Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/uLhuweMXaUGY6Pj4e9Gyg9ZTqYw.roa
File: uLhuweMXaUGY6Pj4e9Gyg9ZTqYw.roa (raw, json)
Hash identifier: ZiIMG+Sz3L+2TZx2wJSXpJsoDBm26B4vwyAhsF6acPA=
Subject key identifier: B8:B8:6E:C1:E3:17:69:41:98:E8:F8:F8:7B:D1:B2:83:D6:53:A9:8C
Certificate issuer: /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial: 018CC3B7468EEFD18BDBDD6AED7E3E16579C
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/uLhuweMXaUGY6Pj4e9Gyg9ZTqYw.roa
Signing time: Mon 01 Jan 2024 06:30:17 +0000
ROA not before: Mon 01 Jan 2024 06:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 195.5.104.0/24 maxlen: 24
194.176.117.0/24 maxlen: 24
2a13:14c0::/32 maxlen: 48
2a13:14c1::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 Feb 2024 12:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:46:8e:ef:d1:8b:db:dd:6a:ed:7e:3e:16:57:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Validity
Not Before: Jan 1 06:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8b86ec1e317694198e8f8f87bd1b283d653a98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:f4:55:16:b0:48:90:35:f7:cc:06:fb:6b:
0d:20:13:27:69:99:a7:18:34:08:3f:ee:88:ec:cb:
24:64:9b:af:0a:0a:9b:ca:46:7b:ff:f5:79:5f:c8:
6c:f4:57:4b:20:1c:da:24:2a:59:6a:27:5b:81:e6:
69:85:34:09:08:0e:59:f2:05:05:24:42:d3:13:8b:
ec:d1:50:75:be:fe:6e:0e:9e:63:3a:39:d0:32:57:
25:a3:16:7b:fb:36:d9:1e:21:c6:38:ee:b4:b3:31:
97:fa:4a:38:89:fe:ec:c7:02:7e:2c:18:fd:a3:eb:
9f:87:4c:ea:e0:bf:03:b4:9c:85:df:35:38:e8:16:
a6:34:3e:db:08:8c:19:23:7a:f8:f4:89:a1:d8:56:
44:e3:67:a4:75:8b:e3:59:eb:e9:2a:3c:67:90:d4:
da:42:d8:88:e9:6f:2c:ce:c3:ee:70:70:cf:af:a4:
85:1f:74:5f:dd:c8:fa:f4:df:d9:c5:4b:6a:a1:27:
7f:9f:a0:44:58:3d:5c:04:45:29:ba:e8:24:9c:eb:
71:8f:ba:a9:85:ad:77:ef:5f:c2:fb:6c:8b:10:b1:
68:6e:65:ea:66:52:1e:bb:9f:8d:e1:6a:83:bd:d6:
20:c3:75:a6:c9:99:c9:e7:92:96:60:12:59:91:04:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B8:6E:C1:E3:17:69:41:98:E8:F8:F8:7B:D1:B2:83:D6:53:A9:8C
X509v3 Authority Key Identifier:
keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/uLhuweMXaUGY6Pj4e9Gyg9ZTqYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.117.0/24
195.5.104.0/24
IPv6:
2a13:14c0::/31
Signature Algorithm: sha256WithRSAEncryption
9b:58:f5:c4:02:46:c0:0c:c3:0d:55:da:b2:31:f0:8e:85:4b:
60:bb:ae:2f:61:d9:a6:59:51:bd:e0:3b:f7:c9:45:d9:00:7e:
db:80:20:9f:2e:20:f4:37:0e:3d:1d:de:f9:20:24:e9:2c:98:
35:5b:17:38:b7:b5:7c:89:18:14:aa:67:c5:a4:46:3a:0a:7e:
27:f9:dc:e6:93:6a:0f:51:18:8b:81:87:c1:de:0c:1f:20:17:
56:22:47:ce:7c:64:30:54:be:03:72:bb:b3:9a:03:53:d9:ae:
c5:eb:3e:4f:3e:1f:2a:42:0f:34:3b:5b:3c:2b:28:55:89:b9:
71:7f:10:cf:89:62:dc:73:43:42:cb:c4:3e:24:8a:e9:7c:47:
da:44:16:ca:f2:55:c1:0f:1b:43:95:7b:5e:dd:97:91:cf:8b:
52:c8:d1:c7:fd:b3:66:1a:de:71:09:21:3c:11:0b:fc:32:50:
4e:fe:8e:df:91:6b:5e:b8:a5:21:56:34:f4:20:a2:ed:eb:37:
42:43:20:c1:01:8a:db:c2:f5:07:d4:9f:58:c8:cd:23:90:05:
66:4d:68:97:de:82:0a:0a:7c:03:69:3d:9f:4e:c2:a1:2c:0b:
33:45:6b:12:59:b9:38:28:8f:7c:02:af:65:d6:24:e1:30:37:
6f:fc:1d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:00 2024 by rpki-client on console-fra.rpki-client.org