Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/uQJ9X-Z-srRGW48b-WHMyLbkTNo.roa
File: uQJ9X-Z-srRGW48b-WHMyLbkTNo.roa (raw, json)
Hash identifier: orAeT4bJ6rEsp3akZmXWwD2ukNggkaNIaQFLCs2IDrQ=
Subject key identifier: B9:02:7D:5F:E6:7E:B2:B4:46:5B:8F:1B:F9:61:CC:C8:B6:E4:4C:DA
Certificate issuer: /CN=3322a06b46f06af23f81e15888950a36063ebcd9
Certificate serial: 018571151C7C0D33A5DD9B271054621B1701
Authority key identifier: 33:22:A0:6B:46:F0:6A:F2:3F:81:E1:58:88:95:0A:36:06:3E:BC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKga0bwavI_geFYiJUKNgY-vNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/uQJ9X-Z-srRGW48b-WHMyLbkTNo.roa
Signing time: Mon 02 Jan 2023 06:04:47 +0000
ROA not before: Mon 02 Jan 2023 06:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60631
IP address blocks: 193.105.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:1c:7c:0d:33:a5:dd:9b:27:10:54:62:1b:17:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3322a06b46f06af23f81e15888950a36063ebcd9
Validity
Not Before: Jan 2 06:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9027d5fe67eb2b4465b8f1bf961ccc8b6e44cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9f:be:61:c9:03:4a:3a:74:5a:fe:85:79:f1:
57:af:5a:8f:b3:49:08:24:b6:86:4a:d7:d2:a8:7d:
6e:39:ea:cc:2a:52:aa:4a:ca:56:55:d1:89:f3:aa:
81:41:6e:15:aa:0e:f8:b1:10:e5:ad:8d:a4:1f:16:
fa:a4:11:4b:6c:c0:40:b1:5b:9e:74:40:78:8e:ef:
0a:b7:9e:8b:28:7d:1f:16:72:e7:6f:14:57:1d:bd:
13:56:5d:67:c1:8f:9b:75:ec:f0:7b:61:0e:20:f0:
d7:c0:c0:1c:9c:ba:40:c2:1f:27:82:b8:d7:a7:17:
86:5e:c5:03:63:e5:fb:e5:96:16:67:2a:98:8d:b2:
88:39:93:d1:2e:a7:a4:c0:32:d1:07:17:e9:35:12:
39:b7:6a:0b:8f:07:d8:4f:c1:db:6c:9b:52:4d:b3:
f4:cc:4a:39:2e:de:10:b3:0e:a6:14:1d:f8:74:a4:
cd:fd:67:82:0b:ff:64:9f:a0:15:ee:14:31:cb:25:
cd:50:f5:95:54:e6:47:e1:ad:38:11:b9:16:5d:8a:
49:49:38:aa:7e:63:ff:47:de:6b:0b:fd:3e:23:f9:
82:c4:b1:2d:aa:d5:bb:d0:79:8e:a0:9e:7b:c8:20:
b1:99:c9:ae:ce:ae:fe:9a:50:8a:c3:cf:8f:32:fb:
1e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:02:7D:5F:E6:7E:B2:B4:46:5B:8F:1B:F9:61:CC:C8:B6:E4:4C:DA
X509v3 Authority Key Identifier:
keyid:33:22:A0:6B:46:F0:6A:F2:3F:81:E1:58:88:95:0A:36:06:3E:BC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKga0bwavI_geFYiJUKNgY-vNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/uQJ9X-Z-srRGW48b-WHMyLbkTNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/MyKga0bwavI_geFYiJUKNgY-vNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.234.0/24
Signature Algorithm: sha256WithRSAEncryption
37:1c:04:59:51:c2:ca:34:a9:aa:15:b2:0b:ff:a0:e3:fd:c3:
76:c2:11:79:77:69:59:9b:b9:1b:ab:bd:e6:b7:0d:df:ba:73:
89:70:ea:20:3b:e3:1d:c1:48:83:af:c3:25:0c:40:c8:fa:e1:
fa:7a:98:b3:bf:e3:f1:49:fd:28:12:f6:42:05:0d:4a:7e:24:
f4:5a:90:80:d9:b4:d9:88:07:ba:23:78:f2:36:c8:ef:8b:72:
3f:6d:6d:1c:0f:87:64:b0:65:af:11:43:a2:12:55:9b:a6:9d:
db:11:23:ac:27:57:0b:04:c4:83:e1:d0:57:38:15:43:0c:84:
2b:a8:da:6b:40:7f:68:d0:ec:0f:c8:97:97:4e:e9:3a:6a:5a:
d1:0a:2c:53:ed:30:56:ac:23:db:8b:82:7a:10:70:ec:81:f5:
c7:17:b3:53:06:47:0d:59:0b:4d:20:13:94:8a:f4:fe:62:fc:
25:1e:3a:b6:7c:a0:8c:02:cc:23:f7:a0:74:1d:f7:83:a4:02:
9a:da:6d:80:73:01:34:eb:ca:8f:d6:fd:b9:98:27:e0:12:b7:
f1:6c:80:29:ba:19:b0:b5:39:0e:95:74:11:8c:79:f6:d4:2c:
43:ac:a9:cc:c2:a6:0f:1c:03:72:90:f8:3a:04:3b:f6:dc:d4:
54:fe:38:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:45 2024 by rpki-client on console-fra.rpki-client.org