Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Ur-rgGdJmYwpB78W7H_HyboaS1M.roa
File: Ur-rgGdJmYwpB78W7H_HyboaS1M.roa (raw, json)
Hash identifier: Ua5SMMKlUDDWmsih5QrR9akiZ8c1FVav8bOgNWbt2JM=
Subject key identifier: 52:BF:AB:80:67:49:99:8C:29:07:BF:16:EC:7F:C7:C9:BA:1A:4B:53
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AED0E7546A79512358B878775614E
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Ur-rgGdJmYwpB78W7H_HyboaS1M.roa
Signing time: Sun 01 Jan 2023 11:15:10 +0000
ROA not before: Sun 01 Jan 2023 11:15:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57011
IP address blocks: 188.93.108.0/23 maxlen: 23
188.93.110.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jan 2023 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:ed:0e:75:46:a7:95:12:35:8b:87:87:75:61:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52bfab806749998c2907bf16ec7fc7c9ba1a4b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:45:38:b1:54:a5:8b:05:3d:69:f6:6c:4c:
a4:40:68:fb:9d:fe:2d:c0:b5:90:d9:34:20:ee:8d:
b6:f7:94:63:78:52:84:9a:32:c7:79:23:7c:60:ad:
a3:ff:fd:cf:12:ff:ec:95:32:9a:63:d8:f4:6e:15:
be:1e:8d:06:00:bb:3d:94:76:1e:ca:b1:fb:37:34:
80:5a:d8:a7:72:b2:37:f9:7f:d7:f5:a9:dc:dc:79:
bc:fa:93:be:e3:f6:ba:ae:9b:9c:42:3a:41:1c:a7:
e8:92:5b:3d:28:29:41:80:38:40:85:f1:1b:53:34:
d6:52:e8:d8:21:6f:84:fb:15:ee:d5:27:d3:4d:03:
68:dd:9e:c2:11:01:c9:b4:a3:c4:d6:ab:48:9c:9e:
4e:31:64:15:c8:71:d3:d7:2b:2f:e9:ff:66:9d:57:
e1:29:a5:d6:8d:5a:2a:08:1f:45:72:f8:77:53:a9:
34:4d:22:d7:87:12:f5:bf:5b:e3:41:d2:7d:95:f4:
8c:85:d4:21:02:0c:35:20:42:4c:6d:2a:85:6d:4a:
dc:f8:67:e7:33:1a:4c:26:90:c5:79:23:5b:b5:a9:
b2:6c:1e:bc:4d:c6:d6:2f:2e:6e:44:24:e1:14:4d:
53:c5:b1:ca:3e:78:7a:70:c9:55:fa:5b:8b:b1:ff:
8c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BF:AB:80:67:49:99:8C:29:07:BF:16:EC:7F:C7:C9:BA:1A:4B:53
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Ur-rgGdJmYwpB78W7H_HyboaS1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:b1:fd:31:a6:a8:a3:83:3c:f1:65:c7:ce:4d:7f:45:b0:f5:
d5:a4:31:97:8a:9a:51:af:1a:ec:a9:34:8d:ad:6c:c7:79:8a:
77:6e:79:c8:59:7f:42:44:03:de:a2:45:00:f5:f2:bf:fd:af:
3b:f7:04:7c:e3:14:72:53:7c:6c:85:20:cd:c9:2a:d1:f2:e6:
51:6f:65:10:89:13:d5:d7:8f:55:76:d9:27:2b:53:fb:32:e6:
41:55:2a:ab:eb:72:18:e8:da:f6:44:02:3e:d5:33:c0:18:80:
71:77:0c:ed:ef:cf:b4:f7:b5:dc:42:a5:0e:b1:73:75:9b:4a:
30:c9:9e:0a:37:84:74:62:20:5f:d5:47:76:e2:e9:3b:08:8d:
7b:0c:3d:f5:6a:91:ee:51:02:01:a8:4c:db:ce:d4:ad:a1:20:
be:3d:cd:33:32:cb:9b:ec:63:ab:0c:16:2a:59:59:10:2a:55:
fb:ef:4e:77:9e:ea:da:8a:af:15:5d:d4:06:d4:40:27:51:c0:
96:be:a4:5e:0f:39:a9:45:2b:8c:37:22:8a:4f:7b:9e:20:f4:
e8:a6:6e:5b:f8:35:7b:0d:b0:26:aa:e9:1f:1e:0d:fd:1d:0f:
07:69:26:a0:0a:43:13:98:87:85:75:66:13:8d:e3:af:f4:35:
2d:93:3f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org