Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/UEGdcQx0plegCuTC_zSnH49gUIA.roa
File: UEGdcQx0plegCuTC_zSnH49gUIA.roa (raw, json)
Hash identifier: wGTAeHjiI3uqw+7WErMTGm5CnDqw5YiTBsRbkz/qkLo=
Subject key identifier: 50:41:9D:71:0C:74:A6:57:A0:0A:E4:C2:FF:34:A7:1F:8F:60:50:80
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 0185723A45B5C4A81D1A6A4E4904BF3A2150
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/UEGdcQx0plegCuTC_zSnH49gUIA.roa
Signing time: Mon 02 Jan 2023 11:24:59 +0000
ROA not before: Mon 02 Jan 2023 11:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29522
IP address blocks: 194.48.216.0/24 maxlen: 24
195.182.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:45:b5:c4:a8:1d:1a:6a:4e:49:04:bf:3a:21:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: Jan 2 11:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50419d710c74a657a00ae4c2ff34a71f8f605080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:2e:68:d8:87:9c:e6:1d:7a:55:69:d4:ef:
74:38:61:94:de:8d:3c:ed:7a:b3:4a:85:cb:56:72:
94:c2:3b:9c:cb:ac:ae:77:8a:ab:30:fd:70:3a:9d:
fa:55:88:09:15:5f:51:9d:a4:ba:22:8e:03:c1:93:
13:76:5b:1a:d5:a4:15:b3:7a:28:44:bd:df:c8:dc:
d4:6c:cf:3c:9a:13:5a:0f:1e:8c:4a:a2:6c:5c:6b:
9f:0f:4c:51:fb:92:73:83:96:1a:25:25:16:2b:a0:
72:06:5a:6f:99:ba:94:0a:35:3a:1f:c1:7d:f2:92:
d3:1f:fb:1a:8a:03:4c:66:3e:eb:ff:8f:49:4f:44:
42:94:fd:45:c3:f1:0b:f9:af:50:56:11:cb:44:d1:
d9:82:d2:22:35:f1:45:e6:70:63:04:bf:9e:03:44:
40:5e:fd:b1:46:49:c1:28:61:78:ae:ae:18:fe:d1:
71:6b:9f:47:a5:75:df:e8:ef:da:14:d8:35:88:cc:
ae:23:b7:a3:6b:b2:3c:5e:c3:af:1d:0d:e2:21:97:
eb:28:68:6c:84:86:03:2d:62:c5:14:57:61:67:3e:
ee:10:2f:10:e2:ef:82:34:4f:19:33:19:91:2b:fa:
04:c3:b2:77:61:2a:d8:ca:a0:75:66:1f:01:85:b6:
e1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:41:9D:71:0C:74:A6:57:A0:0A:E4:C2:FF:34:A7:1F:8F:60:50:80
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/UEGdcQx0plegCuTC_zSnH49gUIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.216.0/24
195.182.14.0/24
Signature Algorithm: sha256WithRSAEncryption
07:13:2e:b2:6a:b4:92:7b:c4:3f:41:33:af:6b:cc:64:e7:4c:
65:ca:3e:4b:e8:9c:e9:8a:76:ec:08:fc:5c:62:72:76:48:12:
29:ad:44:64:72:56:e1:1b:42:3d:13:bf:9c:fe:34:3a:1e:fd:
2e:fa:07:9e:04:e0:13:ab:92:30:16:30:3d:a7:e2:c2:18:ff:
c2:f5:53:3c:a8:d3:78:96:1c:e2:ee:f1:2f:38:fc:59:2f:a8:
ad:88:4f:d7:53:b1:0d:45:77:51:ff:e5:a5:61:a8:65:94:9c:
99:b6:93:87:6a:8d:44:82:65:38:25:d6:8c:49:37:44:27:b9:
ad:fd:61:a5:60:cd:ba:b0:c9:f8:ab:5b:09:09:ef:8b:0b:a7:
d5:7d:74:bc:ab:2c:17:a1:d6:bb:c8:63:e6:3a:71:5f:64:a9:
32:58:b0:de:b5:ce:1c:eb:35:25:a1:07:91:f9:e2:14:fd:44:
66:bd:51:9e:51:cf:33:df:ba:de:51:00:59:0c:86:82:24:f1:
2e:a6:dc:89:7e:58:f6:37:e5:5e:f5:d8:0c:e3:62:dc:82:c5:
79:29:e1:e2:60:52:b0:e8:77:96:3e:d2:11:66:77:53:10:94:
68:e2:e0:d6:98:3d:96:55:b9:56:e1:7e:b3:0a:05:08:e5:7a:
27:58:42:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:38 2024 by rpki-client on console-ams.rpki-client.org