Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/UxmBe3mcD-ItePg4As9qgern1Uk.roa
File: UxmBe3mcD-ItePg4As9qgern1Uk.roa (raw, json)
Hash identifier: nobGt74uDV1SgM1zr6qxIekB+MlgtUNKeTcjQXdIDTs=
Subject key identifier: 53:19:81:7B:79:9C:0F:E2:2D:78:F8:38:02:CF:6A:81:EA:E7:D5:49
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 0187A45B54FE594B2A80CCA5AC82102411D8
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/UxmBe3mcD-ItePg4As9qgern1Uk.roa
Signing time: Fri 21 Apr 2023 15:07:41 +0000
ROA not before: Fri 21 Apr 2023 15:07:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 185.192.21.0/24 maxlen: 24
185.192.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Aug 2023 05:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:5b:54:fe:59:4b:2a:80:cc:a5:ac:82:10:24:11:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Apr 21 15:07:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5319817b799c0fe22d78f83802cf6a81eae7d549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:06:77:5f:45:fc:e3:ce:c3:b5:9f:b0:68:2b:
f3:88:c9:c4:e7:83:9c:3f:7a:02:0c:97:0c:e0:45:
06:3d:81:54:49:1b:43:df:93:42:37:b3:34:3d:f9:
8c:45:e7:dc:98:eb:ab:6d:67:06:8c:ba:72:e4:02:
81:67:95:6e:05:b1:e6:99:9b:1f:68:5d:3b:bd:3b:
3b:68:d7:c6:56:19:a8:aa:58:c6:df:ba:32:0e:e8:
6c:f0:a9:73:7e:9a:4e:27:f5:1a:da:03:41:17:4c:
01:c0:8c:ab:91:87:94:0c:18:30:59:ce:d5:e4:89:
23:65:7b:4b:80:d2:de:b3:7e:20:ca:ca:1a:ec:68:
a7:22:8f:11:94:f5:5a:61:d0:61:61:50:91:6e:e5:
c8:4a:ad:16:d0:bf:3f:47:f3:4a:17:4c:72:33:0e:
9c:0b:57:74:59:e0:da:d2:23:76:df:d2:99:ca:ec:
39:74:b8:01:3f:f2:fe:09:b7:f3:18:d1:39:81:37:
34:33:d4:9c:9b:e2:48:cf:3e:98:8c:63:53:a6:fb:
8f:19:88:b0:d0:96:8f:d0:0b:92:d6:b9:d1:7e:ad:
91:b7:19:be:79:49:81:52:92:e3:bc:05:20:3e:88:
0a:4c:8b:5e:c4:55:cc:21:42:e3:03:2a:cd:74:7f:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:19:81:7B:79:9C:0F:E2:2D:78:F8:38:02:CF:6A:81:EA:E7:D5:49
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/UxmBe3mcD-ItePg4As9qgern1Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.20.0/23
Signature Algorithm: sha256WithRSAEncryption
74:cd:91:41:7b:6f:c0:f2:21:b7:d5:8f:0e:d7:6d:af:10:a7:
cb:2a:b6:c7:5b:96:2e:46:7e:10:3d:dd:d5:44:83:bc:03:e2:
95:09:0e:29:7e:05:9c:b1:49:e0:24:3f:68:de:1b:8d:66:05:
fb:77:3b:dd:a3:37:69:56:02:ca:9c:73:6f:6d:5d:35:54:ba:
40:14:e5:91:f8:43:77:80:5c:5d:df:98:ce:ab:cd:ea:25:33:
77:df:3f:8c:05:af:7b:ba:55:ef:4c:e4:ae:a6:43:84:84:5f:
9e:7c:3f:ec:1d:7f:90:99:a4:a6:e6:e8:da:3e:8e:d9:45:0e:
92:55:de:83:96:2f:7a:6d:24:d4:78:33:96:21:60:70:dc:6c:
76:ad:c6:8b:0b:ec:90:b6:b8:6c:04:fd:35:70:0d:00:29:29:
cf:9c:0f:4f:55:a9:b0:90:63:6a:1f:fd:b8:6b:0c:de:b5:7d:
df:af:cf:64:2f:e7:1f:11:77:64:d5:84:47:df:74:4f:0a:53:
bd:3c:ad:75:12:7a:44:f5:57:f1:af:f5:58:fe:ee:2c:30:d4:
eb:ec:a5:36:4f:be:2b:27:5a:00:d2:38:6c:cc:a3:ce:7d:0e:
51:fb:67:51:b8:69:b8:a0:32:85:6b:e4:87:e5:be:26:ab:ac:
e5:ec:a6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:11 2024 by rpki-client on console-ams.rpki-client.org