Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UXJavA3T6N7hzGOsu1AaqEg5qQw.roa
File: UXJavA3T6N7hzGOsu1AaqEg5qQw.roa (raw, json)
Hash identifier: IhtF2zHCFy3onR+QRHTvBWuLnqK3IoDhY0i1NogOCIA=
Subject key identifier: 51:72:5A:BC:0D:D3:E8:DE:E1:CC:63:AC:BB:50:1A:A8:48:39:A9:0C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0185958E7D270535CBD84D07D10B6028F6B9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UXJavA3T6N7hzGOsu1AaqEg5qQw.roa
Signing time: Mon 09 Jan 2023 08:03:41 +0000
ROA not before: Mon 09 Jan 2023 08:03:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 86.107.168.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jan 2023 12:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:8e:7d:27:05:35:cb:d8:4d:07:d1:0b:60:28:f6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 9 08:03:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51725abc0dd3e8dee1cc63acbb501aa84839a90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1e:9b:fa:b8:4a:f0:93:28:02:d7:12:08:e0:
80:1e:f1:47:2d:6f:e6:fe:68:5d:88:da:1a:45:fb:
38:00:8e:32:b7:a0:f0:a2:65:90:44:f8:4e:c2:cc:
ca:5e:a1:6f:18:69:b0:ce:9d:bc:67:c1:41:c9:ec:
9d:b5:db:7f:17:d1:5a:63:6d:f5:59:38:32:96:f9:
f5:31:1c:ab:f5:f2:07:c4:bb:de:eb:bf:1c:e3:2b:
fc:d9:b9:b4:2b:4c:b0:95:9c:a0:91:fe:86:c3:2f:
2b:86:30:a8:8b:ec:fd:d3:11:c9:b7:59:a7:ad:c1:
35:58:08:a3:77:d7:e2:08:92:c6:33:76:cb:e3:83:
64:2b:02:0d:1a:a6:e3:c5:c8:cb:17:b9:d3:d3:da:
e9:bb:4d:38:28:3f:5e:b6:61:57:6c:f9:dc:98:c4:
6b:0f:5f:6f:ff:26:af:ce:e2:8f:e5:d3:82:98:f1:
f7:9e:7a:f8:a5:14:1b:b6:8f:53:56:c2:d8:07:e9:
72:aa:75:ef:63:e6:43:1c:8f:88:5e:59:64:7c:80:
05:20:c6:1b:64:22:47:36:1b:27:76:df:5d:07:5f:
73:a5:7e:cb:38:0e:0f:c7:e2:d4:ad:00:9a:60:7a:
55:21:22:8f:51:75:7a:6e:56:3f:18:1f:33:15:71:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:72:5A:BC:0D:D3:E8:DE:E1:CC:63:AC:BB:50:1A:A8:48:39:A9:0C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UXJavA3T6N7hzGOsu1AaqEg5qQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
86.107.168.0/24
Signature Algorithm: sha256WithRSAEncryption
13:d2:39:5e:48:0c:f5:cf:88:e0:91:3c:f0:2c:ab:0b:2b:0b:
d1:67:02:bb:5e:de:56:88:5f:d7:1c:a4:8a:be:da:08:4b:5b:
07:66:c0:30:50:42:d5:bf:ff:14:9b:3f:cb:0e:c7:33:ed:20:
f5:bf:0e:96:bd:e3:19:3c:47:ba:ea:e9:5c:7a:2c:a2:10:c7:
02:49:56:c6:68:dc:5e:58:cb:7a:61:d0:5f:15:2b:0f:22:6d:
59:0e:43:22:65:c3:77:0d:6a:9a:cb:e4:b6:cc:89:a4:4d:dc:
30:42:05:58:95:77:2f:5e:6d:89:a9:d5:b6:33:2a:37:53:42:
52:e2:4c:f5:29:e7:35:6d:7b:4e:f5:23:45:ef:cc:e1:35:f3:
bd:d8:77:dc:1b:9a:eb:3f:f1:b5:dd:3c:bc:db:cc:3b:6b:e8:
b4:d0:f3:13:9a:42:c5:cf:15:a9:40:7a:23:ee:be:ca:e0:52:
9d:37:d6:58:24:d1:93:a6:20:25:05:4b:83:54:b7:3c:8d:6c:
cc:f3:7a:e3:f9:0c:fe:df:ac:d5:4a:c2:65:16:5a:cf:da:73:
42:54:1c:f6:6f:55:3a:9c:54:eb:56:5e:49:34:9a:6f:14:e9:
e6:9e:50:64:9a:77:bb:e5:1b:31:e4:bc:35:73:b9:b4:51:74:
82:df:7e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org