Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UtksyAXnJlqlpW2YUlm4Y-QChfk.roa
File: UtksyAXnJlqlpW2YUlm4Y-QChfk.roa (raw, json)
Hash identifier: IbAFKVQFhr7GGOofOSVGzL/Re8NPgeJMZmLhy4O7y0k=
Subject key identifier: 52:D9:2C:C8:05:E7:26:5A:A5:A5:6D:98:52:59:B8:63:E4:02:85:F9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018DAC2BB62F1AB07DB07DD180BB1A4AB555
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UtksyAXnJlqlpW2YUlm4Y-QChfk.roa
Signing time: Thu 15 Feb 2024 09:49:22 +0000
ROA not before: Thu 15 Feb 2024 09:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59895
IP address blocks: 193.8.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 13:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:2b:b6:2f:1a:b0:7d:b0:7d:d1:80:bb:1a:4a:b5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 15 09:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52d92cc805e7265aa5a56d985259b863e40285f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:3a:1f:68:18:d3:04:db:85:b4:27:c9:a5:
14:53:16:45:27:66:a2:62:c2:5a:be:a9:af:e9:6b:
71:bb:e5:8f:53:e9:34:04:dd:00:42:1a:04:9e:7a:
17:8c:b0:b6:8d:dd:16:12:ca:68:08:3a:5a:61:18:
a1:16:90:ca:e2:8a:bf:f7:03:9f:7e:9f:19:19:a0:
db:4c:bf:71:84:86:04:6c:17:f0:12:4a:92:b1:57:
a0:71:38:65:72:d6:04:7a:98:2b:be:de:8e:c9:4a:
16:cc:5a:0b:fd:b7:94:6e:10:a6:fe:f9:62:81:3c:
97:1b:ad:40:07:4f:ed:cb:26:88:87:5f:58:46:24:
00:2f:32:6c:c2:bc:56:17:bb:1b:10:e2:8e:4a:03:
d7:75:2b:ef:30:ed:77:35:21:0f:1c:58:47:0e:8f:
46:da:e5:90:fa:5a:42:a3:68:16:ac:be:4c:e3:06:
0a:4f:fb:6d:4e:ba:5e:10:a9:a6:b1:20:44:4e:1d:
e0:10:f2:70:78:3b:da:77:9e:7e:4e:f0:14:eb:ab:
9b:98:01:69:4f:43:85:35:0e:db:2f:79:3d:7f:eb:
23:2e:b4:ec:8f:fc:55:59:4d:c1:5c:de:1e:7e:47:
9a:50:15:fa:79:61:75:0e:0e:b2:5c:67:2f:6a:94:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D9:2C:C8:05:E7:26:5A:A5:A5:6D:98:52:59:B8:63:E4:02:85:F9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UtksyAXnJlqlpW2YUlm4Y-QChfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.115.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:32:72:ed:dc:46:12:c3:9c:86:9e:0c:b2:a9:09:83:fb:a6:
52:25:63:85:24:87:44:f5:00:ca:49:10:7b:c8:fa:92:2c:bf:
c7:2f:06:bb:39:4c:a5:3b:16:6d:7d:03:3a:cf:19:ac:d9:3f:
4c:ca:9d:b0:d3:e0:28:db:32:14:30:ee:e0:b2:c3:f7:de:3a:
db:72:76:04:d4:25:6a:9f:79:f8:65:57:6b:75:2a:d0:35:a7:
19:ab:2f:3c:c0:ed:52:c2:3c:ae:8b:4c:55:ec:df:be:7e:c1:
9b:ad:9e:b2:26:4f:81:42:34:da:1a:a2:fa:7c:a4:56:bf:e3:
61:49:5f:a6:2e:66:28:7e:b6:0f:d6:b7:e8:98:7b:92:61:82:
3c:e6:b4:09:98:6c:b0:76:17:30:69:76:cf:44:92:ab:51:9a:
ea:e8:d1:c0:cb:39:d0:8f:a5:87:9a:71:fa:9d:5c:5d:da:cc:
54:b1:0e:68:68:39:5a:5d:f4:fb:47:87:9e:99:c8:ca:f1:ce:
7f:75:33:66:e2:2b:3c:bf:c1:02:6c:ec:b5:36:de:17:bf:8f:
0d:38:d9:eb:1f:99:d3:d4:9c:16:bb:b9:89:69:61:89:7f:62:
47:68:51:df:82:aa:87:30:86:68:b5:f0:23:44:e7:4b:4e:d6:
1a:dd:c1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:26 2024 by rpki-client on console-ams.rpki-client.org