Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/UBufUE-juvDdmwyIzZsDSBKQlQQ.roa
File: UBufUE-juvDdmwyIzZsDSBKQlQQ.roa (raw, json)
Hash identifier: 4wzxgqj6qDLCYalmFjntWIodiZ5/Ofasti1BrBRXg0k=
Subject key identifier: 50:1B:9F:50:4F:A3:BA:F0:DD:9B:0C:88:CD:9B:03:48:12:90:95:04
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01856CC179A8F675B6101362C6265058E60D
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/UBufUE-juvDdmwyIzZsDSBKQlQQ.roa
Signing time: Sun 01 Jan 2023 09:54:56 +0000
ROA not before: Sun 01 Jan 2023 09:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23454
IP address blocks: 193.108.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:79:a8:f6:75:b6:10:13:62:c6:26:50:58:e6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 09:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=501b9f504fa3baf0dd9b0c88cd9b034812909504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:80:21:e0:69:6c:47:86:f7:5d:59:4e:45:
b2:2f:86:0e:03:5e:85:1e:c2:86:7f:c7:98:38:b6:
54:53:5f:9c:d7:e8:7d:d8:79:12:82:42:54:70:79:
e5:ab:f5:58:f4:53:e3:a4:28:93:f8:1e:5d:40:81:
04:91:6d:f3:4a:33:16:6b:3a:5d:65:7f:cc:45:71:
90:85:c0:19:d8:6d:67:d6:4b:ba:18:76:70:a3:95:
4c:25:07:d1:f4:39:38:f2:a5:38:cf:c0:42:30:02:
f1:d8:8d:c3:16:66:4c:55:3d:f4:df:23:b1:b7:d2:
eb:ac:0c:39:05:d6:12:34:ca:d6:0e:c2:a4:cb:77:
4b:98:27:d9:c9:e1:e8:4a:b7:3e:e1:91:a1:7b:25:
f3:aa:0b:72:2d:40:28:e7:65:83:f3:3b:0b:6f:e3:
d7:c3:e4:ee:16:4c:8c:cd:f2:d9:fe:c3:4a:63:4d:
c7:bb:0d:e1:18:83:77:bb:96:bb:98:bc:e3:58:53:
81:f3:1d:90:c5:90:6a:d5:6e:cd:dc:30:eb:c9:00:
72:6d:0e:2c:99:77:35:18:a1:5e:75:e2:cc:a9:f2:
e6:05:5f:c9:1f:fd:ca:e9:d8:16:d4:1e:98:7a:33:
71:35:12:58:6b:7c:e6:a8:15:76:b7:7c:3d:2d:95:
5e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1B:9F:50:4F:A3:BA:F0:DD:9B:0C:88:CD:9B:03:48:12:90:95:04
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/UBufUE-juvDdmwyIzZsDSBKQlQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.92.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a7:5d:bb:e4:71:d1:50:5a:80:54:69:35:d4:18:7c:b8:ac:
7d:f2:22:4b:88:4a:8b:a8:dc:cf:c9:45:2a:a7:fe:6d:f4:97:
19:94:ee:91:8e:ce:29:29:74:53:76:e6:35:b5:bc:a5:a9:05:
e3:03:fb:7e:2f:94:5f:bf:1c:29:3e:dd:31:3c:8d:10:57:7c:
ec:6f:54:bb:3e:6f:01:a2:87:c9:15:05:b1:5c:1d:6c:0e:d3:
c6:fe:21:18:60:2f:f7:18:f3:20:69:9b:1e:83:9f:7b:fb:d5:
b9:08:41:68:97:28:d7:37:4e:03:c8:d9:5c:c0:c7:5e:8a:d4:
a6:9c:ea:ef:49:53:22:80:18:5a:c7:e2:af:0d:db:75:bd:69:
9b:bc:94:27:24:e1:c5:e8:2d:67:9c:57:72:65:7c:25:09:ff:
08:24:13:26:88:5d:67:d1:d3:d7:34:f4:2c:e1:c1:2b:77:ff:
3f:6e:97:85:0c:fc:ad:bf:1c:a0:5c:ef:96:d1:97:bf:83:91:
86:4c:1a:1a:83:07:4f:36:69:af:71:53:58:6f:4d:67:0e:a6:
ab:8e:3b:84:78:99:b6:04:9c:10:2d:7e:9d:b7:2b:e0:5d:81:
8f:9f:43:34:42:79:4b:1c:4b:39:02:3c:b7:28:d5:8d:8f:a4:
3c:ff:18:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:39 2024 by rpki-client on console-fra.rpki-client.org