Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uuBq04xH3FHll41stI20dNlCoa0.roa
File: uuBq04xH3FHll41stI20dNlCoa0.roa (raw, json)
Hash identifier: 0j4nc55UpnP3346kyoYz/CiFxSFdjk8+9pGOYOSjWko=
Subject key identifier: BA:E0:6A:D3:8C:47:DC:51:E5:97:8D:6C:B4:8D:B4:74:D9:42:A1:AD
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D089E2EFC8AE832E4C719D193FD868340
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uuBq04xH3FHll41stI20dNlCoa0.roa
Signing time: Sun 14 Jan 2024 15:36:40 +0000
ROA not before: Sun 14 Jan 2024 15:36:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 86.107.51.0/24 maxlen: 24
2.57.242.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
94.176.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 11:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:08:9e:2e:fc:8a:e8:32:e4:c7:19:d1:93:fd:86:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 14 15:36:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bae06ad38c47dc51e5978d6cb48db474d942a1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:30:1d:42:67:1d:13:0c:76:e9:60:e8:8a:
24:49:19:b1:41:55:b2:df:70:de:35:82:1a:bf:e0:
24:b7:46:b0:a2:e7:44:d3:eb:81:b3:2f:62:f2:bc:
7b:20:e8:d8:4a:26:ff:c8:35:01:7d:54:f4:37:f5:
98:2f:4d:72:a7:d9:a6:59:75:5a:37:b2:0d:83:6b:
0c:07:23:ec:5e:f7:87:20:a0:ef:e9:f0:ac:82:ac:
ea:f5:a9:c0:c6:64:6f:75:98:4b:00:84:bf:d2:8f:
a1:50:03:6f:f7:6e:f7:d6:21:10:4d:a5:0e:d2:f9:
a1:8d:e9:65:97:3d:d4:ce:7d:25:fe:9a:03:8c:d1:
98:ca:7a:3e:0c:39:90:53:3f:3f:fe:3e:1d:6c:d2:
79:93:cd:a7:e1:18:3e:7a:4d:a9:5c:a0:f2:cd:d7:
bb:fe:8c:01:0d:b3:21:4b:41:ca:db:11:ce:7f:c4:
65:16:eb:93:50:9f:85:6c:8a:12:12:39:64:fe:32:
d5:9d:b4:bd:cc:5d:47:c3:bd:1f:06:aa:dc:39:d5:
53:24:7e:7e:4d:d9:63:06:6b:f9:6e:c3:5b:4c:e3:
de:3a:3c:80:6a:45:77:73:65:e0:23:66:c4:ba:db:
90:55:e1:6a:db:90:42:a8:a0:d0:e8:e2:17:c7:40:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E0:6A:D3:8C:47:DC:51:E5:97:8D:6C:B4:8D:B4:74:D9:42:A1:AD
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uuBq04xH3FHll41stI20dNlCoa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/24
86.107.51.0/24
94.176.215.0/24
188.241.137.0/24
Signature Algorithm: sha256WithRSAEncryption
50:07:e3:ca:26:65:87:e8:a3:5a:df:43:9c:26:60:32:cc:68:
f2:a9:a9:82:65:83:f8:82:db:55:8a:35:8c:30:cc:ba:72:2b:
6b:4b:e5:3b:fa:3b:a5:84:7b:46:53:54:85:f3:a4:f3:33:ae:
c8:f0:b2:89:32:89:0d:95:68:37:51:c6:52:fb:ac:36:32:54:
94:26:7d:72:09:e8:1b:6a:43:75:c1:60:88:42:e6:b0:5c:ec:
79:bc:31:78:54:ae:49:c3:f9:1b:b9:79:f3:64:e6:67:85:b1:
24:ac:6b:b6:97:e5:c7:7c:99:ec:a3:90:b6:ac:4f:35:59:e2:
6a:4b:61:ed:5f:27:e1:ec:b9:12:d4:a4:17:7f:36:ea:02:1b:
3a:e6:cb:7e:dd:d3:b3:a5:a8:ac:75:d8:2b:5c:65:74:41:fc:
8e:3c:45:59:a2:19:3b:7e:91:9a:eb:2f:28:33:1c:2c:89:b0:
aa:ad:2c:fa:18:61:9b:04:fc:c3:17:89:37:4d:4b:5c:50:49:
87:91:1e:0d:ad:41:8b:96:5e:f4:19:1b:33:f0:d7:b2:90:f4:
a0:cb:47:5c:9d:f5:53:c9:24:58:62:3c:2b:e4:3b:7f:ef:6d:
5e:33:27:d7:6a:23:d1:e8:fb:5f:83:97:ec:27:be:bb:1e:7b:
5f:a5:be:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:11 2024 by rpki-client on console-fra.rpki-client.org