Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ulRQIKaWxHs1gv1yi2gStw02zIA.roa
File: ulRQIKaWxHs1gv1yi2gStw02zIA.roa (raw, json)
Hash identifier: 80bS/vek0kgxy9DXFdCbynnyDooDnmnbvCXaI9uZ/4Y=
Subject key identifier: BA:54:50:20:A6:96:C4:7B:35:82:FD:72:8B:68:12:B7:0D:36:CC:80
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737ADC4D37AC8BB8E7096C6A1FD2A654
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ulRQIKaWxHs1gv1yi2gStw02zIA.roa
Signing time: Mon 02 Jan 2023 17:15:09 +0000
ROA not before: Mon 02 Jan 2023 17:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210225
IP address blocks: 193.32.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:dc:4d:37:ac:8b:b8:e7:09:6c:6a:1f:d2:a6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba545020a696c47b3582fd728b6812b70d36cc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:59:5e:d2:81:93:61:f7:88:39:5d:07:87:
0a:4f:a5:df:c6:ae:3b:4c:74:29:94:28:fa:bb:18:
7f:69:dc:7a:3f:76:83:01:2d:57:18:25:3b:bd:46:
05:6c:d9:15:28:4a:ef:9e:11:21:c1:5e:39:ee:fe:
6d:a0:ad:fe:48:23:f2:bb:cd:4c:61:c3:e8:a6:e3:
63:55:06:2e:e5:79:ae:d3:1e:47:8b:53:1d:ea:8b:
e9:0d:67:79:ed:7f:ac:5c:22:52:fc:3d:54:53:59:
4d:ca:4f:47:4c:05:10:d9:3b:08:c9:70:3c:66:87:
74:db:38:26:4a:eb:97:21:71:b8:1b:19:23:b8:d7:
52:7b:07:84:27:b7:9a:9e:ad:df:72:21:7a:f0:01:
8c:38:a1:fb:07:b7:3f:af:52:97:19:4c:af:8e:bc:
57:a2:50:af:59:f2:91:50:72:f9:14:d7:aa:dd:b7:
87:55:8a:52:eb:48:dd:88:b1:ff:8c:2c:8c:ee:7a:
b8:77:f5:aa:15:75:d4:b8:51:cf:f1:d6:ed:93:18:
3f:f2:af:b8:12:dd:ca:78:59:54:04:c4:69:53:02:
fa:10:02:e0:cc:10:a9:66:08:b0:dc:9d:29:c4:51:
dd:b2:5d:32:7a:b9:66:2f:92:17:f6:48:c4:17:25:
ee:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:54:50:20:A6:96:C4:7B:35:82:FD:72:8B:68:12:B7:0D:36:CC:80
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ulRQIKaWxHs1gv1yi2gStw02zIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.236.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:22:5c:de:e2:09:42:8a:76:29:42:d1:ff:13:8a:b4:89:7a:
cf:8d:03:9b:eb:6b:e9:a4:82:84:93:2f:37:2a:04:6b:01:0f:
0d:c0:97:bb:f9:53:eb:1a:67:a5:b3:3f:0a:7f:af:9d:a0:90:
25:2e:b6:3b:07:6a:fa:73:70:a1:ba:63:96:25:7c:28:58:3d:
9a:55:18:8c:d7:16:ce:6c:05:a1:79:f9:af:49:5d:34:48:61:
a1:77:0d:c2:5f:d7:e2:c6:9b:24:81:6c:dc:fc:b5:22:61:09:
80:c7:af:14:fe:ba:e1:7b:6e:1e:e9:42:99:2f:df:d5:40:61:
23:9b:34:dd:fa:c3:fe:96:b1:ed:f1:96:17:eb:aa:3b:e0:84:
04:c0:28:06:48:b3:b5:9d:1b:b5:be:b0:46:3d:97:89:56:69:
9c:25:ef:b6:37:a7:64:f3:f7:ff:de:de:17:26:e9:13:4e:0e:
a2:43:fa:fc:83:5f:f4:b3:57:d7:6c:45:28:fe:b0:80:27:6a:
53:38:a1:67:1e:39:4c:76:36:fd:75:47:dc:6f:ee:59:3d:a2:
cd:57:cf:a0:fe:30:a1:d7:3e:5c:62:69:60:72:7b:2c:2c:74:
c4:1e:16:45:ae:e9:e2:2f:7b:5c:7d:88:3f:b4:13:51:ed:6b:
3d:2d:0d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org