Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/U_XnRrW9oXqQRqgMHFn3Qp4FsL8.roa
File: U_XnRrW9oXqQRqgMHFn3Qp4FsL8.roa (raw, json)
Hash identifier: /6E9827tOLvaLd8wS7d8gI5RC8nyjMhqrL3Qr6V/4lo=
Subject key identifier: 53:F5:E7:46:B5:BD:A1:7A:90:46:A8:0C:1C:59:F7:42:9E:05:B0:BF
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 018CCA29B908DB3A55157771CA944B745829
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/U_XnRrW9oXqQRqgMHFn3Qp4FsL8.roa
Signing time: Tue 02 Jan 2024 12:33:01 +0000
ROA not before: Tue 02 Jan 2024 12:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15731
IP address blocks: 195.14.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 20:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:b9:08:db:3a:55:15:77:71:ca:94:4b:74:58:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 2 12:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53f5e746b5bda17a9046a80c1c59f7429e05b0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:70:13:0d:d2:7d:c8:39:a7:ac:03:1b:8c:
58:50:fd:26:c3:71:f2:23:70:13:e5:9b:e2:17:ae:
73:8a:f8:29:45:b9:43:68:a2:44:12:53:78:ff:8d:
65:bb:f6:b8:dc:cc:82:81:40:99:40:ba:f9:f9:3e:
7f:2d:44:ab:36:36:5a:e8:07:78:08:8e:c4:5e:19:
92:84:d3:2b:dc:86:71:d2:57:78:2a:f3:1d:b8:3e:
3b:c6:7a:f2:95:06:73:ac:48:78:eb:61:7b:ed:2e:
0a:57:d3:3b:4d:94:41:bb:a8:d1:fb:d1:e5:02:e1:
c0:b9:72:c9:81:0f:d2:6f:b8:ce:6d:f2:70:79:2e:
fa:63:4a:fa:0a:82:49:50:45:c2:68:f1:88:5c:84:
90:f6:cd:1c:59:b8:c4:fc:36:27:1f:a7:7a:15:9a:
e5:24:b0:1f:f1:8e:73:82:f5:b6:f0:35:96:da:44:
78:14:8f:45:9c:da:79:d6:9b:52:19:f5:4d:e8:77:
ce:56:27:63:43:c8:fc:23:d4:fc:90:8d:4a:94:f3:
38:e7:21:88:24:94:87:cf:91:2f:db:ac:98:64:de:
02:d4:24:53:0d:0a:2d:15:06:1d:4f:d7:d2:5d:58:
a8:09:4a:6d:2d:cb:10:0d:dd:80:a5:29:a8:e4:28:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F5:E7:46:B5:BD:A1:7A:90:46:A8:0C:1C:59:F7:42:9E:05:B0:BF
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/U_XnRrW9oXqQRqgMHFn3Qp4FsL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.105.0/24
Signature Algorithm: sha256WithRSAEncryption
05:cc:35:4f:f9:24:76:a1:41:af:4c:b7:cc:26:1b:f5:e7:80:
b8:fc:7c:b5:82:f0:c5:09:a5:ea:4b:c4:01:6e:c5:ec:69:f7:
e6:cb:91:36:95:01:11:69:6c:19:51:11:1a:b8:a2:89:79:03:
1c:42:0e:85:6a:f5:d5:b0:28:f8:ed:c6:59:0f:21:78:25:46:
fa:3c:20:5d:7d:3e:1f:ec:5e:55:6e:2c:8f:f5:62:02:a2:74:
00:f5:e7:57:e1:9c:12:92:d7:bb:93:7e:8a:05:a7:f8:b3:e5:
e8:b2:16:84:d3:72:e9:5c:69:a3:2f:a0:6e:35:a7:03:a5:ae:
62:f8:f0:5f:2c:a5:ee:87:ea:75:5e:e0:2a:c4:5d:19:f4:84:
62:29:e4:7a:a1:d6:cc:d9:46:7b:71:85:ef:04:57:5b:82:68:
fa:92:2b:83:68:2e:d9:73:15:a4:6b:f1:59:43:ef:d2:6d:4f:
38:29:e6:22:d2:a6:bc:12:c9:d5:46:12:2e:3d:1c:d3:5f:ce:
8e:dc:2a:fc:3d:3f:df:57:35:d0:d6:a7:11:1d:17:a8:85:b8:
71:0e:8c:3e:2c:91:04:a1:64:68:d0:68:3a:c5:1b:02:78:1e:
2f:47:a8:9a:19:24:4a:02:f6:93:96:b0:16:ff:cd:2f:19:18:
75:60:00:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:47 2024 by rpki-client on console-fra.rpki-client.org