Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/UGtzS6M2abIDi-ZgChF7YNhcro8.roa
File: UGtzS6M2abIDi-ZgChF7YNhcro8.roa (raw, json)
Hash identifier: 77JmHuPe6833gVDkc15VyfProzvEfPIMTh8SCNHpf0A=
Subject key identifier: 50:6B:73:4B:A3:36:69:B2:03:8B:E6:60:0A:11:7B:60:D8:5C:AE:8F
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018CC7277261BF2FC627F9B0E0EEC5A44665
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/UGtzS6M2abIDi-ZgChF7YNhcro8.roa
Signing time: Mon 01 Jan 2024 22:31:40 +0000
ROA not before: Mon 01 Jan 2024 22:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8790
IP address blocks: 194.85.173.0/24 maxlen: 24
194.85.172.0/24 maxlen: 24
194.85.172.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 30 Jan 2024 15:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:72:61:bf:2f:c6:27:f9:b0:e0:ee:c5:a4:46:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 22:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=506b734ba33669b2038be6600a117b60d85cae8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9e:df:ff:78:fa:76:d1:d9:0e:85:0a:17:b6:
9f:40:e1:e0:14:0d:2b:f4:44:f0:8f:63:52:49:fa:
38:5a:56:e0:6a:d0:3c:d7:c1:e4:3e:39:5a:c5:24:
de:e2:a0:d0:5e:aa:0b:18:6a:2c:60:ed:5f:3a:25:
c4:c1:1b:e0:a6:46:33:86:18:fc:c5:17:13:71:35:
4a:8c:e1:57:73:17:f0:7f:50:ef:35:05:ea:0a:42:
d9:83:c6:af:08:f9:13:cf:8e:9c:c1:3c:84:c8:3b:
19:4a:50:5c:d1:83:60:e2:c9:8a:a1:f6:9a:1c:e6:
7f:ad:9a:07:86:f1:44:ca:0d:8a:d5:a9:65:d1:11:
ba:cc:01:48:25:c4:77:75:d5:d5:81:11:bc:35:c3:
fc:fd:20:ce:a7:96:5c:1a:2b:5b:1c:f1:1e:07:59:
3b:83:02:9d:b1:33:74:ba:db:ad:0d:4d:0c:85:a1:
1b:ed:48:20:4f:81:a3:2a:fd:91:6b:91:06:44:10:
ef:01:ed:76:83:c3:46:25:f5:02:95:02:c0:6d:3a:
37:ab:8f:d1:c7:44:23:e5:8f:22:2f:01:4b:cf:c9:
7e:06:8f:8c:5d:18:9a:7a:01:7d:a7:46:e3:2b:ac:
a0:1f:f7:a7:89:ea:c7:45:38:54:2a:49:04:78:88:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6B:73:4B:A3:36:69:B2:03:8B:E6:60:0A:11:7B:60:D8:5C:AE:8F
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/UGtzS6M2abIDi-ZgChF7YNhcro8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.172.0/23
Signature Algorithm: sha256WithRSAEncryption
78:3e:41:32:ff:37:31:48:1e:7c:8c:f8:32:3c:0d:98:2c:12:
6b:14:b1:4a:c2:29:c2:19:ec:a1:1a:d6:46:66:44:79:ed:47:
e8:cb:69:88:c1:38:76:3b:ac:64:cb:2e:b9:1e:47:89:a1:eb:
fe:b5:89:bc:a9:a5:a7:6e:bb:9b:9f:3a:69:a2:a0:a2:8b:9d:
15:05:10:a9:36:b2:45:80:bd:8e:98:da:a6:f4:65:97:e7:d9:
35:6a:66:a0:7a:76:53:01:43:47:34:09:62:72:5c:54:1e:ee:
69:24:8b:73:66:8d:6b:58:9f:6d:b6:89:b8:ad:31:f9:53:7d:
ee:28:dd:c3:a2:e3:21:7b:75:be:1f:f0:7a:53:13:91:6b:49:
1f:b5:0b:03:bf:4b:61:6e:ad:f4:a9:96:9b:1b:10:e2:fc:94:
20:53:4a:f9:40:cc:01:d8:bc:f6:2e:13:e0:9a:9b:4e:bf:77:
67:3e:3e:65:c4:7d:a2:4f:37:79:18:de:61:18:ef:31:a4:5b:
d9:40:8a:e3:8d:eb:53:03:d3:95:8b:e2:ab:d9:7e:6c:8b:74:
72:fc:5e:fe:a9:fa:3e:3d:51:47:45:66:01:bf:05:6f:c3:c4:
68:b1:77:82:69:c3:3e:ea:85:11:80:c2:c4:64:fe:cf:9d:0b:
14:e0:ee:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org