Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UlUBHaeJq6W4F4bWB7d-IYQ1vmI.roa
File: UlUBHaeJq6W4F4bWB7d-IYQ1vmI.roa (raw, json)
Hash identifier: rxrNZPkPAsy6BzhNUaPnejvcA6d4YQJYvBaDrEX9vv0=
Subject key identifier: 52:55:01:1D:A7:89:AB:A5:B8:17:86:D6:07:B7:7E:21:84:35:BE:62
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01857102FCD59D6D51E940A843EAEB9C7A05
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UlUBHaeJq6W4F4bWB7d-IYQ1vmI.roa
Signing time: Mon 02 Jan 2023 05:44:59 +0000
ROA not before: Mon 02 Jan 2023 05:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9312
IP address blocks: 194.242.2.0/24 maxlen: 24
193.19.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:fc:d5:9d:6d:51:e9:40:a8:43:ea:eb:9c:7a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5255011da789aba5b81786d607b77e218435be62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:4f:2f:2c:a7:1c:e7:58:64:3f:35:50:7a:
48:89:8c:ec:c9:b3:a4:40:03:45:c4:5a:2a:de:50:
6a:c8:f4:63:7c:13:15:f9:a2:22:4b:0d:d7:d6:ac:
f7:f7:c6:8e:33:6b:ec:a7:70:c1:c2:0c:f7:9c:43:
1c:0d:f0:cf:ff:66:93:0b:c8:1f:3a:d3:21:3c:a9:
aa:87:f5:9d:5d:bb:9c:93:21:7a:c5:ed:41:8e:ce:
eb:91:10:56:17:ce:6c:cd:c7:e0:27:8b:24:4e:45:
e0:e4:1b:fb:f7:23:aa:c2:11:c5:9f:99:37:ff:13:
88:56:3e:6f:ae:49:07:44:a6:d1:ce:38:e7:41:a2:
09:5a:7b:d7:f0:27:a7:07:04:da:f2:cc:58:10:b5:
71:26:2f:3d:6a:82:e9:9f:9f:bb:98:8d:29:0a:b4:
29:32:aa:d2:f5:31:60:cc:80:fd:98:27:7b:ac:ce:
6b:a8:2a:eb:6e:5a:bf:95:cd:b8:84:5e:77:93:ea:
e9:07:67:10:ba:22:ed:00:49:ef:44:ef:e3:a8:33:
24:56:44:2d:e1:04:98:40:ad:c7:2d:e8:fa:60:4c:
b7:cc:c2:61:e8:7b:28:84:d3:9a:c1:e3:e4:a2:8b:
30:58:7b:65:df:04:25:53:01:a4:2a:6b:dd:7c:07:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:55:01:1D:A7:89:AB:A5:B8:17:86:D6:07:B7:7E:21:84:35:BE:62
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UlUBHaeJq6W4F4bWB7d-IYQ1vmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.108.0/24
194.242.2.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ae:de:a8:16:b9:89:ff:2c:51:ba:bf:00:63:43:c7:df:06:
d1:dd:87:4d:fc:47:6b:92:ed:b7:de:81:6d:f5:1d:ae:9b:86:
47:08:6f:99:05:69:a2:85:e3:e2:34:4a:ec:89:45:b0:9f:64:
df:fe:66:72:77:10:34:4a:ba:32:86:bb:83:7f:12:ad:1e:87:
a4:2a:0f:b7:b0:d6:8c:03:0a:ff:26:73:19:3e:c8:d9:73:22:
f3:12:8c:ce:dd:da:bb:59:cd:2d:ef:66:bc:69:09:18:da:0f:
e6:48:4f:be:e0:53:72:83:b4:60:3f:01:c8:04:11:3d:85:bb:
f8:d1:4e:69:eb:67:47:f7:28:56:d6:10:cd:2d:a0:be:69:29:
b2:c3:e1:64:0b:9b:30:ee:e4:af:45:f7:8b:32:8d:bc:c4:24:
79:da:47:8e:27:c5:40:11:24:db:6e:e0:78:b4:c2:e7:23:0a:
6b:48:36:cc:67:d9:72:5b:9f:33:13:e0:61:fe:88:06:af:64:
7c:bf:56:dd:2e:26:52:a8:d5:0f:94:ec:fb:2d:22:79:70:f3:
77:13:44:11:67:4d:1c:93:ee:58:c2:ed:40:36:b3:5e:48:ee:
7f:de:3c:f2:b0:8d:30:78:33:43:c9:47:22:a1:65:5d:8e:ae:
93:8c:c4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:18 2024 by rpki-client on console-ams.rpki-client.org