Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/uXKQQEDfiLMVqgjujPxPzGguAaY.roa
File: uXKQQEDfiLMVqgjujPxPzGguAaY.roa (raw, json)
Hash identifier: Ktgbz1rm79YYTa9s44VUKrJId/ZgydGatPOL7WkAz5s=
Subject key identifier: B9:72:90:40:40:DF:88:B3:15:AA:08:EE:8C:FC:4F:CC:68:2E:01:A6
Certificate issuer: /CN=24954f608ac12b684ef865f39af0e94e250b9454
Certificate serial: 0186E6C3581B2FE2440A49FCDAF91420D3A3
Authority key identifier: 24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/uXKQQEDfiLMVqgjujPxPzGguAaY.roa
Signing time: Wed 15 Mar 2023 19:33:27 +0000
ROA not before: Wed 15 Mar 2023 19:33:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207108
IP address blocks: 185.139.7.0/24 maxlen: 24
2a12:ab46::/32 maxlen: 32
2a12:ab47::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 31 May 2023 20:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e6:c3:58:1b:2f:e2:44:0a:49:fc:da:f9:14:20:d3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24954f608ac12b684ef865f39af0e94e250b9454
Validity
Not Before: Mar 15 19:33:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b972904040df88b315aa08ee8cfc4fcc682e01a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:21:15:cc:59:1b:05:0e:52:f5:c1:9f:68:98:
01:d2:2d:14:be:2f:3c:f1:c0:a4:e4:dd:b9:a2:c5:
ac:d8:4e:6d:58:99:22:98:e7:be:75:47:f5:09:50:
76:47:eb:c0:1a:3b:a2:85:c0:8f:3e:c5:da:5b:79:
50:03:a8:2c:2c:dc:f9:e2:d1:be:dd:34:93:a3:e9:
79:3c:d6:9b:00:b3:76:4d:80:23:fd:1f:55:76:37:
ed:98:54:16:44:e6:b1:54:79:99:46:67:49:96:2c:
0f:af:cb:c8:02:50:cd:ee:cf:20:c9:c4:60:c6:3a:
8d:00:6e:40:5c:55:2e:21:b8:45:d3:a8:ae:54:3b:
df:2e:5f:7a:04:8c:4b:f8:37:07:8a:17:4c:35:36:
ca:52:e8:b8:5f:66:d3:58:f6:db:02:03:b6:d1:7b:
20:a0:b9:c0:2f:a7:4b:b5:31:bf:fe:c8:ae:1a:26:
78:2e:c2:51:9f:d8:f3:b1:b6:09:3a:a8:5e:68:06:
b0:3c:53:9b:72:0c:98:ba:b2:fd:0b:35:30:50:3f:
47:77:f7:d1:8c:ae:55:3d:a4:c9:cf:fd:b2:af:b7:
79:df:01:97:7f:0b:e2:d6:ee:21:9e:69:ce:49:5a:
7a:a7:59:f0:23:a2:f9:3c:bc:b8:3b:71:78:55:22:
65:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:72:90:40:40:DF:88:B3:15:AA:08:EE:8C:FC:4F:CC:68:2E:01:A6
X509v3 Authority Key Identifier:
keyid:24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/uXKQQEDfiLMVqgjujPxPzGguAaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.7.0/24
IPv6:
2a12:ab46::/31
Signature Algorithm: sha256WithRSAEncryption
5b:38:05:02:87:e1:44:32:bd:9f:e9:50:bb:9d:5d:df:f7:80:
e3:ac:8c:c4:7e:32:4d:8c:5b:d4:ce:16:e5:6a:ae:a4:f0:be:
ef:c2:aa:91:90:ea:da:02:2c:1a:cf:dd:6c:c3:6b:fb:bd:d1:
e1:6f:3f:cd:60:51:dc:3a:b5:d6:62:b6:66:63:8c:c3:a6:3e:
a0:50:09:b5:37:c4:9d:69:a8:3b:b7:1d:34:b6:cb:09:cd:81:
7f:99:0f:0d:b1:5f:06:4c:1b:73:7a:69:0e:fe:6e:ae:20:fb:
e5:be:f3:3e:5d:de:59:2b:a9:17:32:80:2b:3c:59:89:3b:b2:
18:60:84:ea:c0:c5:72:c5:19:a3:48:e6:0c:b4:7c:d3:4f:78:
e6:49:d6:20:af:56:0c:e4:44:af:a4:d7:18:ac:a0:9b:ee:5c:
a6:72:cf:eb:df:f4:1b:f0:7f:8c:df:69:56:da:08:6b:32:46:
ab:52:96:68:0b:42:05:5c:19:c6:3b:c7:5c:cc:9b:6a:71:87:
4b:dc:6e:0f:d1:41:d1:a0:da:46:11:b4:bb:7b:5b:63:e8:85:
98:8b:fa:2b:b0:dd:91:8b:b7:44:04:bc:d7:74:94:9a:20:a7:
61:19:b4:90:23:11:9a:d4:47:97:55:9c:e9:b5:5e:4a:de:b7:
fb:8a:c5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:41 2024 by rpki-client on console-ams.rpki-client.org