Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/UDs-xXT1W-y5xxjZyIDCRbwnRPs.roa
File: UDs-xXT1W-y5xxjZyIDCRbwnRPs.roa (raw, json)
Hash identifier: iWr1mzAE7uGjV+chh10LnY13+otdleudxVmd/eaXMio=
Subject key identifier: 50:3B:3E:C5:74:F5:5B:EC:B9:C7:18:D9:C8:80:C2:45:BC:27:44:FB
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 018CCA294CD641AA07A32BBD94F0D4537FB9
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/UDs-xXT1W-y5xxjZyIDCRbwnRPs.roa
Signing time: Tue 02 Jan 2024 12:32:33 +0000
ROA not before: Tue 02 Jan 2024 12:32:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.14.37.0/24 maxlen: 24
185.155.54.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 10:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:4c:d6:41:aa:07:a3:2b:bd:94:f0:d4:53:7f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 2 12:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=503b3ec574f55becb9c718d9c880c245bc2744fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:35:f7:f5:d6:7a:bf:33:8c:fd:ea:40:c1:88:
8b:d8:6e:b4:c2:98:d3:a8:60:7f:51:a9:1b:55:63:
e8:31:44:86:66:88:4e:96:e6:09:e9:32:49:e3:95:
6e:d5:80:d2:56:fa:2b:95:b5:fc:68:f1:fd:1c:c5:
bf:0a:50:33:74:c8:31:47:17:11:aa:3b:e4:b6:c2:
06:cb:f3:b4:d1:40:c4:e9:cd:c8:0d:3c:12:4e:b6:
dd:c8:8c:fe:52:bc:3c:0d:ef:0c:ca:6c:51:a6:eb:
dd:24:52:8a:1c:3d:07:f5:d2:5b:d3:be:7e:2d:2d:
d7:eb:9d:f3:f3:16:a6:62:bc:3d:5b:cc:a3:58:2e:
c8:7e:6d:6c:30:0a:e1:93:3b:3b:d6:6d:30:30:ae:
36:8b:ed:cb:73:d8:f3:c7:99:cd:d7:82:83:c1:7a:
96:ab:a6:37:1a:8b:c5:71:1a:e1:f0:0e:46:85:d6:
43:f9:ef:9b:52:70:e9:85:85:26:9d:09:16:b8:4a:
06:95:20:ce:68:5c:86:37:d9:f8:78:f4:a7:4a:e9:
3c:58:99:93:d1:f7:46:05:33:08:e4:0e:5e:9a:6c:
1d:06:d9:e6:19:b5:a6:33:19:aa:8c:f3:ae:a3:92:
69:37:24:c6:6a:09:ec:61:ed:1a:89:55:c4:47:3b:
dd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3B:3E:C5:74:F5:5B:EC:B9:C7:18:D9:C8:80:C2:45:BC:27:44:FB
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/UDs-xXT1W-y5xxjZyIDCRbwnRPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.37.0/24
185.155.54.0/23
Signature Algorithm: sha256WithRSAEncryption
48:2b:e9:f6:53:d7:86:36:c0:8c:0c:a3:71:14:2b:f6:a5:71:
81:5d:8a:97:08:b3:62:be:dc:29:76:88:15:22:8f:74:e6:7c:
7d:85:2d:d5:00:ff:8a:fd:31:ec:57:4d:be:b1:fd:1b:f4:4c:
88:46:8c:90:25:68:b7:27:f5:20:70:c2:3c:de:7f:a6:8e:e2:
df:92:eb:ec:d5:38:b8:46:29:ca:0c:3e:9c:68:a8:48:53:c5:
a3:db:4a:37:37:90:4d:0f:2c:39:dc:74:fe:06:1d:4b:66:a0:
c1:2f:1d:ac:68:3c:f2:95:e9:9b:1a:18:59:61:97:dc:e4:a5:
0d:cf:77:bf:2b:0c:36:96:4b:01:70:e4:7d:5f:8f:b2:40:d6:
cf:91:8d:a5:59:3e:a5:47:2b:10:64:fd:cf:ec:1a:7f:a7:e8:
90:41:0d:db:98:6c:bf:e9:27:11:5a:07:67:bb:5a:c7:73:6e:
72:46:da:b2:53:42:c2:77:0f:38:4b:37:5a:cb:e9:2f:7c:16:
63:29:6e:47:c2:f8:48:65:b9:14:c2:4e:6b:2b:2d:45:dc:7b:
bf:12:89:40:95:46:ff:4a:37:91:55:fb:01:64:e6:b3:87:01:
f2:4a:ed:f8:c2:04:bf:59:7b:ae:fd:2b:65:65:61:9d:49:23:
49:c1:e8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:04 2024 by rpki-client on console-ams.rpki-client.org