Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/UQRNWDVso9zm9_ZzSF7N2XStbY4.roa
File: UQRNWDVso9zm9_ZzSF7N2XStbY4.roa (raw, json)
Hash identifier: qzM/6kmevw9vzJB6UKr6vxewAP3WSgg7GJPs9ViPXOw=
Subject key identifier: 51:04:4D:58:35:6C:A3:DC:E6:F7:F6:73:48:5E:CD:D9:74:AD:6D:8E
Certificate issuer: /CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Certificate serial: 01856D4AB314E0769A305634EB3E74C627B9
Authority key identifier: 84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/UQRNWDVso9zm9_ZzSF7N2XStbY4.roa
Signing time: Sun 01 Jan 2023 12:24:50 +0000
ROA not before: Sun 01 Jan 2023 12:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 559
IP address blocks: 193.247.248.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:b3:14:e0:76:9a:30:56:34:eb:3e:74:c6:27:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Validity
Not Before: Jan 1 12:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51044d58356ca3dce6f7f673485ecdd974ad6d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:06:1d:82:30:7f:11:ef:fc:d5:2d:29:a9:
6f:62:7a:c2:26:aa:2d:ea:5a:ab:f8:6a:01:ce:9e:
97:45:00:7a:7e:f1:f8:cc:9e:e3:90:4e:89:62:94:
09:05:08:1c:9c:fd:09:64:34:c7:76:29:46:a5:c7:
ea:7c:a9:64:29:53:0d:37:b5:d9:ea:92:55:ef:bf:
69:b5:c3:a5:21:98:7c:ad:90:e1:46:1a:02:fa:70:
24:77:4f:1e:74:91:fb:b2:25:99:03:27:34:ae:8f:
51:c3:1f:db:e6:de:ec:59:40:1e:9f:76:de:96:42:
52:1f:5e:3d:e8:f4:15:a2:c5:e1:3b:00:4a:63:38:
30:4f:cb:c3:24:49:bc:c9:b2:18:8d:8c:a9:a4:b1:
62:9c:49:54:cd:c1:6b:a9:81:99:7c:01:d6:6f:94:
e0:77:75:59:db:9c:18:84:5b:ab:9c:ec:87:de:72:
b4:07:8e:ef:eb:b9:66:8e:46:db:60:ca:f7:d7:fa:
61:21:1c:53:91:1e:b0:55:5c:f4:bc:9f:65:c4:3d:
02:d7:36:70:6d:82:00:39:8b:c1:d7:e4:2a:02:39:
7e:f7:32:2d:40:54:b9:e5:04:05:95:bf:cb:1d:4c:
7d:8c:bb:76:85:54:60:8d:bd:84:33:cd:76:56:46:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:04:4D:58:35:6C:A3:DC:E6:F7:F6:73:48:5E:CD:D9:74:AD:6D:8E
X509v3 Authority Key Identifier:
keyid:84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/UQRNWDVso9zm9_ZzSF7N2XStbY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.248.0/23
Signature Algorithm: sha256WithRSAEncryption
43:10:75:5a:b3:78:d8:c8:0c:e9:9c:ac:3b:f2:38:d8:66:65:
05:bb:b4:f2:33:65:b7:4a:8d:e1:a1:c1:6e:fd:a4:df:6f:fd:
08:52:0a:93:d7:93:3b:11:ca:0a:20:21:a7:dd:ff:88:28:9b:
0e:fd:55:1f:59:99:4c:f0:b6:a3:d2:e0:46:7f:09:bf:ff:dd:
3f:65:5d:95:72:22:c0:aa:95:82:c0:b0:46:74:bb:6d:1b:9e:
66:13:6a:3e:13:0b:76:6a:5d:1e:6e:05:34:4f:fc:04:da:cf:
09:aa:b1:f6:26:7f:b0:95:c8:78:50:f0:c1:d1:5c:f0:84:9f:
21:1d:84:a7:d4:aa:29:94:4c:3c:ea:18:d0:69:47:09:e4:0e:
2f:1a:79:ca:dd:98:11:87:da:49:78:a1:a2:82:ff:f9:94:9f:
2a:16:7d:33:d1:74:b4:d6:01:94:01:58:cc:0f:de:4a:73:bd:
fd:9d:7d:32:a2:f0:ac:aa:b5:84:39:27:85:26:3c:b5:fb:63:
d9:5e:2c:4e:ed:57:c7:45:a1:90:78:46:5b:57:c6:e2:92:cd:
78:7e:58:d9:0a:61:84:1f:02:b3:7a:07:09:ba:dc:18:81:54:
a0:80:31:c4:fe:c5:c2:aa:77:fb:67:05:23:ce:af:33:5c:39:
97:dc:2c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:59 2024 by rpki-client on console-fra.rpki-client.org