Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UHWVsSeZcJ7R_-PnTJL7_vsWKu8.roa
File: UHWVsSeZcJ7R_-PnTJL7_vsWKu8.roa (raw, json)
Hash identifier: KeJ/kJiti71bF/CgEZtJ87ojiq5I8SIGtajmjSKuCOc=
Subject key identifier: 50:75:95:B1:27:99:70:9E:D1:FF:E3:E7:4C:92:FB:FE:FB:16:2A:EF
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0190AB8D2E97FA68FC761F4804CA3EE51F9B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UHWVsSeZcJ7R_-PnTJL7_vsWKu8.roa
Signing time: Sat 13 Jul 2024 10:04:34 +0000
ROA not before: Sat 13 Jul 2024 10:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53427
IP address blocks: 193.8.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 13:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ab:8d:2e:97:fa:68:fc:76:1f:48:04:ca:3e:e5:1f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 13 10:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=507595b12799709ed1ffe3e74c92fbfefb162aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:d1:de:f6:78:65:ec:94:78:d8:37:99:a7:
16:8f:a9:b2:df:04:1c:7b:32:ea:ce:da:32:80:fd:
d1:39:b5:7a:7b:fa:4c:43:11:10:8d:cc:09:2b:bd:
d4:14:98:47:ed:b6:9c:0e:b0:2c:86:ad:99:87:9c:
58:c9:78:40:29:45:a6:c4:09:7d:12:ec:86:1d:ff:
7c:de:0f:7e:37:92:e4:5a:56:df:74:a1:1f:16:6c:
47:51:c9:51:0d:ca:5a:0d:b5:48:37:2a:7a:82:46:
eb:bb:96:6a:9e:8d:ca:3b:29:95:70:af:cb:69:6a:
01:65:4e:6a:3a:e1:64:2e:9c:06:7c:2e:65:3d:9d:
c8:64:3e:b8:2c:e3:3b:b1:2b:0a:6b:36:22:53:8c:
af:72:34:8b:e3:a8:2f:43:2e:e6:d4:0e:5c:88:ca:
80:14:c6:2e:5d:03:c0:55:41:f0:cf:1d:d3:34:01:
08:40:d9:16:40:1e:c9:f5:a4:e2:00:bb:71:ec:49:
b8:06:f6:ec:48:c5:de:e8:92:7a:39:f9:63:30:8f:
44:15:b9:e7:cc:37:51:68:6e:fb:44:e6:42:c0:7e:
67:d7:d3:0d:58:f7:c3:0a:67:be:62:f5:9a:69:48:
a2:75:cb:02:3a:c4:33:ce:6b:d9:13:ce:84:16:f2:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:75:95:B1:27:99:70:9E:D1:FF:E3:E7:4C:92:FB:FE:FB:16:2A:EF
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UHWVsSeZcJ7R_-PnTJL7_vsWKu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.112.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:87:01:64:8d:de:51:7f:e2:13:11:d9:dc:bf:bc:81:6a:66:
cb:c3:6e:bc:d8:c1:32:46:d6:58:51:90:11:5f:4a:7d:d0:7e:
b4:60:61:03:9d:ad:27:19:0c:74:39:bb:20:fa:a6:cb:51:0a:
52:0c:2f:ec:01:49:62:fd:29:e1:2a:74:a3:4b:6e:39:14:7e:
b0:7b:de:c1:39:ee:85:e7:2a:1b:62:1b:9e:c3:88:80:37:b3:
8a:68:15:64:b3:4c:dd:ac:de:55:15:39:74:23:ef:e0:5f:6a:
df:5f:9a:06:4f:15:65:02:ba:5e:ac:6a:0c:83:22:13:09:78:
3d:e3:34:fd:14:3d:9c:66:7c:9d:4a:c4:d9:de:8c:d7:18:c1:
3f:8f:1a:ca:df:cd:7c:21:0d:c6:ad:fe:f9:cf:e8:ad:ca:10:
2f:79:9b:e4:42:a9:18:08:ae:00:54:f2:9c:15:81:88:b3:d9:
a6:f1:64:e2:ef:e4:8d:b5:70:e3:10:42:93:8d:27:d3:52:b3:
ea:f3:1c:0e:a5:ef:20:ed:ad:02:09:9e:76:02:b2:ee:c6:e5:
e6:d5:7a:68:8a:a4:57:09:50:0e:fb:33:6c:2f:d4:3d:9a:66:
d7:ab:89:22:f1:88:b4:72:78:c4:cd:5c:a9:8f:4d:09:15:82:
98:16:e9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 18:31:05 2024 by rpki-client on console-ams.rpki-client.org