Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/1-Uuhu-MxTrkAAXq1s5-bB4t3cxc.roa
File: 1-Uuhu-MxTrkAAXq1s5-bB4t3cxc.roa (raw, json)
Hash identifier: 0FphDXJcjdPnjXUHdQ6LYOtJW6o21SLHNUaZpZz+I+Q=
Subject key identifier: F9:4B:A1:BB:E3:31:4E:B9:00:01:7A:B5:B3:9F:9B:07:8B:77:73:17
Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial: 01856C0A2AC981D10442328A9660A4BED838
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/1-Uuhu-MxTrkAAXq1s5-bB4t3cxc.roa
Signing time: Sun 01 Jan 2023 06:34:43 +0000
ROA not before: Sun 01 Jan 2023 06:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9051
IP address blocks: 185.38.28.0/22 maxlen: 24
185.95.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:2a:c9:81:d1:04:42:32:8a:96:60:a4:be:d8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
Validity
Not Before: Jan 1 06:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f94ba1bbe3314eb900017ab5b39f9b078b777317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:46:a0:44:69:29:7e:a6:d9:94:cc:01:83:
96:2c:e7:34:c7:3f:33:7d:e0:c7:68:68:23:75:d9:
2b:98:89:30:78:fc:51:58:93:cc:d6:63:e2:2c:60:
b0:fb:66:f6:35:ab:86:bb:63:2c:1c:e6:4c:e1:44:
35:05:04:51:18:ab:6c:76:53:b7:73:8f:fe:5c:72:
38:d4:ba:49:1e:be:80:f2:a0:f6:7c:09:bb:27:0a:
5c:02:2c:94:11:11:63:84:64:a2:3e:fd:2d:be:73:
f8:55:6b:fc:71:a8:33:e6:6b:6a:ac:06:ab:80:cb:
3d:33:29:c4:5f:bf:c0:88:7c:74:46:73:fc:a4:b7:
b1:28:57:4b:24:39:10:3d:38:9d:35:2b:f1:c1:99:
cf:ef:52:44:c6:f0:8e:39:a2:a1:70:ca:22:cc:e9:
eb:2b:ab:a7:ca:a9:47:70:35:de:3a:69:b1:3c:56:
1f:12:4c:70:7b:ed:45:99:f1:bc:fa:42:83:cc:e0:
35:a4:b6:e9:e7:11:fe:e3:f9:84:8c:17:9a:07:08:
d9:fe:c5:fd:1c:51:c3:73:80:9f:58:66:64:9d:dd:
9c:46:23:cd:b0:f3:ba:73:64:f4:90:63:1e:e9:b4:
0b:33:c4:d3:d5:49:eb:1a:ca:eb:1f:f0:4f:08:ac:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4B:A1:BB:E3:31:4E:B9:00:01:7A:B5:B3:9F:9B:07:8B:77:73:17
X509v3 Authority Key Identifier:
keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/1-Uuhu-MxTrkAAXq1s5-bB4t3cxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.28.0/22
185.95.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:b6:c5:30:d4:09:bc:77:96:24:05:65:d4:fd:5a:a5:2d:1e:
76:5d:1c:6b:73:a6:48:2b:2e:e9:4c:94:d4:34:c3:4f:0d:3f:
52:ca:2f:78:e8:18:66:07:b6:2e:87:59:45:e9:95:af:4a:85:
16:6a:bd:ac:82:43:1f:2b:6f:14:4b:ff:a4:b7:96:03:50:d1:
96:5f:9e:c9:5a:a9:bc:15:ad:87:50:d2:4f:fa:45:21:d8:e1:
04:9b:a6:47:cc:30:48:4f:08:56:52:fe:23:db:c8:59:f7:2a:
17:17:b6:83:bd:6e:07:ea:b1:cd:30:c6:52:64:d6:0a:6a:d4:
5d:c2:66:4e:8f:8b:9a:20:9a:b7:48:17:0e:68:85:59:71:bf:
ea:07:94:3f:1f:a7:ea:ec:b0:a4:fe:fd:23:0c:48:96:eb:c4:
3e:21:c3:f0:72:24:92:ed:1e:e7:90:0b:47:61:a4:a1:bc:9d:
d0:30:83:d4:92:0d:93:36:2d:0a:84:2d:eb:de:7a:3e:f7:72:
fc:e9:77:f9:66:4e:b5:84:f4:72:8e:e4:a8:d4:3b:1e:66:ce:
20:42:a0:a8:d7:9c:ec:dc:50:c0:1a:90:ad:cf:ce:6c:cf:fd:
3b:ab:5c:f3:50:db:b8:01:6c:25:35:6c:ed:0a:3c:bf:70:ba:
b8:92:67:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:18 2024 by rpki-client on console-ams.rpki-client.org