Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/U6mYCSj4RaMbplLITbHsZbJXADo.roa
File: U6mYCSj4RaMbplLITbHsZbJXADo.roa (raw, json)
Hash identifier: c8scRSa4J2o4swpeCOaoWLglUPHSDknLcD9iigDf4BU=
Subject key identifier: 53:A9:98:09:28:F8:45:A3:1B:A6:52:C8:4D:B1:EC:65:B2:57:00:3A
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018571BA0E29610A4CA78A821D533C17B1EA
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/U6mYCSj4RaMbplLITbHsZbJXADo.roa
Signing time: Mon 02 Jan 2023 09:04:56 +0000
ROA not before: Mon 02 Jan 2023 09:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 188.191.98.0/24 maxlen: 24
188.191.103.0/24 maxlen: 24
188.191.101.0/24 maxlen: 24
188.191.110.0/24 maxlen: 24
188.191.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Jun 2023 03:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:0e:29:61:0a:4c:a7:8a:82:1d:53:3c:17:b1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 2 09:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53a9980928f845a31ba652c84db1ec65b257003a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:74:b1:47:24:53:7e:53:8a:02:e0:f5:2f:5f:
20:57:2b:ee:93:6f:7c:5f:89:4c:19:ec:ca:16:69:
47:b1:a1:ce:da:36:a9:2e:5e:32:38:97:8a:b3:da:
08:41:50:97:74:a0:a6:e4:ec:25:0b:44:57:33:3e:
67:37:ca:93:a4:ce:d6:e9:2d:4d:4a:2a:ae:62:17:
f2:7f:81:5d:fa:20:f0:7c:b9:48:b4:d2:fa:08:99:
36:a6:4e:a0:a8:f9:f4:71:b9:c5:46:cb:16:cb:04:
16:51:df:e9:72:7b:fd:fa:89:77:27:d0:4a:4e:00:
c3:e5:13:72:82:e1:f9:02:81:1c:c0:4b:fe:1e:5a:
1e:c2:11:02:85:2f:de:13:9f:bb:bf:88:65:e4:7f:
c3:fb:6d:2a:de:11:c0:95:63:98:43:00:6e:2e:9c:
42:08:9e:1c:7c:31:2f:94:4d:25:6e:ab:34:28:31:
5c:a2:84:81:45:a8:92:18:76:84:57:2b:2c:84:3d:
8f:d1:a7:34:83:db:08:5b:f7:72:73:48:60:0e:d9:
16:62:fa:37:72:95:51:2b:c9:75:9c:c2:e3:9c:63:
46:56:02:e3:c2:6d:92:64:52:c8:02:30:f8:45:9c:
47:c5:4e:66:7e:ca:47:b5:6b:d7:5c:56:fb:07:f3:
88:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A9:98:09:28:F8:45:A3:1B:A6:52:C8:4D:B1:EC:65:B2:57:00:3A
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/U6mYCSj4RaMbplLITbHsZbJXADo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.98.0/24
188.191.101.0/24
188.191.103.0/24
188.191.109.0-188.191.110.255
Signature Algorithm: sha256WithRSAEncryption
4e:cc:34:1a:5d:29:87:87:b2:a3:de:76:2a:be:8d:0c:c4:c3:
4a:16:48:1a:21:5a:df:ea:cc:35:56:dd:c3:a6:db:72:e5:6b:
5a:15:3e:b5:0b:00:30:1e:38:83:76:5e:86:eb:65:d7:18:65:
1a:e5:09:83:3c:b2:d8:7b:44:11:1e:df:08:0b:a0:43:5b:24:
65:ae:2f:8e:1c:ad:56:6d:7f:d2:09:0b:c7:ed:e1:c9:3c:43:
de:a7:7f:6e:86:10:8a:56:a4:90:d7:55:b7:e9:15:96:39:7e:
6b:c3:5b:d9:51:a8:b0:d4:04:c7:b4:f9:2b:5d:ca:88:39:a4:
99:b8:bd:bf:21:f4:1f:e7:88:78:a8:75:2a:cb:42:25:a5:c2:
9c:51:a7:94:e2:9a:58:cf:c5:8c:9b:39:1d:2f:4b:ac:d0:55:
af:2a:cd:62:48:0a:8c:5a:f6:05:c4:31:a3:85:5b:3d:f3:a3:
d3:a5:61:54:1a:13:63:91:5d:f2:0d:a3:bc:31:c4:9b:8c:6b:
d4:0c:18:6e:d7:3f:32:71:8d:7c:2f:4a:d5:3a:c9:45:07:e5:
94:19:8b:a7:49:33:5a:9e:a4:c5:cb:a6:6e:4e:f9:22:89:f7:
03:fb:b3:f0:c6:97:4b:a0:de:93:1e:ed:c0:22:26:db:9b:7c:
76:44:57:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:49 2024 by rpki-client on console-ams.rpki-client.org