiMDljY2I2OWE2ZGUyMDQ2OGU5MGVjYmIxOGY1
ZWNiYjYwHhcNMjMwMTExMTQzNTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDUyNTBkZjgwYzYzZGEzMDY0MDU0MDA0MWRhZmI2OWYyYjgyNGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rTzDThAF9LW5fd1I18nQSYTVeVm
ch8RMN09FtsWq3FLX4Z/EufuE/2l6URB/pbWFY0KKmQbdz6m54pa+T9mcXgGR0Iw
rrQB2b/4nH37m6szt9z640Gj38LBEFQWB2ZPHa4LeVjsZnSYJhCOVlROpecuavMv
gedv0kq5kDw3oRVyshYhIb95uNCTG7l28+ROoeAXUA3CWahXpbbMiNqaOh5eCEIc
3fBm5uH4qp9DArfF0JwhNRd6JPjCO4UmlaKsjA1lUeyKeFen8/034tMhJ68eW42p
WhAAwL680W+uiEGAGRPOBgv5D6zTqWPvD/IH4ahIAmuxSjvFJlDTEBmYUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFBSUN+Axj2jBkBUAEHa+2nyuCSkMB8GA1UdIwQY
MBaAFLm4ezsJzLaabeIEaOkOy7GPXsu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJoN093bk10cHB0NGdSbzZRN0xzWTlleTdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wMGRkYWYtM2JlNS00MjBkLTkxOWYt
M2I0Y2I5NzVhOWJjLzEvVUZKUTM0REdQYU1HUUZRQVFkcjdhZks0SktRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wMGRkYWYtM2JlNS00MjBkLTkxOWYtM2I0Y2I5NzVhOWJj
LzEvdWJoN093bk10cHB0NGdSbzZRN0xzWTlleTdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTAJMA0G
CSqGSIb3DQEBCwUAA4IBAQC7+c37E3gYVuPA8kKgmaM3n5PYpXoqNv41h+dmVqVS
wrFs1hNNfQLI9WCJ43sAp9NNDiaClkeU0dGyM846W4sNgylb7o4Tpia+r2eMDdLM
aI3SWGR5IXCgUgNgXA6E/E1UGkw/eA3iczLGm4v+yZGIWC8gxrIpAG2Y58GGSJzS
tp3Qo9mcGjnk3dPA1ugWIBtF7co/Rae0UMkMKas+wjvOAj6hgiUQHZjUuK8aLByq
7PYzWWv5ZV5omhc8EXoOnAjzWEnAzWR071CVUdlUVs52+nVp176V0uIe+GHKd09z
JT5tdl01mctyCsEwbmmPikMyB3L13EK/QzoRSeD6M2lj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:11 2024 by rpki-client on console-fra.rpki-client.org