Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/uDgNnEP61jm88cDuR4IsVNfBuGk.roa
File: uDgNnEP61jm88cDuR4IsVNfBuGk.roa (raw, json)
Hash identifier: NoAvy8OCrMVZ7tIJpXNgLAqeyBvIWNjymOiyixRX/oM=
Subject key identifier: B8:38:0D:9C:43:FA:D6:39:BC:F1:C0:EE:47:82:2C:54:D7:C1:B8:69
Certificate issuer: /CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Certificate serial: 0185711518DCF3AD319C730A29E85DA67BAB
Authority key identifier: 66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/uDgNnEP61jm88cDuR4IsVNfBuGk.roa
Signing time: Mon 02 Jan 2023 06:04:46 +0000
ROA not before: Mon 02 Jan 2023 06:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49875
IP address blocks: 193.104.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:18:dc:f3:ad:31:9c:73:0a:29:e8:5d:a6:7b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Validity
Not Before: Jan 2 06:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8380d9c43fad639bcf1c0ee47822c54d7c1b869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:20:ae:c2:c8:da:57:49:0c:c1:bb:8b:df:04:
13:7e:eb:39:90:83:81:91:0c:8d:b9:df:34:a9:f9:
5f:d8:22:72:3f:5b:cd:d0:95:dd:91:65:0c:2d:e9:
b9:d1:85:fd:cb:b3:79:24:3a:6b:de:48:20:a5:d4:
e1:71:e0:48:04:37:3a:82:87:5d:de:cd:f7:ed:60:
34:a9:a7:97:7d:16:20:ec:96:cc:b6:d6:68:ae:27:
d0:91:86:a7:00:4f:f8:e5:a5:b0:9c:0e:fd:37:4a:
be:de:94:fa:01:e7:3d:e2:5d:c8:a2:59:c4:09:e9:
5e:dc:97:86:c6:ef:78:35:64:43:1b:a7:34:8c:53:
21:c0:6b:4f:24:51:f9:56:85:54:24:67:28:54:77:
88:3f:85:1b:a5:fd:26:46:64:34:c5:02:28:48:e6:
25:df:e3:35:25:85:72:f2:d9:95:f5:36:58:d1:d8:
ed:e9:76:f1:25:1b:18:ef:a2:7f:75:5e:7f:a0:e7:
5a:aa:0e:a3:81:a3:ca:95:88:ba:de:10:57:57:9c:
17:c1:81:57:30:66:91:00:7a:84:99:06:bf:a8:5a:
fd:95:6a:fc:14:a8:8d:ad:b8:87:50:c0:bd:ff:bb:
bd:83:3b:13:db:6b:15:2b:31:8a:a9:34:53:ae:81:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:38:0D:9C:43:FA:D6:39:BC:F1:C0:EE:47:82:2C:54:D7:C1:B8:69
X509v3 Authority Key Identifier:
keyid:66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/uDgNnEP61jm88cDuR4IsVNfBuGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.13.0/24
Signature Algorithm: sha256WithRSAEncryption
90:96:89:24:f2:e6:31:fc:f2:0f:13:0b:7f:db:e6:93:97:6b:
82:54:51:63:05:19:b0:c2:2f:e2:db:d1:fb:43:e2:ac:1f:d3:
9c:0a:ba:2c:92:8e:86:4b:f8:a1:1d:03:d2:a7:7e:7f:92:17:
34:95:5a:87:19:84:a2:6c:be:3b:24:28:5d:0b:1d:b0:f1:71:
d5:3d:9f:62:85:87:88:dc:de:15:fc:bb:e9:d9:36:99:8c:c3:
1b:eb:6b:a2:03:b6:25:58:a8:99:d0:c2:4d:c7:28:d1:0d:fa:
06:3b:9d:f4:7f:0b:7a:8c:d7:4e:ab:11:ba:74:5d:37:24:84:
04:2d:81:22:af:e1:84:ef:ba:34:df:15:e4:1c:65:2b:32:90:
1c:59:2a:06:38:f2:88:5a:d9:90:b0:5c:6a:4f:c4:ba:98:e4:
e6:05:69:7d:97:4a:53:45:79:41:ba:bf:87:fd:bd:67:de:4d:
af:ae:2d:4b:2f:46:1c:b0:15:dc:c3:85:e0:df:43:90:4c:e6:
40:f1:69:89:d4:82:a6:de:68:1e:63:f9:5e:f9:71:ef:16:89:
9f:d4:b2:7e:78:4c:53:f6:03:be:50:61:b2:5b:26:2b:25:8b:
ce:4f:83:b9:8e:83:88:51:74:d6:e8:90:87:89:1d:9c:f9:63:
29:2d:5c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:46 2024 by rpki-client on console-ams.rpki-client.org