Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/UHWvZH_5rbcnOoRpY1xP06inWc4.roa
File: UHWvZH_5rbcnOoRpY1xP06inWc4.roa (raw, json)
Hash identifier: EeqtBMYbE9rnDwyl3C/3B4C9YCe/2epbcEAObkXropc=
Subject key identifier: 50:75:AF:64:7F:F9:AD:B7:27:3A:84:69:63:5C:4F:D3:A8:A7:59:CE
Certificate issuer: /CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Certificate serial: 018900F0EDC0D98C2E5D4FB36F104E0F94E2
Authority key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/UHWvZH_5rbcnOoRpY1xP06inWc4.roa
Signing time: Wed 28 Jun 2023 07:38:56 +0000
ROA not before: Wed 28 Jun 2023 07:38:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210625
IP address blocks: 141.226.55.0/24 maxlen: 24
141.226.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:00:f0:ed:c0:d9:8c:2e:5d:4f:b3:6f:10:4e:0f:94:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Validity
Not Before: Jun 28 07:38:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5075af647ff9adb7273a8469635c4fd3a8a759ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:03:53:46:df:fd:36:99:93:e8:ed:3b:ca:
79:f7:c1:75:68:3f:7b:1b:8c:fe:23:29:4b:7f:e9:
dc:65:70:6a:63:cd:18:60:ce:73:d4:df:de:84:1b:
1e:a3:dd:d4:c6:71:0d:10:ae:5d:a7:3c:0c:8a:50:
5c:c7:55:82:84:19:5e:2f:b7:63:26:2b:bc:51:f0:
42:29:25:f9:e3:d6:50:ab:57:9c:9f:b6:40:7c:2d:
77:ab:b4:8b:be:f9:c7:9b:d6:97:eb:49:a7:ad:90:
63:71:9c:f9:e5:62:f2:8b:56:5b:94:bf:46:c9:6f:
81:e3:f9:ab:9c:9a:8a:f6:04:e9:13:d0:02:53:15:
57:b3:9d:b0:00:d0:99:de:82:a1:97:33:d4:1b:d1:
a7:62:02:0b:3e:e6:e3:ca:63:1b:02:c9:22:e1:24:
c3:f9:15:88:f5:c6:fb:4d:49:a0:57:8b:38:fc:41:
62:4b:16:00:e7:25:32:ae:ed:13:24:10:41:af:a3:
b2:f2:8c:6a:c4:40:ac:84:d7:a8:2b:70:84:09:10:
fb:c8:f3:16:8a:c3:8d:f3:91:40:5f:c3:8e:75:3f:
5f:cc:01:1f:37:f1:df:1e:fc:65:c9:78:9f:43:36:
73:94:bd:72:2c:26:07:76:93:2a:df:04:8b:92:57:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:75:AF:64:7F:F9:AD:B7:27:3A:84:69:63:5C:4F:D3:A8:A7:59:CE
X509v3 Authority Key Identifier:
keyid:F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/UHWvZH_5rbcnOoRpY1xP06inWc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.55.0/24
141.226.71.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a8:c6:c2:a7:52:31:74:fc:25:0d:dd:e5:3d:14:bc:90:c1:
b3:26:60:84:95:44:5c:d6:fa:76:ba:d5:63:e9:83:3c:2f:bd:
81:d7:ba:52:21:a8:0c:a5:52:dd:61:1f:fa:3b:c0:de:fb:06:
2a:79:59:5a:0b:0b:10:6c:b5:95:81:34:0e:ac:e8:3e:65:f3:
47:ae:a7:59:b5:b9:43:bf:e4:73:28:03:4d:2a:20:22:73:48:
3a:0b:13:16:a6:96:c7:91:a6:82:1e:ba:54:2b:66:5a:60:7f:
63:a2:10:a2:00:b7:77:d0:cd:4f:5a:2a:3c:74:31:f9:fe:4f:
3c:a5:8d:d1:7a:1e:fc:ce:a2:40:84:58:6c:d4:93:72:bd:c2:
fa:07:ac:b2:b0:96:44:88:17:d0:b3:87:58:e1:32:b9:17:79:
38:de:04:03:1d:d0:77:26:5e:f4:75:9b:fb:63:9f:3b:9a:17:
0f:93:43:a4:99:33:b7:1e:10:59:59:63:4f:0b:cd:21:59:be:
97:18:b2:f9:21:e4:df:b4:72:17:91:fd:42:36:1f:02:df:7a:
b3:bc:22:c3:cf:f7:f6:01:5a:7d:0e:87:87:5b:3a:e3:7a:ab:
dc:7e:b3:f4:8a:cd:28:9d:70:62:4d:52:07:0c:58:a4:38:40:
60:3f:1d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:48 2024 by rpki-client on console-fra.rpki-client.org