Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/UeD4-_3hvde5Ojh-TYPrjho5pRs.roa
File: UeD4-_3hvde5Ojh-TYPrjho5pRs.roa (raw, json)
Hash identifier: Y0o8yl5aH3bX4VliCQPcmVg9DxvZ/GsCpNcaR+gptV4=
Subject key identifier: 51:E0:F8:FB:FD:E1:BD:D7:B9:3A:38:7E:4D:83:EB:8E:1A:39:A5:1B
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 01856C6F01E3AF69308BB2901204ACB448A5
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/UeD4-_3hvde5Ojh-TYPrjho5pRs.roa
Signing time: Sun 01 Jan 2023 08:24:52 +0000
ROA not before: Sun 01 Jan 2023 08:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205376
IP address blocks: 193.141.67.0/24 maxlen: 24
194.120.16.0/23 maxlen: 23
2001:67c:2e58::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:01:e3:af:69:30:8b:b2:90:12:04:ac:b4:48:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Jan 1 08:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51e0f8fbfde1bdd7b93a387e4d83eb8e1a39a51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:71:22:02:d7:52:5c:01:d6:70:a9:28:41:b4:
db:44:a5:2f:67:89:28:57:d3:09:44:7c:4c:98:0e:
97:54:62:a9:7b:56:e7:63:60:5e:24:bd:37:7d:51:
22:a8:3f:3c:28:8e:b3:36:38:62:60:07:17:a4:b8:
16:bf:0c:22:c5:28:04:ef:63:ad:a9:de:09:bd:e0:
c4:00:20:ed:f6:fa:17:a2:4f:ef:c3:ec:71:8f:ea:
da:34:7e:08:d4:ea:33:b3:51:4c:45:9d:2a:78:a5:
8e:64:5e:a3:2d:c8:5d:df:15:e4:70:7a:6d:d3:18:
4f:63:d4:18:56:61:c6:61:19:57:2b:1e:d3:fd:45:
c7:9f:36:f9:21:2f:f6:33:3a:2c:30:1f:27:86:54:
0d:13:c6:80:e1:8b:99:b9:8d:70:5a:a8:11:cf:e1:
93:8d:5a:20:2d:3e:84:7a:b6:3d:a3:fb:6d:5b:e3:
ad:e1:2f:aa:da:53:29:aa:c4:53:b9:bb:d5:42:57:
e0:50:40:d6:e7:22:2d:e6:f0:0b:67:84:a9:27:6a:
5f:77:2e:9f:6e:c6:b0:b8:50:b5:70:4a:31:f4:45:
45:f1:4e:f9:af:16:e2:41:db:07:31:5a:a0:4b:e9:
61:f5:1a:84:c1:3a:6e:d7:d3:ac:a7:8b:f3:a2:a2:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E0:F8:FB:FD:E1:BD:D7:B9:3A:38:7E:4D:83:EB:8E:1A:39:A5:1B
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/UeD4-_3hvde5Ojh-TYPrjho5pRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.67.0/24
194.120.16.0/23
IPv6:
2001:67c:2e58::/48
Signature Algorithm: sha256WithRSAEncryption
5f:f9:33:09:fe:b5:05:d0:ad:44:56:0a:2d:3b:58:c0:ca:72:
34:48:c2:30:80:9c:01:ce:91:38:35:af:34:a4:22:38:75:01:
ff:e5:12:bf:10:2e:3e:0a:5d:43:f3:17:c7:df:e4:c6:b5:37:
c4:c6:f1:a7:a5:28:e7:35:aa:55:4d:e2:6c:c0:57:37:c0:3a:
5b:94:9d:f9:f7:8d:54:41:36:a2:da:ef:d4:db:08:8a:47:38:
4d:fc:4c:99:7a:a4:e0:87:6f:86:b7:9b:56:cd:f7:ec:8e:00:
65:8c:71:e3:32:ab:86:c9:65:a2:89:a0:b5:eb:4d:5a:65:9f:
54:e3:44:82:dc:f3:4d:3d:d3:04:c2:4a:4f:9b:96:25:07:05:
69:08:ef:42:62:40:8b:3e:f3:a5:06:69:75:26:7a:d3:3f:12:
08:b6:7c:2d:cf:2a:65:40:07:0c:6d:79:67:31:b1:cd:8e:39:
78:82:18:80:15:f7:61:93:03:63:67:f0:e5:23:2e:c9:02:b0:
8c:e1:62:be:29:5a:30:72:e3:a7:ec:80:89:24:42:34:67:df:
4e:fa:17:b5:43:21:83:6b:17:2d:73:d9:6a:e7:01:38:96:c5:
58:45:b6:4e:0f:38:64:36:f3:66:a0:bc:5f:86:a3:cb:d7:b7:
00:7e:87:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:54 2024 by rpki-client on console-fra.rpki-client.org