Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/UVF9YT2U7vMNaW-kk9uW16gh6so.roa
File: UVF9YT2U7vMNaW-kk9uW16gh6so.roa (raw, json)
Hash identifier: BOJI6VaC/8XM35x9zE+ScAuAjqxtbeXLj2xvjyNyn9Q=
Subject key identifier: 51:51:7D:61:3D:94:EE:F3:0D:69:6F:A4:93:DB:96:D7:A8:21:EA:CA
Certificate issuer: /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial: 01881F3D66E734F0A302D90C0F5A3958562F
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/UVF9YT2U7vMNaW-kk9uW16gh6so.roa
Signing time: Mon 15 May 2023 11:48:17 +0000
ROA not before: Mon 15 May 2023 11:48:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 185.81.121.0/24 maxlen: 24
185.81.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:3d:66:e7:34:f0:a3:02:d9:0c:0f:5a:39:58:56:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Validity
Not Before: May 15 11:48:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51517d613d94eef30d696fa493db96d7a821eaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bf:40:78:c9:44:ac:33:2e:a7:b6:06:ed:e9:
4c:86:f3:2f:56:8c:eb:8d:e5:05:b4:81:14:35:47:
f1:34:a5:49:27:77:bf:f5:21:77:0c:84:07:68:49:
4d:ed:19:05:12:48:50:8e:af:d0:b7:27:dc:7b:bc:
59:81:39:93:bc:c9:97:9e:47:2d:4c:34:d4:c9:a9:
d6:99:c1:87:07:dc:bc:81:23:4e:21:d1:92:2a:18:
e4:90:44:9b:39:9d:01:ca:ba:ac:fe:49:5e:09:26:
4c:df:a8:a3:61:e2:b2:26:8b:df:4f:f1:6d:14:a1:
5f:97:06:c3:18:bd:71:0c:17:a4:44:41:62:b9:8e:
1b:4a:53:74:94:1b:cf:18:ed:90:40:68:86:a6:c0:
c0:f9:29:f3:e7:f4:ff:f0:c0:8e:33:55:44:b1:23:
78:f1:01:a8:40:b9:33:e7:c6:be:a9:ee:fb:ac:05:
51:e8:c2:7a:28:f7:4d:a2:6f:f5:c6:3f:0c:d1:44:
3e:fb:b4:0a:3c:6f:db:6d:f5:68:ed:a2:c0:15:30:
63:a8:65:52:e4:b5:d7:1a:e5:a8:e3:7b:6c:a4:2c:
24:0d:f6:c9:a2:81:64:89:ea:43:b0:bc:80:de:3f:
42:7e:fd:f9:f4:17:a4:7d:25:23:39:42:6c:4f:34:
9f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:51:7D:61:3D:94:EE:F3:0D:69:6F:A4:93:DB:96:D7:A8:21:EA:CA
X509v3 Authority Key Identifier:
keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/UVF9YT2U7vMNaW-kk9uW16gh6so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.120.0/23
Signature Algorithm: sha256WithRSAEncryption
29:0e:e1:17:b4:87:e8:b0:c5:a4:b9:9b:54:1b:b2:12:eb:c7:
a8:3c:b6:a8:0f:5f:09:66:9f:ce:a6:f2:61:34:55:aa:63:09:
aa:b8:b2:61:09:2a:55:42:b0:23:12:a1:a7:7c:21:42:ba:a0:
98:06:84:0e:04:a1:49:44:f9:22:d8:f2:20:fd:51:68:67:6e:
38:f7:b6:35:ed:88:83:fe:8f:b7:11:e6:45:ce:1c:bc:19:1c:
66:38:7f:e0:2e:06:a0:3f:16:3c:1d:61:1f:bd:c4:9d:c0:c7:
27:bf:95:07:cb:b1:d1:a5:bc:9a:ae:7e:3c:90:0a:ed:f2:05:
e2:8c:e9:76:ae:d7:38:57:30:15:e8:3f:b7:77:fe:8d:64:fa:
77:0e:fb:b0:2b:d4:15:1a:e4:b2:9b:b7:6c:3a:1a:d1:f0:76:
44:54:8a:53:d3:ee:10:bc:d2:a2:da:b8:09:42:ee:5f:e0:2f:
f2:28:a7:9d:0b:6a:ab:29:38:58:e3:05:0e:df:17:77:fc:15:
5a:5f:ab:60:88:16:c2:27:e5:5e:90:fb:ad:ba:9b:b0:90:d2:
78:9f:9f:70:dd:e9:f6:14:9f:7d:d7:66:4d:eb:f1:db:2f:a4:
96:e0:ab:e7:ee:60:f7:47:5a:77:16:cc:44:1a:f5:ea:32:62:
71:2a:b7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:14 2024 by rpki-client on console-fra.rpki-client.org