Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/uMYeKbyj9MBFjp2DHdxY5GNFFTA.roa
File: uMYeKbyj9MBFjp2DHdxY5GNFFTA.roa (raw, json)
Hash identifier: uJqVgG5QHsNBoBTCklIyPDTW300WksdMsi8ZYFBhyO4=
Subject key identifier: B8:C6:1E:29:BC:A3:F4:C0:45:8E:9D:83:1D:DC:58:E4:63:45:15:30
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 0186F2F1A2FEF2E4AFCF2EF500BCE3CF4805
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/uMYeKbyj9MBFjp2DHdxY5GNFFTA.roa
Signing time: Sat 18 Mar 2023 04:19:27 +0000
ROA not before: Sat 18 Mar 2023 04:19:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46844
IP address blocks: 185.141.192.0/24 maxlen: 24
185.141.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Mar 2023 07:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f2:f1:a2:fe:f2:e4:af:cf:2e:f5:00:bc:e3:cf:48:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Mar 18 04:19:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8c61e29bca3f4c0458e9d831ddc58e463451530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:be:b9:47:a1:8a:22:14:3b:d6:37:7f:ec:
0b:72:13:dd:af:af:6f:38:47:ab:d5:31:a0:e9:73:
d0:98:cf:2d:5e:a8:c0:bd:4e:1c:07:03:6d:48:38:
db:43:f4:35:f5:f5:3c:9d:71:23:49:e1:71:a1:4d:
b5:d8:94:c1:1b:68:9c:9e:51:b8:09:b3:27:55:68:
e6:d6:ee:90:97:24:a6:ee:70:6b:dc:94:be:1f:b5:
18:99:78:95:7f:c1:5f:09:f7:0b:0c:d8:81:d8:6e:
d1:90:8c:94:bb:18:55:30:44:32:fc:15:07:81:7d:
17:b9:40:05:5d:03:38:0f:7d:08:d7:2c:41:d4:8f:
df:4c:ea:e8:29:00:95:3a:13:de:6a:b2:15:f2:44:
30:d0:5c:6a:e6:fe:00:eb:8c:01:9c:3d:e0:c7:7c:
8a:37:d3:99:2a:73:87:cf:9f:99:a3:4e:2b:12:9f:
ae:21:e1:9a:47:de:ac:21:11:3c:4d:79:8a:b4:97:
43:dc:b1:76:38:1b:e1:5e:2f:a6:74:9a:cb:42:23:
2e:c3:d3:e4:83:be:1c:bb:11:96:28:b3:b8:cb:26:
0d:5d:6a:17:76:ef:97:1c:18:9e:cd:b6:79:da:e8:
76:8e:de:08:1c:d3:b4:67:da:c6:bf:8c:2a:1a:33:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C6:1E:29:BC:A3:F4:C0:45:8E:9D:83:1D:DC:58:E4:63:45:15:30
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/uMYeKbyj9MBFjp2DHdxY5GNFFTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.192.0/24
185.141.195.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e9:dc:37:56:72:e9:4b:e1:60:3d:17:2d:08:81:ee:e2:bf:
cc:53:4e:72:a9:78:80:80:35:e6:ea:a4:36:8c:cd:22:d9:ac:
2d:7a:be:2f:c0:75:f4:df:7a:94:5b:01:94:96:a3:d8:eb:2f:
2b:0e:7e:73:41:02:13:54:a0:de:ba:71:fc:5d:5f:43:14:70:
48:e1:f6:09:99:81:ca:79:56:09:de:a0:bb:f2:12:67:5d:51:
7e:cb:8d:3b:53:84:5a:80:f2:13:ba:a7:7a:a9:7e:dd:68:dc:
42:f7:8e:f6:89:02:47:d3:3f:14:2f:34:18:d7:78:23:d5:2b:
92:27:1d:f9:5d:fa:68:dc:dc:ae:7f:14:a8:46:0e:d8:28:c4:
85:c6:fd:fe:fd:12:16:e5:48:9a:10:5b:61:ee:55:18:06:b1:
89:f5:de:41:ba:5c:22:36:52:7a:23:7f:ab:3b:e9:15:64:98:
4c:55:65:e5:05:df:10:14:ed:bb:b1:0e:fc:6d:5c:c9:5d:b4:
8f:1b:77:9a:f0:70:83:5f:b7:e9:c8:9a:78:17:23:fd:41:81:
4c:bb:11:c2:0d:d0:28:7b:2b:5b:30:ef:b9:a6:61:63:f1:ce:
6c:3e:0d:99:f8:ec:2b:ae:80:cf:e9:35:56:67:e4:f5:48:b8:
06:31:f0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:54 2024 by rpki-client on console-ams.rpki-client.org