Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/UpIxKvTUCCLkqnPpi2XmSXYTAHM.roa
File: UpIxKvTUCCLkqnPpi2XmSXYTAHM.roa (raw, json)
Hash identifier: uV9XIk1J/ibFcBz4xfvtAevKqmp4AXXCjgGcSHQyAcU=
Subject key identifier: 52:92:31:2A:F4:D4:08:22:E4:AA:73:E9:8B:65:E6:49:76:13:00:73
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018571C3204492C11BC25FC08CCA26AB311F
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/UpIxKvTUCCLkqnPpi2XmSXYTAHM.roa
Signing time: Mon 02 Jan 2023 09:14:51 +0000
ROA not before: Mon 02 Jan 2023 09:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206499
IP address blocks: 185.133.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:20:44:92:c1:1b:c2:5f:c0:8c:ca:26:ab:31:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 09:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5292312af4d40822e4aa73e98b65e64976130073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:25:54:b4:2d:e2:c7:16:5b:ce:9e:c2:d6:aa:
4d:34:b2:d2:7c:5c:56:93:28:25:e4:48:15:92:43:
63:f8:5c:52:15:59:f1:93:7c:94:4e:1e:63:a6:26:
70:0d:10:3d:f2:41:98:8c:ec:01:7e:73:48:c9:96:
7d:78:58:03:67:3d:a1:71:c0:53:92:81:b0:2e:9d:
ea:6f:cc:04:6b:16:b7:9a:56:1b:7d:37:7f:ec:56:
65:43:63:78:b7:17:bb:25:9f:e9:6e:f4:68:e3:e6:
ee:46:2c:8f:55:70:50:8e:a1:84:74:8b:1a:d2:e6:
8d:16:6a:50:52:ae:74:be:da:1e:07:18:01:0e:23:
24:94:2b:7a:6c:8e:8f:28:83:fc:9d:17:a5:dd:a0:
49:3d:e3:35:85:c7:bc:a4:5b:02:5e:df:ec:35:28:
15:b8:d5:c2:2a:5b:19:16:23:ba:24:ec:a5:76:0b:
17:c4:a7:15:8d:e5:33:76:9d:9b:74:26:9f:13:77:
de:bb:30:98:84:79:b0:be:96:68:9a:77:ed:d7:27:
c2:c0:49:3e:77:5c:4e:99:1f:a7:8e:71:c6:32:ba:
4a:42:9c:a9:7b:60:bb:3c:99:05:ee:88:29:24:8a:
11:b5:8a:1f:7b:cf:3b:35:f4:57:fc:ed:ae:63:d7:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:92:31:2A:F4:D4:08:22:E4:AA:73:E9:8B:65:E6:49:76:13:00:73
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/UpIxKvTUCCLkqnPpi2XmSXYTAHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.208.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:3e:1b:fa:03:39:9a:31:67:35:9b:a3:da:f5:86:7e:8a:b5:
12:39:e3:97:81:f0:cc:67:fb:5b:f5:2b:43:e2:05:ad:7f:ef:
31:61:5a:e0:da:0e:83:ff:b2:e4:2d:b4:38:d9:3c:8e:20:52:
24:9a:a8:83:45:66:95:5c:ba:81:e8:82:e9:27:b5:ce:41:09:
24:e4:30:81:42:56:f9:18:6a:67:05:a2:01:9d:1c:b9:a5:ab:
af:03:c8:b0:42:4d:1a:6d:fe:1c:16:1d:1d:46:9f:c3:58:9d:
18:1e:62:d6:14:13:ca:b9:b0:12:01:90:87:9e:e7:3f:e8:30:
55:bf:5f:60:2c:31:42:3f:48:ae:24:88:da:59:c1:ed:c9:1d:
e9:bd:eb:e3:ff:93:92:ce:4c:7c:dd:a8:7b:02:84:4b:51:e1:
3d:6b:22:d3:07:41:a9:f4:11:2a:86:23:e4:4c:2f:35:c5:8e:
b5:9c:76:b0:b0:11:5e:03:d7:55:be:5c:a1:81:eb:9d:b7:b9:
d2:d9:0c:11:49:82:d7:91:6b:58:61:ad:a5:13:15:11:fe:ec:
fc:33:4c:4d:ff:d5:bb:17:21:00:7a:f4:11:00:b0:f0:fb:41:
fe:1f:12:c3:bc:b3:98:c5:80:d4:cc:c2:b7:7c:84:bf:9f:80:
8e:fb:66:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:16 2024 by rpki-client on console-fra.rpki-client.org