Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/UNP6cd0Ih0vZyHtvLU3-3lwMtyE.roa
File: UNP6cd0Ih0vZyHtvLU3-3lwMtyE.roa (raw, json)
Hash identifier: GVgfrm3fX07xYpOuFdkrrmUQ8Y+K7fFGCaeOEPmkdAM=
Subject key identifier: 50:D3:FA:71:DD:08:87:4B:D9:C8:7B:6F:2D:4D:FE:DE:5C:0C:B7:21
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 01856D93E9FEDDFB32FE7D4195F1496E4C8B
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/UNP6cd0Ih0vZyHtvLU3-3lwMtyE.roa
Signing time: Sun 01 Jan 2023 13:44:48 +0000
ROA not before: Sun 01 Jan 2023 13:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12582
IP address blocks: 192.194.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:e9:fe:dd:fb:32:fe:7d:41:95:f1:49:6e:4c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Jan 1 13:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50d3fa71dd08874bd9c87b6f2d4dfede5c0cb721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1d:1c:12:1e:53:43:f2:b7:ca:81:6f:fe:f7:
a9:59:35:18:ea:4f:fd:0e:c3:20:e4:47:01:85:83:
dd:b0:32:0d:30:32:8d:5e:84:7e:ed:34:70:9e:12:
e2:36:91:c7:cc:54:a2:bd:63:8b:39:66:e6:5b:ef:
45:d7:e8:9e:4c:4c:74:f2:50:e8:80:30:46:e7:4b:
b6:84:4f:95:9a:8f:16:fc:57:7a:28:21:49:62:8b:
89:6a:36:dc:f1:9e:fe:87:cb:ff:07:c4:a7:86:52:
77:bd:40:bc:09:d8:66:18:53:74:f6:f5:49:39:75:
91:08:2f:59:5a:bb:bb:e9:1b:53:19:d8:90:58:ad:
e9:5b:03:39:0f:e5:61:12:07:22:0d:3e:dc:29:9d:
8b:95:27:d9:eb:29:b0:67:73:3c:32:79:45:cb:51:
af:05:74:a5:58:ad:6e:86:05:8f:f5:0e:d8:44:80:
5c:d9:9b:4a:d4:f3:96:10:a3:91:67:9c:c3:e3:77:
e2:26:a2:47:96:b8:4c:a3:90:6e:82:23:bd:b1:f8:
9c:32:27:90:7b:c0:d5:77:8f:43:06:c4:ae:cd:a8:
c1:25:8d:59:b1:0e:53:d9:ce:45:6e:cc:d2:a6:63:
81:4d:c9:dc:ad:d4:a9:4e:e9:10:ca:50:b2:aa:ba:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D3:FA:71:DD:08:87:4B:D9:C8:7B:6F:2D:4D:FE:DE:5C:0C:B7:21
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/UNP6cd0Ih0vZyHtvLU3-3lwMtyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.194.131.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:75:d6:98:13:93:a7:67:12:b9:e8:f1:b0:53:bf:21:9e:a1:
05:fc:f2:32:ff:50:52:35:19:01:13:dd:3c:37:b3:43:49:12:
23:c0:8e:89:0d:d8:84:ef:fb:6d:5a:01:7d:20:9e:7b:eb:e9:
dc:c5:9d:6d:93:13:fb:5d:5e:83:2e:d6:c3:b0:f7:da:6f:20:
2e:00:dd:c6:fa:d5:8e:43:10:05:67:1b:38:40:13:84:63:d1:
90:1d:64:cc:80:39:22:a0:67:f6:36:e7:38:73:d0:c7:2d:1d:
47:2b:6e:63:2f:4c:0b:cb:10:bc:ae:59:18:e7:98:30:eb:b2:
d0:40:85:52:a9:62:c0:49:d5:8b:02:8d:bc:1a:32:0b:2d:e1:
95:b4:7b:98:9f:7f:20:af:6f:dc:2b:27:7f:7d:3b:79:6d:ae:
de:07:31:e2:4c:e5:2f:da:bb:fc:0a:32:ee:3d:e8:14:f9:1d:
00:65:fc:86:fe:8e:ff:c2:ad:a9:3e:79:02:e4:a1:08:73:67:
45:1e:d5:54:d7:cd:22:1b:05:01:69:01:d2:d0:1e:ce:fb:3c:
3b:11:72:99:b0:6b:64:8d:81:d2:9a:45:d2:59:53:c3:5d:8e:
d9:ed:9f:41:71:65:81:bc:93:5a:53:b2:56:8e:ce:4f:cf:50:
c6:4b:34:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:43 2024 by rpki-client on console-ams.rpki-client.org