Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/u-cuOMRSxwnKwKcvW9MfaUM0onw.roa
File: u-cuOMRSxwnKwKcvW9MfaUM0onw.roa (raw, json)
Hash identifier: C7oYQfupnhCg15NNg9BX7uQvG9nxpRm32+Eb43yjF/M=
Subject key identifier: BB:E7:2E:38:C4:52:C7:09:CA:C0:A7:2F:5B:D3:1F:69:43:34:A2:7C
Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Certificate serial: 01856F301DC51AC10CDC90FE28F52FACEFF8
Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/u-cuOMRSxwnKwKcvW9MfaUM0onw.roa
Signing time: Sun 01 Jan 2023 21:15:02 +0000
ROA not before: Sun 01 Jan 2023 21:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206833
IP address blocks: 185.44.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:1d:c5:1a:c1:0c:dc:90:fe:28:f5:2f:ac:ef:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Validity
Not Before: Jan 1 21:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbe72e38c452c709cac0a72f5bd31f694334a27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:0c:a7:4a:01:06:6c:47:6a:66:9c:aa:0b:
55:f6:f3:c7:5b:dc:a8:0e:d7:fb:9a:db:fe:2f:7d:
1b:65:b7:f5:1d:ac:39:fa:91:12:13:6b:99:92:1e:
b6:64:d1:53:a7:26:c2:d3:e4:4a:3e:72:d8:62:77:
b7:04:30:fc:06:86:38:42:c4:89:e2:b0:58:ef:c4:
bd:ac:07:e0:f2:60:69:1f:38:28:3e:fa:01:d7:80:
16:36:4c:36:16:dd:ec:ff:90:37:21:0f:53:67:16:
6c:44:cb:ff:c9:6d:85:0f:9d:ac:04:ea:e1:11:30:
f7:c8:04:ba:2c:b1:94:48:91:ff:e0:dc:5d:13:0e:
e1:d4:b5:7a:e4:ab:78:da:56:dc:cb:e2:d2:bf:15:
73:4c:b4:8b:30:63:e4:59:10:da:9f:01:b3:f7:da:
6e:3d:52:f6:5a:b0:14:ed:34:24:c1:a2:35:07:9a:
37:0e:f4:49:30:94:7e:b5:ce:e2:0c:e0:d2:1b:2c:
b9:e2:64:f6:05:20:d5:5e:34:a2:0e:4d:53:2f:4c:
1f:fd:63:fc:98:a4:4b:a2:d5:d5:92:ba:d4:36:cb:
85:5c:02:2a:df:d7:8e:14:52:3d:45:88:30:ed:6c:
f2:e1:da:b4:7f:c2:92:7e:96:f7:55:24:7e:1d:f1:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E7:2E:38:C4:52:C7:09:CA:C0:A7:2F:5B:D3:1F:69:43:34:A2:7C
X509v3 Authority Key Identifier:
keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/u-cuOMRSxwnKwKcvW9MfaUM0onw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:fd:ae:6c:e8:91:7b:2d:a8:82:04:26:e5:c4:7d:bb:a0:ec:
1e:1c:7d:cd:05:1c:08:ec:b6:fa:8f:4c:d8:f1:2b:d6:ac:5f:
0b:61:4e:65:da:9e:7a:88:03:b2:2c:b4:e4:52:65:f0:c8:9d:
5c:7b:b7:0d:2f:87:12:a5:de:07:76:3e:72:aa:61:f2:a5:32:
62:60:f9:25:cb:44:cb:7d:76:38:94:83:19:93:04:4d:2d:55:
b2:ee:c3:ba:3b:9f:1d:51:7f:c6:09:15:d8:cd:65:97:08:ee:
a0:3c:db:65:a3:86:68:e6:52:08:ef:98:b7:c4:57:4e:57:22:
7b:b7:4d:e2:d2:2e:09:e9:38:76:4a:71:6d:5f:79:e3:f7:88:
a2:20:cf:16:eb:d5:80:a4:ba:54:04:af:ea:a0:df:e1:54:93:
0d:bc:84:b7:1a:df:15:81:05:c8:a6:1a:b9:9a:44:0c:23:88:
7d:76:61:a2:de:5a:49:cf:6a:da:30:a4:57:e9:4c:cd:2b:f1:
f0:10:59:b3:80:c9:c4:15:7e:d4:53:bb:2d:1d:30:f7:1f:68:
84:18:e7:e6:6a:cb:a3:06:db:d3:7d:4c:0a:97:8a:e7:6f:8d:
70:21:95:68:c1:59:cf:d0:c5:ff:f0:5a:dd:06:c5:08:3d:cc:
23:d7:0b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:46 2024 by rpki-client on console-fra.rpki-client.org