Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/UDx-NBTBCXWCQCqnJdRzkoOKmzs.roa
File: UDx-NBTBCXWCQCqnJdRzkoOKmzs.roa (raw, json)
Hash identifier: 7uVR7a1rAJY8cYI8FjGd9QedWCHOfGybxNnz6yel03o=
Subject key identifier: 50:3C:7E:34:14:C1:09:75:82:40:2A:A7:25:D4:73:92:83:8A:9B:3B
Certificate issuer: /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial: 018572CCB18FDDD214BA2C31411BE2FCDA49
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/UDx-NBTBCXWCQCqnJdRzkoOKmzs.roa
Signing time: Mon 02 Jan 2023 14:04:55 +0000
ROA not before: Mon 02 Jan 2023 14:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.212.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:b1:8f:dd:d2:14:ba:2c:31:41:1b:e2:fc:da:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Validity
Not Before: Jan 2 14:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=503c7e3414c1097582402aa725d47392838a9b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:91:cf:50:f4:23:9f:56:dc:76:e8:4b:c9:b2:
bf:83:3b:ae:d8:31:34:6e:8c:2e:6f:5b:3a:65:8d:
46:cf:3c:db:04:98:c5:d6:b9:2c:27:85:b5:f8:3b:
12:2f:ae:f5:84:ff:66:12:dd:c9:75:94:14:4b:4e:
33:29:89:a4:92:df:10:63:fe:67:69:f7:cd:ea:07:
11:4a:3f:ac:b2:c2:76:56:25:6e:e3:ff:8a:fd:d2:
c5:1c:4f:d7:f6:94:f3:eb:43:b5:01:a6:1e:b6:ea:
8f:a0:26:db:ed:b3:78:65:58:18:a7:f9:41:ab:6b:
0d:fc:22:76:f6:75:e5:f4:a7:03:d1:07:d0:e4:0e:
59:e1:5e:46:cc:fb:de:55:44:d9:f4:50:49:3b:64:
2b:ef:b5:bc:28:78:6f:27:c6:4b:3b:34:d8:6e:16:
9b:31:b1:d6:bc:f4:a4:91:bc:9e:1a:4a:89:98:00:
5e:cb:a1:a9:d9:5d:0e:d3:e3:03:69:95:2b:7b:c3:
c3:97:82:07:39:7a:a6:d5:38:45:53:1f:0f:d9:e2:
9b:d7:a6:2d:4b:c5:d0:89:81:34:69:c1:1d:b6:73:
a7:e2:67:60:24:d5:e0:ac:38:95:2d:65:bb:7a:a0:
f1:b1:de:7a:cf:e5:89:5a:48:2c:59:7e:b4:6c:ae:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3C:7E:34:14:C1:09:75:82:40:2A:A7:25:D4:73:92:83:8A:9B:3B
X509v3 Authority Key Identifier:
keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/UDx-NBTBCXWCQCqnJdRzkoOKmzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.105.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:9f:4a:db:4f:e5:5d:b0:ac:30:4e:c8:15:0c:31:a9:e0:8f:
d1:a1:bb:44:6c:9b:88:82:90:85:38:97:0a:d0:01:69:e2:4c:
5b:27:89:51:78:be:a4:43:3f:34:6b:73:4d:c8:75:13:b4:ee:
49:a5:a2:86:c7:8f:5b:88:5b:51:59:f7:29:86:28:13:cf:4f:
9c:04:d5:1b:d6:98:ca:cb:5a:fc:dc:08:b8:c4:a1:e9:6a:47:
2a:ce:2b:89:4e:3b:2d:54:99:41:43:b9:e4:30:54:1b:18:dc:
2f:af:86:69:d6:ed:12:63:23:65:a7:c1:15:40:3a:ea:0a:46:
bf:4d:55:80:d3:8e:62:d8:15:4b:83:40:51:53:ff:c3:fc:70:
7c:b7:ca:bb:3e:da:d9:4c:28:bf:2d:dd:81:c4:2c:3d:b2:3e:
87:4e:8a:b3:ea:06:ad:e4:c9:09:13:c1:6e:ad:cf:ba:4b:75:
c1:7f:45:b8:77:18:45:d6:e9:43:78:4f:34:29:ef:e0:d4:54:
f3:a8:ef:37:4d:e1:ea:0c:47:1b:00:ec:fd:1e:43:64:5e:56:
2a:35:a4:9c:eb:cc:2e:ee:69:37:f8:d1:99:30:af:16:d7:bd:
8f:62:40:a7:96:19:de:e8:ad:67:4b:88:12:e1:ef:67:2f:6c:
24:f9:3b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:06 2024 by rpki-client on console-ams.rpki-client.org