Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/UvUwqsgH2KQq2kV2jFEjTCCphFU.roa
File: UvUwqsgH2KQq2kV2jFEjTCCphFU.roa (raw, json)
Hash identifier: Ya4qLh+9uBNRAU1MXUpHBCWDKqlRI0D/m4LNm1ACzts=
Subject key identifier: 52:F5:30:AA:C8:07:D8:A4:2A:DA:45:76:8C:51:23:4C:20:A9:84:55
Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial: 018B93F431CF09C54529F8C4F59076BD60B4
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/UvUwqsgH2KQq2kV2jFEjTCCphFU.roa
Signing time: Fri 03 Nov 2023 06:52:16 +0000
ROA not before: Fri 03 Nov 2023 06:52:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208950
IP address blocks: 185.134.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:f4:31:cf:09:c5:45:29:f8:c4:f5:90:76:bd:60:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Validity
Not Before: Nov 3 06:52:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52f530aac807d8a42ada45768c51234c20a98455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a7:11:fc:4a:cb:32:79:63:1f:0e:70:df:09:
41:13:36:a8:d0:1b:f1:30:6a:45:5b:f3:92:74:fe:
14:32:9e:16:2f:d9:02:d3:4e:79:66:6e:5f:02:f8:
70:d9:49:9a:f9:c2:6f:6c:d1:35:9f:83:59:d0:3b:
ba:cd:80:71:0b:fa:0b:4b:17:7b:c2:d2:48:ba:bd:
46:df:a2:44:c0:a1:e8:b8:5a:8b:66:70:60:8d:d7:
71:5f:d1:46:21:f4:f0:d5:8f:be:4f:68:c2:0b:3d:
e9:a4:da:b5:3a:29:4a:67:21:dc:72:22:65:14:56:
8a:20:26:a6:2c:17:fd:6d:b3:97:5e:e1:df:53:ec:
70:46:19:b0:de:ba:1c:c4:59:b1:26:88:69:a8:dc:
e3:fc:ab:be:23:9a:dc:32:72:e5:1c:9d:7b:b8:81:
ad:7a:42:30:6c:f2:b4:15:a6:cb:fd:7b:c4:38:fc:
85:f6:e4:74:16:34:03:41:95:28:3a:4a:9c:43:c0:
28:5e:f3:50:33:3f:fb:6d:21:21:b8:5f:df:99:9a:
46:89:8d:d2:f8:be:af:65:86:65:b3:4c:a2:b3:ca:
6c:8c:62:22:93:5a:7f:62:53:76:f9:31:85:03:58:
88:b2:45:bb:6b:e0:f3:2d:51:9e:11:c9:d5:17:42:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F5:30:AA:C8:07:D8:A4:2A:DA:45:76:8C:51:23:4C:20:A9:84:55
X509v3 Authority Key Identifier:
keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/UvUwqsgH2KQq2kV2jFEjTCCphFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.62.0/24
Signature Algorithm: sha256WithRSAEncryption
88:1e:4c:57:08:ad:41:5f:d3:1c:75:ee:1a:ab:a0:08:e5:5d:
47:d6:c2:56:1b:0d:5c:fd:d0:b6:ba:44:80:44:a2:e7:7f:7e:
2c:b2:7d:28:71:17:6e:d6:1f:30:42:09:d0:53:f7:14:16:ce:
18:1f:5d:c6:f5:2b:d2:8c:0c:75:1b:d9:c6:47:2d:33:37:e2:
42:05:7c:47:ef:0e:af:20:ae:b4:a0:34:52:1e:27:8e:b4:70:
9a:de:a1:6e:70:f2:62:65:9f:77:79:1e:3b:83:05:3f:8a:a6:
f8:11:c3:9d:4c:8d:2e:24:de:d8:f5:81:7d:69:4a:30:c0:7b:
aa:6c:9d:05:da:ea:1d:1d:65:50:d9:6c:4a:13:83:54:5c:9f:
e7:7f:47:dd:11:1f:04:eb:2b:53:6e:55:85:0c:95:f0:4a:62:
39:de:f6:bd:1f:75:f9:e4:80:4f:f3:76:79:7f:d3:34:00:25:
22:6b:b9:a4:a5:dc:a1:45:2d:7a:45:7a:bd:19:33:c5:7a:83:
e2:69:fb:a3:db:22:bd:f9:38:78:2d:cd:86:22:32:e7:c1:9c:
d2:e9:e8:7a:2c:d3:f5:98:41:77:02:07:17:a0:1c:81:37:39:
99:33:4e:7b:a9:92:61:27:8b:76:07:f9:5d:a1:a1:ca:d3:7c:
c7:b2:ba:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:53 2024 by rpki-client on console-ams.rpki-client.org