Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/UoubFdCRPXHWhLPuc84GHzi0DRo.roa
File: UoubFdCRPXHWhLPuc84GHzi0DRo.roa (raw, json)
Hash identifier: W2XXIYUSoxXt/EmSIhFEtQN/H9No6z55inDAQ1QbekQ=
Subject key identifier: 52:8B:9B:15:D0:91:3D:71:D6:84:B3:EE:73:CE:06:1F:38:B4:0D:1A
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01856F5DE078DEA45B8B2C02F319C1C9C28C
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/UoubFdCRPXHWhLPuc84GHzi0DRo.roa
Signing time: Sun 01 Jan 2023 22:05:01 +0000
ROA not before: Sun 01 Jan 2023 22:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50242
IP address blocks: 85.248.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:e0:78:de:a4:5b:8b:2c:02:f3:19:c1:c9:c2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 22:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=528b9b15d0913d71d684b3ee73ce061f38b40d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cf:fe:f8:0d:3b:ba:04:8f:6c:38:7a:03:0f:
da:a5:2a:e2:10:d1:49:16:3a:b9:a5:b5:e0:5d:61:
25:a7:d8:34:4e:20:2a:cd:65:2d:dd:6c:21:b1:4c:
e8:aa:20:c4:63:b4:c0:ab:8d:2a:9c:12:86:f6:8d:
c8:b4:06:15:55:1e:59:26:2c:e2:54:dc:44:31:1b:
fd:96:76:32:50:69:84:64:0a:a6:1c:46:0d:6d:1b:
2b:76:d0:e6:d5:b1:52:80:09:14:d9:1d:23:e4:93:
b9:0e:9f:d1:d5:bd:f0:ac:59:b0:56:4e:df:53:dc:
a7:5b:5f:c1:7c:ca:44:25:8e:0d:70:74:6e:25:9a:
3a:7a:e0:20:0f:88:e7:73:bf:8a:45:4c:02:d4:07:
15:dd:3a:65:93:45:0a:08:c5:a0:1e:86:7b:56:61:
c6:98:39:d9:51:c5:a6:06:db:f7:5f:6a:41:f1:97:
b4:8a:e1:19:bc:93:9d:35:5a:b3:c8:a0:19:b9:e9:
60:53:56:d5:a1:84:81:5d:46:00:96:a7:99:fd:7e:
dc:0f:4a:84:a7:1e:2c:85:b1:5b:70:ec:eb:1f:34:
b5:a4:81:ae:7e:81:51:12:60:71:cd:8c:5c:18:28:
3a:ad:ca:3b:fb:57:4e:41:3d:1f:c9:af:b7:18:42:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8B:9B:15:D0:91:3D:71:D6:84:B3:EE:73:CE:06:1F:38:B4:0D:1A
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/UoubFdCRPXHWhLPuc84GHzi0DRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.248.124.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:3b:2c:cc:b3:17:25:e0:37:e0:3f:dc:3a:7e:77:65:10:9b:
46:3b:37:51:bb:4a:65:a6:a8:f5:e1:04:5c:bd:aa:ac:9b:83:
cb:71:66:e4:17:30:1f:18:3a:ce:49:dd:88:30:b1:56:62:c9:
a0:f0:97:3c:e2:4b:68:ea:85:0e:a1:22:2d:74:23:c1:92:37:
7a:0b:36:86:d1:6d:9d:bb:96:a0:fb:0f:db:d7:2d:16:ae:ac:
73:f0:3e:be:4e:ca:a0:8d:36:ca:47:75:4c:4b:93:32:b7:96:
0f:7a:99:06:8e:62:62:51:fd:54:52:8e:ea:a0:3e:44:cf:24:
e8:b7:a1:62:b8:d2:18:4f:85:ab:1a:eb:c0:6d:fe:ec:4d:2e:
2b:6b:07:05:bb:ce:21:19:47:56:82:26:2c:0e:92:b8:4a:ef:
14:01:68:b0:ce:65:a6:01:49:4f:28:23:bb:db:88:ea:0d:37:
3d:2b:66:63:04:71:5f:13:ea:8d:f5:12:32:ff:e6:f8:f8:ad:
70:00:44:c2:e4:01:8c:e5:50:4d:d2:55:5a:a9:d3:0b:75:d1:
f8:96:51:53:9a:ec:25:bc:52:6d:f0:a5:43:9e:1d:56:d6:c5:
d7:80:f2:a8:5a:ea:41:07:26:f1:59:93:52:59:f8:1e:2b:ac:
7b:cb:37:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:44 2024 by rpki-client on console-fra.rpki-client.org