Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/uu3_bQmkETqPl1dGnMLJNuIsKNQ.roa
File: uu3_bQmkETqPl1dGnMLJNuIsKNQ.roa (raw, json)
Hash identifier: mHEa+VG/7pckIVj4PTzt6lb2vv+jfPIb9HRWvt1nVN4=
Subject key identifier: BA:ED:FF:6D:09:A4:11:3A:8F:97:57:46:9C:C2:C9:36:E2:2C:28:D4
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 018E840C099E1C8AA00441BE4FA6B3645D7F
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/uu3_bQmkETqPl1dGnMLJNuIsKNQ.roa
Signing time: Thu 28 Mar 2024 07:52:45 +0000
ROA not before: Thu 28 Mar 2024 07:52:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.113.66.0/23 maxlen: 24
185.194.204.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 14:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:0c:09:9e:1c:8a:a0:04:41:be:4f:a6:b3:64:5d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Mar 28 07:52:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=baedff6d09a4113a8f9757469cc2c936e22c28d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:f5:45:ef:15:39:07:b9:fe:79:fe:32:04:
cc:89:cd:5c:96:ad:f6:ae:3c:6d:dd:dd:af:d3:d0:
38:9b:47:a4:d5:df:26:ec:f8:c7:51:6f:bb:6e:1f:
98:5c:9a:ee:06:57:16:16:5f:fc:f9:f0:f3:81:39:
97:c3:6e:fa:a5:29:22:bb:7a:ad:8a:4f:14:cf:2a:
dc:3e:77:7d:bb:65:c0:94:1c:4a:bf:05:d4:06:67:
de:00:0d:61:52:b1:93:18:9a:ca:00:cc:b6:7e:5b:
c3:cc:29:cb:1e:fa:56:1f:83:ea:3a:e6:7e:c2:16:
34:f5:99:1b:58:60:e1:10:6f:14:d9:64:72:ec:36:
36:14:96:aa:94:86:7a:ec:9a:9f:1d:d0:16:21:de:
68:7a:ea:d6:6c:e3:14:63:96:bf:08:2b:9b:1c:49:
41:49:9e:92:88:3b:e5:da:19:b5:f2:fa:07:f2:c4:
73:1c:ae:e4:71:05:b5:49:2a:17:37:14:e3:1e:11:
16:e8:15:37:89:52:27:07:84:9c:ea:10:06:e4:ae:
7c:63:38:2e:e6:27:6b:a5:90:83:56:da:10:cf:e4:
49:60:5b:d2:53:70:3a:65:ae:78:6d:56:81:ed:52:
fc:19:be:9e:b5:aa:87:f5:1e:53:ee:06:2f:a7:bb:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:ED:FF:6D:09:A4:11:3A:8F:97:57:46:9C:C2:C9:36:E2:2C:28:D4
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/uu3_bQmkETqPl1dGnMLJNuIsKNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.66.0/23
185.194.204.0/23
Signature Algorithm: sha256WithRSAEncryption
77:d5:fe:fa:26:04:f4:51:68:0d:71:f6:48:65:7e:72:44:73:
e0:b0:1b:af:a8:c7:b2:d6:9e:e9:9f:38:da:2b:cd:08:c8:75:
df:29:76:b0:e1:e0:7b:60:30:a4:a6:b8:4d:a8:38:05:d8:9d:
b5:17:85:3c:b9:e1:88:73:36:07:be:9a:76:3e:1b:92:23:d3:
f7:b7:41:55:2a:09:20:27:81:0d:e0:6d:52:f7:75:da:57:c2:
d1:1d:2a:bb:54:52:f2:b7:3d:4f:b7:89:66:c8:f7:5d:24:5f:
b9:a8:d5:7d:72:b2:00:ac:af:bc:a9:72:66:c4:2e:5d:40:cf:
8d:ae:d6:0c:9d:29:2e:68:27:5e:e4:c8:db:6b:36:94:44:ef:
82:15:c7:19:99:81:f6:cb:5a:5e:0c:ce:48:e6:2a:30:83:e8:
ea:0c:70:7d:ec:0f:8f:58:14:fb:47:13:51:c7:29:49:97:52:
9a:bc:08:29:72:ba:a6:40:0e:3a:a4:a0:0a:4f:c3:41:e6:f9:
ce:fa:d1:c3:dd:21:32:3f:0e:8f:15:14:55:b3:ff:33:6d:5f:
c6:56:4a:14:49:2f:d5:fd:a7:f1:9c:92:4b:72:31:97:af:d8:
e7:a6:e6:c8:a5:46:9d:8a:82:84:77:c9:c2:f8:34:5d:44:38:
60:35:16:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:50 2024 by rpki-client on console-fra.rpki-client.org