Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/UC5tJUOKBCbH2tQYVGyF-7pMyvg.roa
File: UC5tJUOKBCbH2tQYVGyF-7pMyvg.roa (raw, json)
Hash identifier: 0T+SsplkJ9Gz117V6/pAWvPJQgq5iWTi/BNM8uUQLBI=
Subject key identifier: 50:2E:6D:25:43:8A:04:26:C7:DA:D4:18:54:6C:85:FB:BA:4C:CA:F8
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 0186266EEE7326D32E210C950EA681CA907F
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/UC5tJUOKBCbH2tQYVGyF-7pMyvg.roa
Signing time: Mon 06 Feb 2023 11:14:09 +0000
ROA not before: Mon 06 Feb 2023 11:14:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204266
IP address blocks: 37.209.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:6e:ee:73:26:d3:2e:21:0c:95:0e:a6:81:ca:90:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Feb 6 11:14:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=502e6d25438a0426c7dad418546c85fbba4ccaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:60:15:29:d2:d8:e4:85:52:8f:38:07:73:
cc:cb:2e:68:48:dd:45:1c:a8:13:45:47:07:52:ff:
48:12:de:1b:64:10:f2:56:39:e4:6f:8c:71:dd:23:
d4:35:12:4a:40:fc:aa:15:fe:45:9a:33:cf:6e:2b:
0f:72:21:c2:51:36:2b:3e:c1:5a:0a:50:f1:fd:84:
3b:f3:6f:64:77:89:83:78:68:81:41:bb:a4:2e:b7:
dc:fc:e3:38:ce:58:77:0b:4b:31:b9:cd:7b:86:57:
79:c2:54:a2:0a:65:9c:68:3d:f6:08:a5:da:62:07:
2f:be:aa:3e:bf:5f:e1:55:0a:9f:42:1f:5c:c3:f0:
49:5e:09:fa:4f:39:6b:a5:6e:c8:71:4a:dc:11:bd:
e6:a4:b1:35:60:64:e1:84:25:0d:1d:0f:f1:9b:51:
03:06:36:6c:e3:3f:f6:cb:72:56:bb:a5:c1:e8:87:
f9:31:81:52:7a:e2:2e:f8:e6:b9:a7:89:a4:f1:fe:
8f:c4:33:0c:db:7b:8f:5c:bd:ca:7e:5c:82:a4:98:
fe:02:4a:73:2e:73:a2:5a:dd:26:f1:c8:42:be:a5:
e3:c2:96:76:6a:2e:8d:d6:35:08:47:f4:8d:10:72:
8b:57:95:5d:ea:d6:20:fa:76:18:20:79:4b:b2:6c:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2E:6D:25:43:8A:04:26:C7:DA:D4:18:54:6C:85:FB:BA:4C:CA:F8
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/UC5tJUOKBCbH2tQYVGyF-7pMyvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.174.0/24
Signature Algorithm: sha256WithRSAEncryption
99:88:b7:16:84:2b:ed:12:f6:74:2d:66:8d:a5:d0:ef:a4:28:
83:c4:bc:5f:bd:89:f3:72:dc:8e:d2:51:3c:c9:39:d4:b3:55:
96:ed:87:fd:8d:17:d4:4e:5b:d1:21:ff:bf:fd:f1:05:c1:1e:
89:6e:8d:c4:42:47:f1:5a:01:9f:0f:34:a3:66:7f:60:f3:b5:
f1:0f:f7:00:b1:fd:b8:7a:0f:47:02:01:58:c6:ca:d9:70:3c:
2a:b7:db:75:db:87:9a:24:af:3f:67:55:e6:12:53:2c:c8:41:
07:73:4b:a3:aa:3f:48:b1:3c:67:a6:df:78:16:30:b9:87:70:
ac:63:cf:15:49:65:eb:9c:cd:69:43:f2:9f:f0:3b:da:69:27:
d1:57:a3:61:3f:f1:b3:3b:0a:15:e5:bd:a5:0e:cc:25:32:5c:
51:72:5c:3f:4f:da:e9:64:b3:71:be:88:f9:f6:61:3d:fa:73:
33:cd:bd:67:9a:11:a4:2d:ca:c9:10:99:11:d4:35:fb:77:bc:
96:a3:c7:a9:ab:f1:12:ed:6e:dc:28:ac:45:f5:5a:06:20:6a:
c8:f1:23:4c:9b:17:e6:76:d1:ba:c3:a0:7b:5f:35:5b:8d:bd:
8b:0e:38:0e:aa:0b:5b:b6:1c:dc:7e:7d:50:32:1b:cc:22:34:
59:73:92:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:18 2024 by rpki-client on console-fra.rpki-client.org