Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/UDRJCLwy3H75-vDBMui07hfnbcA.roa
File: UDRJCLwy3H75-vDBMui07hfnbcA.roa (raw, json)
Hash identifier: Qk+9ihl2lDHeV5nwy2uIfptryToMGmCuizjzbnd5RWk=
Subject key identifier: 50:34:49:08:BC:32:DC:7E:F9:FA:F0:C1:32:E8:B4:EE:17:E7:6D:C0
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 01856FC268BB3CE36A38172FD040C0D0749D
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/UDRJCLwy3H75-vDBMui07hfnbcA.roa
Signing time: Sun 01 Jan 2023 23:54:49 +0000
ROA not before: Sun 01 Jan 2023 23:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47447
IP address blocks: 37.247.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:68:bb:3c:e3:6a:38:17:2f:d0:40:c0:d0:74:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jan 1 23:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50344908bc32dc7ef9faf0c132e8b4ee17e76dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:8d:82:46:31:19:e2:92:8f:72:67:8d:ab:
bb:3c:fa:33:97:e7:ee:dc:3a:58:5e:a0:ef:21:ef:
c3:87:6a:e0:c1:45:5a:c2:b1:71:32:7f:cf:d0:03:
2e:22:cc:41:21:c3:0f:f7:eb:12:22:c8:08:8b:96:
0a:cd:3d:b8:7e:0d:43:7a:58:6c:a8:e1:94:9a:3e:
c2:23:09:7f:2f:64:7d:14:49:e5:8c:05:06:ce:82:
a5:b6:ca:ba:ff:3f:c6:f3:7d:bc:32:68:66:a7:9b:
bf:70:8a:43:6d:b7:de:1b:cb:78:df:83:99:3c:ab:
72:bb:8f:6f:96:15:ef:7c:68:1e:fc:13:da:95:39:
51:e4:5e:87:9a:3b:f2:93:ec:24:d9:ae:08:09:f3:
e4:53:c7:3c:e9:ff:4c:a9:7c:7d:3c:3f:93:e9:30:
3a:f7:04:c2:94:4a:9e:22:53:52:8f:72:93:a8:8f:
f9:51:05:f1:5e:73:38:62:1c:ce:28:ca:26:76:04:
28:92:c2:1f:ba:2d:87:86:80:cc:47:ad:91:8d:31:
8c:6f:fc:c4:cb:a1:52:3c:64:a2:28:e2:aa:8b:ee:
40:49:a0:43:17:1f:5e:d1:89:3a:be:93:90:57:48:
dd:eb:c9:5a:f0:82:1b:3c:26:42:b1:8c:6d:27:fd:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:34:49:08:BC:32:DC:7E:F9:FA:F0:C1:32:E8:B4:EE:17:E7:6D:C0
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/UDRJCLwy3H75-vDBMui07hfnbcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.119.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:c6:4e:04:08:0a:7a:fb:26:2d:56:90:51:7d:15:3b:b0:dd:
1d:d9:63:5c:4f:c9:88:e2:0e:48:5f:ab:ab:dd:c5:b2:2b:42:
45:a8:45:60:d0:e3:dd:71:af:87:5e:1e:f3:0a:c8:aa:fd:08:
3d:3c:4c:b7:fb:da:9d:21:7f:97:60:bb:87:88:7d:8c:ad:51:
85:ec:a0:c0:dd:5d:85:60:39:c8:f0:74:37:2f:d3:c5:46:f6:
d0:88:04:b5:a9:e6:14:13:37:60:5a:5c:50:e0:be:c0:84:9a:
5d:ee:d5:be:86:b0:82:f2:b9:64:1d:8c:9e:1f:f2:bf:e7:51:
66:75:e8:e4:d8:e3:e9:f9:4d:b0:e3:a9:00:b0:4a:ac:7e:c0:
82:5c:07:74:e6:51:ea:48:bd:d8:1c:c4:53:33:54:8f:74:5f:
63:11:3d:18:96:7e:8c:b2:72:29:bd:fc:fb:2c:90:7a:2d:57:
62:24:05:d7:07:86:e6:90:e5:0b:a7:ce:0d:e0:93:4e:7a:d3:
ae:2b:7e:49:fa:fe:99:89:ce:51:24:47:de:be:4c:4b:5f:fc:
f9:52:77:19:d1:bd:af:5e:9d:dd:e7:7d:95:98:38:ed:7a:01:
bf:ec:78:86:eb:33:b2:ca:ba:f1:c2:79:3f:10:bc:d1:64:39:
c3:98:55:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:39 2024 by rpki-client on console-fra.rpki-client.org