Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/UZ3YVckUnTf2RuPqlQSLEQTPCgo.roa
File: UZ3YVckUnTf2RuPqlQSLEQTPCgo.roa (raw, json)
Hash identifier: +ECNmbbXXE9t99htid/Xfve2QRPqhKh4gKL7OxeeBag=
Subject key identifier: 51:9D:D8:55:C9:14:9D:37:F6:46:E3:EA:95:04:8B:11:04:CF:0A:0A
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 0191D52207324A92A5E2CF2008998B551455
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/UZ3YVckUnTf2RuPqlQSLEQTPCgo.roa
Signing time: Mon 09 Sep 2024 04:54:22 +0000
ROA not before: Mon 09 Sep 2024 04:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 193.178.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 16:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d5:22:07:32:4a:92:a5:e2:cf:20:08:99:8b:55:14:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Sep 9 04:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=519dd855c9149d37f646e3ea95048b1104cf0a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:b4:c8:bb:43:69:ff:37:fa:38:4c:78:a3:
4a:7f:c8:f0:fd:87:bb:07:c9:68:2a:f6:14:81:94:
dc:28:49:50:1f:09:fd:b7:66:63:2c:f1:04:e4:5e:
b5:96:4e:4c:cb:d7:ee:9d:b3:79:87:c1:84:c0:f0:
69:b5:7e:4b:46:65:2d:f9:01:4c:45:29:30:d3:11:
b1:72:56:b7:50:6c:0d:94:cb:e2:08:14:38:68:9e:
9f:38:74:25:51:80:1a:79:40:30:66:1b:2e:81:68:
6e:ab:14:6b:a9:04:7f:b7:af:8b:3c:ed:29:74:3a:
f9:85:05:99:e8:57:66:82:d3:9a:b9:08:61:f0:03:
a6:65:72:1e:b5:da:0c:ed:b7:18:00:c5:f2:0a:e5:
88:41:42:2a:25:9b:ef:81:b6:f1:98:e7:7c:34:30:
66:4a:ae:9e:9d:18:fd:b9:29:f1:21:44:ae:9f:e7:
10:92:b7:fb:b5:4e:44:2f:ac:b9:1e:57:a8:55:a2:
92:df:08:ef:17:4f:6e:42:83:6b:bb:28:e0:b8:02:
48:ab:0a:0a:b2:01:0b:f5:86:9f:64:88:37:39:24:
c8:fa:35:cc:c8:5d:61:be:53:c8:f7:f7:a1:fe:1f:
bd:4d:a1:a8:4d:46:9c:b1:79:cd:3a:c5:67:b4:84:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9D:D8:55:C9:14:9D:37:F6:46:E3:EA:95:04:8B:11:04:CF:0A:0A
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/UZ3YVckUnTf2RuPqlQSLEQTPCgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.226.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:a2:79:08:6c:5d:5f:89:5e:db:9e:fb:70:79:da:90:ec:5f:
90:5f:a3:a3:1a:41:c4:3a:dd:f2:69:f6:0b:8d:b7:ab:a6:61:
f0:5e:07:0d:22:dd:0c:aa:3f:77:ee:32:82:d6:22:99:d6:5e:
57:0c:e2:78:c7:20:18:1f:b1:59:d5:0d:b2:a8:8a:88:7d:38:
5c:d5:05:7b:dc:eb:6b:80:45:f6:2f:f8:7c:b6:e6:03:d8:f1:
1d:82:20:0c:d3:01:53:4c:2a:82:59:7c:63:f5:9d:b3:b8:c8:
fb:28:b2:78:0f:29:ab:73:86:27:2d:2f:57:40:24:05:08:43:
41:7e:7d:cf:89:75:22:16:39:3c:2a:0c:b8:67:22:40:75:cc:
5e:a9:22:3e:b6:86:cf:19:91:fa:eb:b9:6f:a2:f2:c5:4f:ec:
48:01:c8:d2:b3:91:db:57:68:92:44:51:95:44:df:0f:ba:00:
96:21:ba:85:e3:89:f2:a8:94:39:8a:20:6e:a2:10:d1:37:75:
8c:b5:f7:63:f8:30:e2:d4:a4:95:72:2a:d3:56:c3:97:c3:50:
08:3f:53:b4:9e:ca:ce:52:5e:c3:f9:78:2e:66:df:be:fe:e2:
a6:68:12:f7:3e:03:73:7f:cb:86:91:fc:d7:bd:36:79:98:9a:
6a:ea:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 17:49:42 2024 by rpki-client on console-fra.rpki-client.org