Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uNT5tMo1gqXq4SKueJPqZQuZRyo.roa
File: uNT5tMo1gqXq4SKueJPqZQuZRyo.roa (raw, json)
Hash identifier: z/DxHt7gVPgWsuUaDvpci7TL6KhAc55ZxFEeyOgZcYY=
Subject key identifier: B8:D4:F9:B4:CA:35:82:A5:EA:E1:22:AE:78:93:EA:65:0B:99:47:2A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C8551E8555ED6BE5703783223FCA3064A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uNT5tMo1gqXq4SKueJPqZQuZRyo.roa
Signing time: Wed 20 Dec 2023 03:43:06 +0000
ROA not before: Wed 20 Dec 2023 03:43:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 89.34.219.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:85:51:e8:55:5e:d6:be:57:03:78:32:23:fc:a3:06:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 20 03:43:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8d4f9b4ca3582a5eae122ae7893ea650b99472a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:42:c2:e3:c7:9f:66:a8:30:69:73:34:c4:
85:fd:c7:93:9e:6e:c9:b2:76:77:a6:23:5b:44:2c:
20:c9:f9:04:b4:75:57:cd:48:4a:f5:82:72:e1:a3:
0e:23:80:ff:16:69:04:45:67:04:59:a5:46:20:bd:
42:51:c3:0f:31:54:23:e3:c1:03:9a:54:72:b3:6c:
9a:f4:f2:57:aa:cf:09:4b:7e:8c:8f:26:68:04:13:
aa:45:41:a8:5d:4f:ac:1e:1f:38:43:8a:58:81:ba:
d3:91:0d:cc:22:97:6a:f7:18:1c:e0:c1:f5:44:f8:
a3:28:dd:d7:45:18:44:f4:c6:c0:24:87:ba:4b:f4:
5b:0d:8c:65:02:c1:00:ad:86:7c:ea:b5:53:83:a5:
f9:2c:d6:e0:26:26:a5:e2:13:9e:be:d6:12:7c:f1:
20:45:0a:f1:85:be:c4:09:37:3c:b5:08:5e:c0:e8:
82:58:58:ab:fe:99:1b:fa:8d:e6:0e:fc:ad:59:58:
44:7d:68:69:dc:5f:11:82:ed:e4:5f:2f:70:79:e5:
45:e7:eb:43:27:47:4e:a8:86:d8:f1:ec:94:da:bf:
51:cd:4d:91:97:58:a3:72:87:06:89:d4:6e:e4:44:
44:52:32:20:50:0b:fd:44:a6:54:54:d5:ea:1f:c2:
b3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D4:F9:B4:CA:35:82:A5:EA:E1:22:AE:78:93:EA:65:0B:99:47:2A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uNT5tMo1gqXq4SKueJPqZQuZRyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.219.0/24
128.0.41.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:13:7c:f8:c7:ae:59:93:f8:34:ad:3a:9c:9f:9f:db:f2:c0:
81:ef:e5:48:39:ff:d8:4f:23:38:97:b5:a7:d0:83:e4:5d:aa:
96:14:67:c7:b3:34:71:a3:a5:b5:b7:fb:8d:71:b1:40:f8:1b:
0b:5e:ca:35:1c:5c:d2:9a:bf:9a:51:bf:57:75:61:ab:5f:26:
8e:25:b2:fa:b9:eb:5a:60:3b:9f:82:f0:81:2d:11:c3:56:15:
fe:63:eb:bd:82:ba:11:05:5e:51:55:c1:c8:fb:e1:be:38:f2:
0c:f4:a4:75:75:60:5c:3f:6b:92:23:d7:e1:f6:62:7c:84:2b:
d0:11:be:eb:1b:4c:59:9a:37:d5:a6:31:31:eb:50:81:85:77:
42:42:eb:5a:50:1b:12:d9:5b:22:fc:ed:58:4d:9b:3e:76:06:
63:a3:26:a8:d6:74:6e:e2:4e:12:e5:ce:0f:3c:87:84:bf:03:
98:6f:ae:69:f7:76:03:e2:4e:09:da:97:b6:1a:96:68:7b:a3:
b9:24:e8:8e:f0:e9:cf:13:be:e9:66:fa:c5:5b:f8:98:89:1e:
d8:fe:06:f0:e1:50:ac:f5:c9:53:e8:ac:07:37:ba:76:0d:ba:
6d:1d:ad:08:f5:c2:a1:e4:f4:6a:95:43:15:6d:fd:7d:e4:e0:
13:83:e4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org