Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/UrVYRLvZn7C1Oxhy3w0XAn_o940.roa
File: UrVYRLvZn7C1Oxhy3w0XAn_o940.roa (raw, json)
Hash identifier: t3+hErwIM1UmaRXV7RhiT0CNTIqn01S+WT74rxA7CnA=
Subject key identifier: 52:B5:58:44:BB:D9:9F:B0:B5:3B:18:72:DF:0D:17:02:7F:E8:F7:8D
Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial: 018C1550DE04A27E17C10884DE5CB607222D
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/UrVYRLvZn7C1Oxhy3w0XAn_o940.roa
Signing time: Tue 28 Nov 2023 09:44:30 +0000
ROA not before: Tue 28 Nov 2023 09:44:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 329272
IP address blocks: 213.148.16.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:50:de:04:a2:7e:17:c1:08:84:de:5c:b6:07:22:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Validity
Not Before: Nov 28 09:44:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52b55844bbd99fb0b53b1872df0d17027fe8f78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:01:b2:a1:30:2a:46:be:3b:11:12:a4:47:
3c:30:49:8e:89:9f:5a:30:59:53:9e:e8:d3:b2:8a:
e2:e4:d6:aa:2d:48:bb:39:42:bd:1b:ca:20:50:4a:
6c:e5:31:f4:86:2d:a4:3a:29:d5:ef:19:50:98:d0:
fa:e4:9f:6d:dc:e6:52:f1:12:e3:36:99:ea:f2:18:
97:6f:bf:58:65:11:a5:b5:80:57:30:ae:75:cc:98:
6e:cd:8e:2d:c8:02:3a:0a:9b:ec:5f:fc:6c:52:20:
a5:d5:32:13:3f:8a:b0:6b:ff:5c:0f:b5:90:18:d6:
ea:a0:d3:76:66:f2:a5:55:a5:c7:35:4d:92:1f:98:
38:17:33:09:0e:0d:26:24:31:eb:22:bb:89:09:52:
78:32:45:9c:8d:8b:d5:bd:b3:0a:c7:cb:7a:86:5b:
04:85:bf:e8:f1:6b:26:85:3c:94:98:04:3d:7e:48:
41:fa:4c:c7:f2:5a:1d:69:55:9b:29:02:25:0d:a5:
f4:a4:6b:6b:d8:1a:36:82:6d:42:7b:84:1d:f5:9d:
54:1e:09:49:c6:7f:3f:cc:31:a5:3c:88:67:b1:03:
f6:9d:c4:d1:00:ec:5c:29:77:bb:2f:ac:19:e1:55:
8c:51:a0:c0:72:fd:ce:7a:1a:a8:4f:cb:02:69:d2:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B5:58:44:BB:D9:9F:B0:B5:3B:18:72:DF:0D:17:02:7F:E8:F7:8D
X509v3 Authority Key Identifier:
keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/UrVYRLvZn7C1Oxhy3w0XAn_o940.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.148.16.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:9c:46:a2:34:46:01:98:19:9e:ab:dc:92:78:7b:42:b4:4b:
4d:62:5f:02:d6:d0:67:9d:c7:36:ad:43:36:22:41:4d:41:d8:
8f:c1:d8:69:ec:7d:af:08:b1:81:5d:6e:51:96:b8:c3:41:0b:
41:8f:ff:2d:65:e7:0c:bc:6c:4e:c0:52:90:61:c5:a1:c1:de:
c0:41:4d:7d:07:f2:b2:8c:e5:a5:b5:4b:a8:c0:bb:af:fa:30:
03:e4:27:06:d1:cb:ff:25:30:cd:f9:fc:cc:f0:2d:6b:d9:97:
8d:9b:0d:9f:eb:1d:7c:34:16:34:7c:81:ef:48:b2:41:2f:14:
36:f9:3d:b4:db:27:94:27:5c:a9:90:0a:a0:83:01:98:9c:e2:
3d:5c:cd:9a:03:f3:36:58:09:76:56:b9:0b:16:32:4e:6a:04:
4e:9a:16:27:79:fc:70:29:73:9c:20:d2:7f:a1:4c:f7:18:ee:
11:46:5c:6c:9e:b6:3b:aa:e1:d7:2c:b7:e5:12:04:46:32:d9:
c0:2b:29:1c:1c:56:48:3a:4f:97:34:76:50:19:40:dc:b7:d5:
66:c4:5c:df:49:f5:51:f2:a5:8d:57:b9:a1:83:ac:f6:06:56:
ba:f8:36:87:e0:ef:50:86:c5:ba:6c:a6:7c:81:1e:85:aa:e8:
18:95:f9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:36 2024 by rpki-client on console-ams.rpki-client.org