Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Uzg-pkpMnahp1IuMc0Vhmy7L74Y.roa
File: Uzg-pkpMnahp1IuMc0Vhmy7L74Y.roa (raw, json)
Hash identifier: ES6ZQBeSrpUIGmaN+7UlYmTHaiTzZFbRqzpNEQcIy/I=
Subject key identifier: 53:38:3E:A6:4A:4C:9D:A8:69:D4:8B:8C:73:45:61:9B:2E:CB:EF:86
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01856F94C3ACD0A8152D63955AD94F0FCE95
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Uzg-pkpMnahp1IuMc0Vhmy7L74Y.roa
Signing time: Sun 01 Jan 2023 23:04:58 +0000
ROA not before: Sun 01 Jan 2023 23:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47817
IP address blocks: 213.195.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:c3:ac:d0:a8:15:2d:63:95:5a:d9:4f:0f:ce:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 1 23:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53383ea64a4c9da869d48b8c7345619b2ecbef86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:28:ec:a0:8e:f4:7d:6c:0d:79:af:23:a5:d3:
d3:04:5e:c4:05:2a:0b:74:d0:98:82:c3:68:23:c6:
f4:76:9d:6c:1c:33:21:c4:16:18:86:12:ec:ef:81:
a1:aa:d9:1e:f0:95:da:7a:09:91:57:f2:a9:d1:00:
aa:61:7c:b6:31:89:ed:1e:e7:e2:f1:9d:95:93:53:
49:17:a9:63:64:63:dd:80:30:ad:7f:f9:cf:7b:88:
a1:a8:a8:04:fc:e9:a9:18:cd:e6:bb:5a:b2:1e:73:
69:52:75:52:9e:44:09:c9:37:8b:dd:67:b3:9e:64:
b9:46:51:f3:5a:cb:5f:8f:9d:58:36:9d:de:65:55:
6e:b8:ac:db:0e:62:cd:4c:02:fa:46:21:3f:aa:ec:
17:ee:43:ef:a8:22:48:a9:e5:58:33:46:b6:90:01:
ee:05:49:9d:bf:e5:fa:da:17:e6:81:6c:ba:19:f8:
27:67:71:38:f7:7f:a6:60:64:fb:ca:23:e3:3b:8b:
b6:6c:4b:6b:27:f0:fd:ec:5d:0f:39:cb:35:8c:5b:
1e:9d:1f:da:71:d5:86:89:81:ee:a5:8b:bc:3e:b5:
71:63:be:c9:ae:c1:8e:12:16:44:f9:13:68:3c:50:
18:24:ac:aa:ad:c8:0d:c4:ab:17:f1:7b:a6:0d:01:
6d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:38:3E:A6:4A:4C:9D:A8:69:D4:8B:8C:73:45:61:9B:2E:CB:EF:86
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Uzg-pkpMnahp1IuMc0Vhmy7L74Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.195.21.0/24
Signature Algorithm: sha256WithRSAEncryption
32:62:52:e2:7d:a1:19:27:3e:cb:30:1c:cc:2f:bc:a1:69:56:
cb:4c:f6:51:fa:a6:b1:a0:f2:29:fe:34:d9:4f:f3:bc:45:7a:
64:4d:11:8a:3c:8a:d6:47:77:88:3d:71:ef:f4:c5:4f:36:7b:
e0:a1:23:ca:c8:1d:e6:0a:c8:4f:76:47:b5:e3:ac:1f:6d:1e:
8d:80:58:9f:cf:e9:e4:10:23:01:f3:cf:c1:9e:b1:2a:15:db:
15:98:aa:64:7e:dd:d4:b2:3d:26:ec:a7:da:b2:5b:86:c7:14:
17:99:fb:03:d2:71:17:ad:6c:18:cb:bd:1e:9e:6e:be:45:e5:
6b:2b:10:38:d3:6e:08:66:77:2e:ad:81:47:62:c8:d2:23:05:
eb:44:f3:cb:9f:95:d4:68:1d:c5:66:4b:c5:8a:57:5c:02:1f:
96:bc:f4:c7:b6:93:3c:ba:c0:5f:44:9a:8a:7e:a0:d0:f6:e1:
e6:64:d8:50:c7:65:6a:a1:a2:3c:71:f5:e7:56:ea:08:71:2b:
44:42:dd:df:ae:6f:cb:46:2f:c3:67:5e:46:25:74:66:bb:36:
64:0d:f9:f9:63:11:4a:cd:a8:2d:a4:78:35:69:7a:90:93:d8:
cc:3f:a0:f3:a4:f7:fa:8e:7c:61:5e:17:cc:97:f9:d9:14:d7:
93:9b:74:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org