Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/UHoGMK72Nr5gO77evIakmJ9zCbk.roa
File: UHoGMK72Nr5gO77evIakmJ9zCbk.roa (raw, json)
Hash identifier: 2ViBW2ZQ2Omi3o0olcW4wZlQn6Qp69eU+O6pZhlF/XU=
Subject key identifier: 50:7A:06:30:AE:F6:36:BE:60:3B:BE:DE:BC:86:A4:98:9F:73:09:B9
Certificate issuer: /CN=122a541caf138341bd32798940de206052910341
Certificate serial: 01856FA6D939040C296631A8ADDA1E7F5A32
Authority key identifier: 12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/UHoGMK72Nr5gO77evIakmJ9zCbk.roa
Signing time: Sun 01 Jan 2023 23:24:43 +0000
ROA not before: Sun 01 Jan 2023 23:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48508
IP address blocks: 195.162.22.0/23 maxlen: 23
195.162.22.0/24 maxlen: 24
195.162.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:d9:39:04:0c:29:66:31:a8:ad:da:1e:7f:5a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a541caf138341bd32798940de206052910341
Validity
Not Before: Jan 1 23:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=507a0630aef636be603bbedebc86a4989f7309b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:06:e0:05:5a:64:3e:72:7c:9f:c2:42:65:53:
58:a0:fe:ec:51:8d:14:22:da:cb:df:cc:05:17:bc:
73:f6:32:b8:c8:2a:44:cc:78:ae:d1:b6:af:4c:c2:
4f:6a:8f:57:db:69:93:fd:87:5d:1d:69:7a:77:09:
3c:32:52:74:40:e6:f5:38:ca:2e:ca:11:3e:bf:b3:
85:7f:12:eb:5d:8e:2d:46:24:e8:f7:b0:05:3f:a1:
6a:ab:6d:79:0d:42:bd:bd:e3:84:05:17:6e:8e:4f:
9f:71:3e:1d:3b:a7:81:a2:27:f0:20:6b:f0:3b:56:
90:f6:0b:2d:8f:46:5b:ed:b4:d0:70:f5:0b:d5:d3:
84:e8:9e:6b:e5:19:bc:53:84:b1:43:a2:4a:72:67:
c0:9b:0b:46:da:60:9c:af:2b:9c:ce:c0:6c:a2:50:
71:73:37:b2:75:a9:2e:15:db:c6:93:f7:7c:4f:33:
d3:4c:e0:c1:67:4f:4d:69:71:1d:c0:da:1b:34:9c:
e6:14:e6:ac:65:b3:db:3b:0f:48:bf:1e:6d:da:d7:
d3:d2:3f:82:c2:2e:7a:e4:8a:9c:f3:8c:47:59:fd:
de:2c:6d:74:88:dd:b7:96:ed:9a:ea:23:d3:30:e3:
47:8e:9b:56:c3:44:ea:7b:70:ab:3b:ff:48:fe:44:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7A:06:30:AE:F6:36:BE:60:3B:BE:DE:BC:86:A4:98:9F:73:09:B9
X509v3 Authority Key Identifier:
keyid:12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/UHoGMK72Nr5gO77evIakmJ9zCbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.22.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:48:cb:e2:c2:69:ee:4a:20:e2:02:da:d3:b1:6a:fc:03:10:
7c:c4:6e:68:38:05:09:13:00:93:9d:7c:28:45:b4:bd:a4:0a:
cb:48:48:7a:18:a5:49:da:7b:82:cd:8b:f6:9b:27:cc:98:03:
c8:6a:1e:ce:f6:4d:b7:6b:57:0b:0c:33:02:69:cd:ad:e1:ed:
c6:c7:42:b2:6c:ac:6e:ef:3d:29:da:37:a7:c5:1b:47:d1:4f:
a8:48:ac:59:b9:a4:39:71:d5:72:ba:4c:57:01:6e:37:e7:6d:
c0:47:11:e6:66:21:a9:dc:c3:e8:ec:e4:1f:39:19:a9:fd:34:
28:1a:f7:e1:c4:44:67:2e:0d:c3:55:d1:2c:41:9f:a6:51:1b:
f8:00:ab:2c:42:ef:68:7d:d7:23:9a:41:3b:b4:ff:1f:d0:0e:
fe:72:73:d0:4e:03:53:30:21:24:41:16:62:ec:8b:02:08:2c:
a2:c0:e2:57:de:ae:c2:ba:5b:50:c7:11:94:b3:9e:98:be:42:
6f:9b:f3:a4:52:39:fb:ce:e3:fd:c5:f6:3e:0a:db:0e:40:47:
ed:aa:5b:80:fd:09:55:ba:e5:88:65:cb:97:b6:0e:d4:7a:f7:
60:1d:b9:69:79:03:65:70:82:85:ee:37:63:b1:bb:53:80:95:
bd:0a:55:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:08 2024 by rpki-client on console-fra.rpki-client.org