Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/UDTUQbM2ialVCPovBORv9m3tnFY.roa
File: UDTUQbM2ialVCPovBORv9m3tnFY.roa (raw, json)
Hash identifier: hJkor3WhH+wxZn044vSWmuJwdhHXNXFRya+DLh2AL7I=
Subject key identifier: 50:34:D4:41:B3:36:89:A9:55:08:FA:2F:04:E4:6F:F6:6D:ED:9C:56
Certificate issuer: /CN=6f074d2efb5f3e1d35c291f8a11c0bc0be7ec1b8
Certificate serial: 0185704BB23489023C15A9F161F929FD47D4
Authority key identifier: 6F:07:4D:2E:FB:5F:3E:1D:35:C2:91:F8:A1:1C:0B:C0:BE:7E:C1:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwdNLvtfPh01wpH4oRwLwL5-wbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/UDTUQbM2ialVCPovBORv9m3tnFY.roa
Signing time: Mon 02 Jan 2023 02:24:47 +0000
ROA not before: Mon 02 Jan 2023 02:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53667
IP address blocks: 193.108.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:b2:34:89:02:3c:15:a9:f1:61:f9:29:fd:47:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f074d2efb5f3e1d35c291f8a11c0bc0be7ec1b8
Validity
Not Before: Jan 2 02:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5034d441b33689a95508fa2f04e46ff66ded9c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5a:0a:c2:6d:34:34:a3:40:80:1f:7f:12:97:
74:6d:d9:c8:1d:0c:52:f0:14:14:6a:85:a5:56:91:
c3:51:be:ee:21:fb:a6:5e:9b:4f:33:23:f8:f1:31:
b0:14:61:2c:4b:82:9d:04:c4:2c:9a:0e:3b:98:59:
26:c3:ac:bc:f4:13:e3:67:1d:d2:5d:8a:11:23:fe:
dc:d9:41:92:48:1d:d2:7e:92:3f:c3:df:40:12:ab:
4b:26:11:ba:d8:3f:6b:0e:c6:03:78:d9:d6:0d:cc:
c6:73:0c:05:a0:ba:6a:c2:40:4e:eb:52:ce:30:45:
69:3c:24:16:15:4c:45:87:25:d5:6f:f5:6d:95:3e:
da:03:c4:53:7f:29:b9:48:c9:37:0f:f5:9c:11:6f:
1d:59:ed:7d:ec:3b:6a:27:0a:51:61:74:c5:c0:cd:
f0:7f:aa:70:2a:43:b7:7f:07:b1:8c:31:2a:61:81:
50:16:94:31:2f:9d:cd:0e:81:69:15:8b:42:e9:5c:
d1:c4:f3:d7:70:e2:3a:8c:81:b3:77:d0:28:ec:f3:
33:f8:24:73:17:b4:dc:ce:14:2a:47:e3:6b:1a:ef:
1a:a4:d7:92:f1:9b:62:12:fd:df:f4:7d:59:ba:b1:
14:d7:95:61:3b:21:49:7a:f2:cb:70:8c:59:a7:86:
8a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:34:D4:41:B3:36:89:A9:55:08:FA:2F:04:E4:6F:F6:6D:ED:9C:56
X509v3 Authority Key Identifier:
keyid:6F:07:4D:2E:FB:5F:3E:1D:35:C2:91:F8:A1:1C:0B:C0:BE:7E:C1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwdNLvtfPh01wpH4oRwLwL5-wbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/UDTUQbM2ialVCPovBORv9m3tnFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.130.0/24
Signature Algorithm: sha256WithRSAEncryption
71:53:78:32:71:c4:2e:81:82:ee:ea:c5:01:5f:be:55:20:62:
b4:cd:24:14:fd:c0:d6:c6:1c:4f:73:4c:84:fb:60:85:25:3a:
25:b1:9d:c2:15:46:51:c5:78:42:f1:e5:07:62:d4:da:88:c0:
25:7a:46:e0:4b:d0:d0:4f:d2:f5:30:49:4f:02:fd:ad:54:a6:
bc:75:8a:63:86:bc:20:ba:91:fe:3d:12:67:54:e0:13:17:18:
b9:c5:1f:22:5f:4b:0a:1e:f0:26:2b:d2:f5:32:94:4e:d2:00:
f6:80:3a:f8:35:b0:6a:eb:b9:4a:f0:20:1b:ce:c7:c6:81:bd:
58:04:69:1a:60:8f:95:7c:fd:65:e9:78:eb:77:ee:c4:0d:4b:
50:2b:2b:52:a9:96:8a:f0:d0:8a:13:85:e3:52:8f:b0:86:0d:
85:23:ce:55:76:81:23:f0:25:59:2c:1c:d5:e5:06:98:e7:41:
5d:99:c0:1b:f3:77:86:90:9e:6e:35:e9:06:d0:29:f3:5e:36:
d5:7f:ea:b7:44:a9:51:c6:e2:45:d5:00:df:58:c9:2b:70:3d:
65:da:3c:70:8b:0a:a7:4b:6c:79:ae:4e:e0:08:65:d0:25:3f:
03:b2:0c:33:0e:9b:37:b8:12:1f:82:6d:42:f3:d3:2d:bd:12:
0e:29:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:59 2024 by rpki-client on console-ams.rpki-client.org