Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/UgkBC2xkedfD2n3x1LdaOWPbIwY.roa
File: UgkBC2xkedfD2n3x1LdaOWPbIwY.roa (raw, json)
Hash identifier: eCiQMaJVdidtOdcIgywUyvUUELyo9yzyMbjMMlLS1Sk=
Subject key identifier: 52:09:01:0B:6C:64:79:D7:C3:DA:7D:F1:D4:B7:5A:39:63:DB:23:06
Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial: 0185723128B9BCED435B0FE982DC352066DE
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/UgkBC2xkedfD2n3x1LdaOWPbIwY.roa
Signing time: Mon 02 Jan 2023 11:15:02 +0000
ROA not before: Mon 02 Jan 2023 11:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202574
IP address blocks: 193.57.17.0/24 maxlen: 24
193.57.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:28:b9:bc:ed:43:5b:0f:e9:82:dc:35:20:66:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b613794927050b22525ab70091835408eee4c79
Validity
Not Before: Jan 2 11:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5209010b6c6479d7c3da7df1d4b75a3963db2306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:c6:d9:7e:02:60:bc:9f:37:3a:05:a7:b3:
28:85:f7:a5:0b:bd:53:3f:dd:f6:61:9b:84:80:37:
13:62:c2:55:ac:9a:b4:02:c7:ec:12:fa:a7:82:73:
97:9c:5c:c5:cd:4c:23:79:e3:37:db:8e:04:eb:1b:
68:4d:32:d7:99:d9:88:94:ad:f3:86:77:92:51:0c:
f7:73:c6:c4:19:2f:0f:d3:08:66:22:68:2f:be:71:
69:bc:38:ad:3f:c2:d3:1b:b0:62:6d:78:44:47:52:
ff:67:7b:49:da:a0:37:4a:3e:8c:c3:54:3a:2b:d4:
10:56:a5:c9:8d:11:c4:19:d7:3e:e7:48:d4:7a:be:
82:cf:a8:89:dd:5c:bc:1c:68:df:84:07:3b:d4:82:
95:fd:2b:a8:1a:e1:ee:1f:db:68:eb:ec:40:55:38:
64:dc:9a:be:35:cf:59:f6:91:3e:56:ba:31:f9:76:
1a:9d:4b:70:91:c7:c0:63:29:68:1c:14:4c:3f:b8:
5c:ba:d5:e6:bf:6e:8e:c7:f5:3a:b3:ec:e8:a7:52:
12:a5:dc:db:54:b1:09:4d:7d:94:f0:44:06:56:b9:
99:fc:df:68:a2:5a:a0:eb:1e:0f:0b:b5:82:be:ed:
13:34:ca:03:ac:98:c9:05:cd:d5:cd:c5:15:05:6c:
a7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:09:01:0B:6C:64:79:D7:C3:DA:7D:F1:D4:B7:5A:39:63:DB:23:06
X509v3 Authority Key Identifier:
keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/UgkBC2xkedfD2n3x1LdaOWPbIwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.17.0-193.57.18.255
Signature Algorithm: sha256WithRSAEncryption
41:45:34:b1:8a:5e:eb:19:56:17:26:42:df:b6:19:7f:18:2b:
9d:f9:9f:f2:e7:e0:67:c2:6b:d0:9a:94:d7:8f:b5:7c:eb:b8:
1e:05:27:72:d9:00:38:e9:d6:5d:d8:19:5d:e5:10:6f:0b:e7:
b6:a0:96:dd:7b:26:c9:a4:61:fc:f8:64:71:89:9b:3e:b3:4a:
46:fc:ad:6f:ef:2c:90:ac:cb:e4:d5:99:dc:0d:35:b5:d1:24:
e7:7f:f2:28:4c:a5:b5:c2:2f:14:fc:42:8a:c6:c1:6b:62:98:
c5:8f:41:57:3b:b6:b5:2a:60:3f:b4:0f:62:56:9f:32:4e:52:
9a:41:9f:ba:cd:c5:bb:70:0d:4b:6e:81:e7:7c:fe:0f:cb:97:
8f:6d:3c:f2:5e:66:92:b9:ad:16:5b:10:24:a2:dd:4d:9e:29:
71:74:40:d7:f3:0d:7a:ab:85:d1:a0:ce:fd:d0:33:7e:8c:4a:
be:c1:b1:c2:6a:3f:d8:59:1c:5f:d5:ed:07:1f:25:22:ec:07:
60:60:59:21:ac:57:34:6f:bb:5a:23:4d:73:bd:33:ef:c4:f2:
a4:2c:71:d0:ea:a2:7c:f8:89:88:b1:1b:08:10:43:9e:a6:bb:
f2:a5:68:16:1e:6d:6f:ea:f2:15:2d:4c:1a:b7:c1:2e:69:ae:
61:d2:a5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:18 2024 by rpki-client on console-fra.rpki-client.org