Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/UJoCIJzWMwPNt3EawWglKadJG8A.roa
File: UJoCIJzWMwPNt3EawWglKadJG8A.roa (raw, json)
Hash identifier: aTFFjBdIT3d3b2ezQbvcn/uzGczoIag3eFSOHfv0FOY=
Subject key identifier: 50:9A:02:20:9C:D6:33:03:CD:B7:71:1A:C1:68:25:29:A7:49:1B:C0
Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Certificate serial: 018A230E639EEA20B768074F4A0910E02D81
Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/UJoCIJzWMwPNt3EawWglKadJG8A.roa
Signing time: Wed 23 Aug 2023 15:41:00 +0000
ROA not before: Wed 23 Aug 2023 15:41:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61024
IP address blocks: 185.124.160.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:23:0e:63:9e:ea:20:b7:68:07:4f:4a:09:10:e0:2d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Validity
Not Before: Aug 23 15:41:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=509a02209cd63303cdb7711ac1682529a7491bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:40:dc:43:60:08:c7:59:79:cb:af:71:e7:
5d:62:12:59:9b:9e:e2:17:65:3d:e3:4c:6d:a7:ab:
0d:bd:e3:fe:f5:76:f2:df:9c:cb:a3:4c:3a:9a:86:
75:95:07:e3:59:bf:0f:f0:91:af:b0:de:9d:45:46:
b5:57:b2:2e:62:b9:d5:90:88:bc:20:43:1a:52:89:
76:95:95:8b:73:9b:49:a4:a4:61:c7:9a:5a:3a:7e:
39:8f:7a:26:9d:61:aa:96:3c:e9:18:2f:44:a3:9a:
d8:21:e6:a6:5a:6a:a0:0c:92:0a:78:17:07:a8:2d:
be:e7:d2:d8:04:b1:9c:d5:48:4b:8d:ea:37:9e:12:
10:f3:a7:2f:c7:25:0c:25:2d:b5:c3:58:4a:f5:6f:
67:02:7a:1a:0b:41:fa:db:06:67:55:99:12:d1:ba:
80:67:44:54:95:70:78:49:72:42:cf:9d:0d:84:ce:
73:06:07:8d:ad:82:5f:90:45:be:49:42:7c:55:b0:
3f:87:4c:74:05:45:de:c2:7f:41:aa:d2:a0:8b:e9:
cb:4b:a2:84:77:fa:94:5e:72:bb:d9:fc:c7:c0:80:
5e:12:72:fd:1c:44:c4:1b:72:8f:8b:d1:06:c9:54:
a9:36:97:49:01:f1:f6:c5:5b:a0:d4:b2:66:3f:53:
a4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9A:02:20:9C:D6:33:03:CD:B7:71:1A:C1:68:25:29:A7:49:1B:C0
X509v3 Authority Key Identifier:
keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/UJoCIJzWMwPNt3EawWglKadJG8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.160.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:0d:83:2e:d7:17:ab:ed:85:a8:96:93:f4:c2:65:30:a9:5a:
35:8d:a3:1b:3c:35:7f:20:43:f4:a9:ab:f3:f9:90:46:a1:7b:
ee:ff:7d:80:aa:ae:cd:d7:1f:79:46:f3:47:61:d6:42:01:6d:
bb:ff:c6:96:cd:c7:4c:e1:94:35:50:6e:d8:3e:1b:bc:c5:82:
f1:2b:9b:45:8a:fb:02:c8:90:64:f8:8e:e7:c8:47:7c:81:e9:
7a:f5:d1:5c:85:fe:eb:67:e6:9d:fc:a9:59:29:96:1f:18:4c:
51:77:04:ae:7c:ee:ea:37:ef:05:a1:83:a4:19:7a:89:14:ac:
e2:fd:4a:e2:26:76:85:70:4d:74:aa:46:e4:fb:bd:f7:83:19:
7b:4e:7c:29:63:b4:de:86:c1:44:68:a8:66:1a:85:6f:86:12:
eb:b9:a6:b6:a8:8c:42:ba:02:aa:f7:8a:95:74:d6:ca:26:5c:
9a:fc:bb:99:8b:65:88:cb:94:8e:ba:ff:ef:27:a3:61:9d:6f:
9d:88:e6:01:42:76:17:04:5e:50:33:cd:13:04:a6:79:39:55:
44:b4:b4:60:80:68:ec:eb:b0:46:47:a0:15:d4:c6:9a:38:92:
24:47:42:93:5b:8f:df:92:f4:72:c5:94:5c:2d:00:fe:20:04:
a1:31:e6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org