Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/_uLBZXbE145i3JEEiT5fJglkIJw.roa
File: _uLBZXbE145i3JEEiT5fJglkIJw.roa (raw, json)
Hash identifier: 7aszflg8WacN9TQLFw+zJMuO6zWNwIaTlKfumHhNn1o=
Subject key identifier: FE:E2:C1:65:76:C4:D7:8E:62:DC:91:04:89:3E:5F:26:09:64:20:9C
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 01856D0AEA6A93E92A44F6E4CB406C290E14
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/_uLBZXbE145i3JEEiT5fJglkIJw.roa
Signing time: Sun 01 Jan 2023 11:15:09 +0000
ROA not before: Sun 01 Jan 2023 11:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50870
IP address blocks: 94.243.208.0/22 maxlen: 22
94.243.212.0/22 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:ea:6a:93:e9:2a:44:f6:e4:cb:40:6c:29:0e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Jan 1 11:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fee2c16576c4d78e62dc9104893e5f260964209c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:27:d3:cb:d7:3e:81:bc:ac:38:08:2a:f4:
9a:d4:77:52:bf:27:af:c4:a4:8e:39:61:60:28:eb:
66:ab:e2:55:5e:75:d6:b3:54:f3:36:b1:31:02:32:
27:b5:0b:c7:a7:e3:21:36:8d:b7:77:a0:e3:c0:f8:
7d:be:20:29:5c:e3:66:2d:fd:69:6a:4c:30:11:4d:
5a:92:cd:9a:c8:45:36:33:7c:ee:ce:c0:3b:c2:04:
51:f6:67:da:a0:5f:8c:35:e0:13:72:9b:7d:f1:45:
d9:dc:ff:12:18:e0:1b:93:5b:da:80:11:10:9b:da:
a9:7d:83:fd:75:44:94:7b:8d:bc:5e:87:51:d4:a1:
1e:6d:6d:d8:fd:c1:15:ae:26:d5:e8:8b:70:49:ce:
0f:b9:62:80:9f:2f:20:97:60:0f:da:72:de:8c:e7:
4c:85:6c:f4:7f:fc:a0:6a:e6:73:b6:8a:1a:87:e2:
83:76:e5:b7:8f:ae:8f:ec:29:e9:0a:2f:63:b0:74:
7d:ef:d5:d5:1c:0c:00:68:2d:7b:65:4d:27:73:3a:
ed:85:ee:6c:c2:b3:1e:74:62:a6:9f:0b:7a:e5:01:
ee:b6:9b:53:c4:4f:a1:ad:81:42:88:67:b1:df:c6:
ca:ca:f0:ab:a6:d2:71:7f:1d:0d:9f:eb:fa:0c:56:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E2:C1:65:76:C4:D7:8E:62:DC:91:04:89:3E:5F:26:09:64:20:9C
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/_uLBZXbE145i3JEEiT5fJglkIJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.243.208.0/21
Signature Algorithm: sha256WithRSAEncryption
10:8e:40:2c:32:58:21:9a:94:11:62:7d:ff:5a:c2:69:e8:15:
5d:84:bc:8b:fc:f1:94:98:66:08:ed:ac:19:21:54:09:83:56:
ec:04:6b:ee:2e:98:d5:df:d4:89:9d:41:9d:55:c5:60:26:10:
2b:68:33:96:59:ec:73:a5:f8:1b:5a:73:5d:16:9b:0a:c8:da:
1d:a5:8f:77:5e:e5:c5:e8:6c:c9:fc:ba:49:0c:8e:b3:f0:ad:
1c:c2:20:2c:28:83:84:ff:6c:9c:73:c9:66:c2:34:15:06:58:
43:e4:51:c1:5c:58:87:df:c5:7d:eb:f1:20:52:94:70:ad:09:
df:cd:50:af:95:08:16:97:04:df:f6:ef:b1:c3:22:0b:0b:c3:
fd:41:aa:36:03:f6:f4:cd:25:f8:f0:33:fa:23:09:5e:a4:41:
da:4f:15:74:0c:08:30:76:1e:6c:a9:ca:eb:be:9d:9c:bf:91:
06:67:f1:5f:27:4d:e1:39:34:3d:19:48:52:65:a4:17:c8:8f:
44:fa:45:6f:d0:90:48:ca:1f:ed:9f:bf:21:cb:e2:28:95:ee:
53:82:62:0a:01:e8:f2:e1:89:dd:8f:95:44:48:96:e5:a0:0e:
49:3e:fa:cd:ca:f7:fd:3a:8b:d5:84:13:63:fc:66:f4:e5:b0:
21:c9:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:56 2024 by rpki-client on console-ams.rpki-client.org