Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/UABeQg_WUcSPb5asSTMDNPVYEYc.roa
File: UABeQg_WUcSPb5asSTMDNPVYEYc.roa (raw, json)
Hash identifier: Z3jXyudCAD1m0HnHhX8QBchEreQvTiiFBTuZi64VKz8=
Subject key identifier: 50:00:5E:42:0F:D6:51:C4:8F:6F:96:AC:49:33:03:34:F5:58:11:87
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0185720C4EC3F2EC4C5374756B0A14E17AC8
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/UABeQg_WUcSPb5asSTMDNPVYEYc.roa
Signing time: Mon 02 Jan 2023 10:34:47 +0000
ROA not before: Mon 02 Jan 2023 10:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207274
IP address blocks: 185.225.204.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Mar 2023 06:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:4e:c3:f2:ec:4c:53:74:75:6b:0a:14:e1:7a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50005e420fd651c48f6f96ac49330334f5581187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:c4:4d:8d:69:cb:9a:6e:38:f4:b2:15:57:
8e:45:c4:93:92:13:c9:37:b8:89:d1:5d:11:0f:46:
3e:13:b7:84:f1:a9:1c:ef:78:7c:a5:c4:6d:98:e6:
ae:03:06:59:cc:48:d6:90:30:d2:13:5c:96:b3:fa:
3d:12:4e:3e:07:7c:21:e6:e9:af:07:08:0e:53:9d:
b5:e3:21:5f:71:2f:40:bf:d7:a9:09:af:c4:77:c5:
0f:07:f9:ca:46:1d:fe:72:91:2f:dc:a2:a8:0e:60:
b5:b8:92:be:89:4e:63:d3:fa:62:e7:c8:84:1e:b1:
e2:fc:4f:d6:ff:42:b7:55:6d:fb:cd:7c:00:6e:06:
d5:2c:15:49:86:4d:3e:bb:41:fb:01:8d:8e:ae:e2:
4c:62:8a:0f:8b:f4:ec:b7:57:f4:4d:9c:0d:cb:11:
2f:23:3a:fd:b2:2b:e1:4b:f7:c6:cb:40:15:3b:4d:
42:93:ce:c0:fd:b2:da:3f:4b:ee:92:7f:29:38:01:
5e:7e:54:ed:ad:3f:dc:37:af:84:a3:47:49:db:6d:
0d:0b:41:9c:58:9f:e5:18:a2:69:b2:47:8e:7d:40:
96:b1:0e:c7:d3:b0:f7:c0:de:ba:e1:d3:4a:74:4b:
fb:d6:95:e5:ef:e3:c6:78:6c:21:9c:80:ed:ef:80:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:00:5E:42:0F:D6:51:C4:8F:6F:96:AC:49:33:03:34:F5:58:11:87
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/UABeQg_WUcSPb5asSTMDNPVYEYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.204.0/23
Signature Algorithm: sha256WithRSAEncryption
70:72:76:2b:aa:79:ff:36:7d:a8:5c:48:c4:f9:e2:2e:af:21:
1c:d6:6c:c4:6f:84:aa:b5:65:1a:c0:79:b2:75:5c:10:a9:e2:
01:26:b7:81:af:53:45:2b:af:ac:94:e2:8c:d3:87:d6:7e:b5:
be:9d:2f:27:0c:dc:67:72:71:71:1c:f5:30:87:65:a1:06:7a:
37:de:d5:4f:44:03:09:4f:5f:b5:84:ed:50:75:6e:c8:dd:5b:
73:6f:93:0b:52:c4:12:91:a0:12:6d:66:93:bf:60:df:dd:fa:
89:ab:90:51:65:6e:73:9c:af:a0:76:ea:bb:fb:e8:c1:3b:5d:
91:db:61:b4:e8:87:73:6c:31:bd:74:fb:ff:ea:e8:e0:f5:75:
72:45:af:04:d8:fd:29:01:97:1c:d5:e4:08:db:3c:7d:7c:df:
15:04:03:02:13:2f:42:7a:cf:0d:88:1b:55:e9:d5:e8:de:da:
be:bb:3c:d2:cd:cc:af:f5:dd:6b:48:09:30:8a:31:14:e5:cb:
24:ff:90:45:91:42:7e:3b:fc:8b:45:90:bc:a5:5d:8a:f2:71:
5c:ab:05:51:51:28:fd:04:41:7f:1b:3b:ac:b8:a3:4d:73:df:
dc:5b:5a:1a:98:58:a8:58:4f:b4:41:f0:d4:0f:58:c7:ec:91:
26:0e:b1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:36 2024 by rpki-client on console-ams.rpki-client.org