Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/urxPNABkGdUPorwQvXxNogX7GIc.roa
File: urxPNABkGdUPorwQvXxNogX7GIc.roa (raw, json)
Hash identifier: JtKX41WBS1nfpM2TETdS4p0+yaDuoNlQTYF7IQVTprI=
Subject key identifier: BA:BC:4F:34:00:64:19:D5:0F:A2:BC:10:BD:7C:4D:A2:05:FB:18:87
Certificate issuer: /CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Certificate serial: 018CC870B0BF7B0A6DC617E95AD1550CC19C
Authority key identifier: 9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/urxPNABkGdUPorwQvXxNogX7GIc.roa
Signing time: Tue 02 Jan 2024 04:31:17 +0000
ROA not before: Tue 02 Jan 2024 04:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44712
IP address blocks: 185.91.204.0/22 maxlen: 22
151.249.104.0/21 maxlen: 21
2a01:a8c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 12 Feb 2024 09:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:b0:bf:7b:0a:6d:c6:17:e9:5a:d1:55:0c:c1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Validity
Not Before: Jan 2 04:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=babc4f34006419d50fa2bc10bd7c4da205fb1887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:37:32:3b:56:bc:9b:55:a5:35:ce:6e:19:
2d:ca:5b:56:61:9f:e3:19:a7:43:c0:96:bd:e8:5f:
39:5b:15:f0:0a:f9:2d:02:3a:39:e1:3e:b7:27:59:
5b:58:85:52:9a:b3:30:c5:bb:14:65:0a:84:c5:36:
78:e2:82:0d:33:97:40:e6:0c:66:ae:3f:f5:01:d7:
0e:b7:09:09:b4:82:f9:ef:97:7b:f9:e6:66:c4:16:
08:3a:35:6d:61:86:05:fa:69:03:97:5c:71:83:24:
a4:df:fa:85:d2:74:af:6d:b6:88:e0:14:56:9b:85:
f1:35:0f:20:7d:c1:95:b7:82:66:51:02:6a:e0:02:
f2:57:79:7c:b7:24:ff:65:c7:d9:1e:10:2f:b7:d4:
04:1e:d2:d8:2c:4c:3f:b4:00:87:21:6f:dd:84:ed:
b9:24:e6:ba:4b:28:52:b4:80:39:57:87:71:29:b8:
a6:60:eb:8e:f2:95:9a:fc:43:dc:4b:54:5a:4d:b3:
63:07:f2:2b:a7:72:3f:2c:9d:59:53:bb:93:2d:f6:
c2:f4:d4:a8:d9:98:ef:c9:1c:20:08:fd:51:d2:4e:
b9:f1:dd:9f:74:9b:fe:12:aa:d8:e9:a0:da:4b:76:
c9:69:24:28:9f:53:4d:0e:f6:cb:6d:7d:2f:73:78:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BC:4F:34:00:64:19:D5:0F:A2:BC:10:BD:7C:4D:A2:05:FB:18:87
X509v3 Authority Key Identifier:
keyid:9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/urxPNABkGdUPorwQvXxNogX7GIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.249.104.0/21
185.91.204.0/22
IPv6:
2a01:a8c0::/29
Signature Algorithm: sha256WithRSAEncryption
54:2b:7d:e0:7d:94:e8:f9:73:75:70:9b:10:86:a9:3b:e3:68:
74:55:9d:09:d6:de:17:6e:23:5c:f7:8e:aa:a2:13:da:6d:65:
be:36:1c:0e:f1:79:31:e6:3e:7b:f0:ef:ac:61:61:22:c8:a9:
2d:60:ee:c4:7e:39:8f:07:70:b4:af:a7:04:91:73:c7:3d:2c:
21:71:bc:4d:d3:d5:3b:0d:99:5e:0a:04:cd:62:e2:b2:c8:12:
18:3c:bb:0f:2c:19:70:8b:53:17:2e:6d:99:6a:f9:24:79:25:
ab:12:5a:00:74:1b:38:7a:0b:7d:07:70:0c:24:cb:0a:4a:1a:
1f:ee:14:d8:9c:45:e6:59:06:62:95:86:5e:71:c7:b6:25:c0:
9d:9d:c9:c7:bb:2d:54:d9:87:1e:cd:69:1a:17:ce:a4:c1:31:
bf:58:4c:b4:79:a8:f4:81:3c:38:c8:94:1d:f1:67:71:a0:19:
6a:2f:6a:c8:e4:d7:a8:e7:ec:e3:22:1c:1d:41:36:c7:2c:ad:
b5:30:33:9f:43:c4:23:d1:fa:ba:cd:77:c2:57:91:d9:28:29:
71:c4:8d:4b:e8:e8:ff:23:f9:e6:d8:1a:ba:4e:06:ce:43:0d:
46:e8:9b:88:27:24:65:97:09:6d:42:e0:6b:c9:6a:4e:89:b0:
f0:38:33:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 12:06:09 2024 by rpki-client on console-fra.rpki-client.org