Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/UGCnTTex4kqqqXom2Mb-MmG1GaE.roa
File: UGCnTTex4kqqqXom2Mb-MmG1GaE.roa (raw, json)
Hash identifier: uqpJl9TU0nt+aDyVgKeVZQg/TpR2vELJ3Ri/O8TLjEs=
Subject key identifier: 50:60:A7:4D:37:B1:E2:4A:AA:A9:7A:26:D8:C6:FE:32:61:B5:19:A1
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018A8321E9C0D9A8872276A9CE7DAF66740B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/UGCnTTex4kqqqXom2Mb-MmG1GaE.roa
Signing time: Mon 11 Sep 2023 07:25:52 +0000
ROA not before: Mon 11 Sep 2023 07:25:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43641
IP address blocks: 5.182.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 15:42:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:21:e9:c0:d9:a8:87:22:76:a9:ce:7d:af:66:74:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 11 07:25:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5060a74d37b1e24aaaa97a26d8c6fe3261b519a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1a:3d:f9:37:b9:96:72:8a:5e:9d:28:fe:3b:
ea:14:d8:6b:dd:d1:5a:b3:cf:18:25:2c:62:fa:90:
70:f6:eb:cb:fc:e9:5c:13:a7:cd:5e:40:ea:a9:7a:
81:2b:43:e1:ee:69:a9:63:c0:0d:0b:62:0a:b5:ea:
9a:32:ec:95:a5:9d:ee:d4:02:8a:ab:23:28:6e:78:
b8:e7:be:f6:f6:e4:34:40:e8:ed:07:50:3f:3e:6c:
ac:f8:67:de:9e:e1:1b:f2:87:b9:a5:14:89:5e:a3:
2d:f7:90:ec:0b:57:9e:eb:13:0a:9d:4c:24:5d:a7:
80:91:11:fa:57:7f:1e:ed:c4:5f:aa:5a:50:2a:1c:
2e:d0:57:77:43:87:3f:6c:85:83:82:03:3d:25:5e:
bc:da:dc:0a:ec:3a:78:de:d0:45:44:f3:47:fb:69:
c3:cf:7c:36:c3:30:15:3b:e2:6f:f1:37:44:93:fa:
ff:b7:b2:74:6e:1e:11:78:19:58:0c:6b:3c:e5:84:
25:2f:bd:15:3a:d0:ed:78:48:94:b4:2d:b0:db:b6:
c5:27:fe:08:13:68:1a:b7:3e:ba:dc:91:62:99:5f:
9d:e7:5a:01:ea:af:d5:0a:e7:bb:d4:e7:d8:a2:40:
09:c6:d2:ff:3d:bc:4b:e9:d3:78:4e:27:d8:89:46:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:60:A7:4D:37:B1:E2:4A:AA:A9:7A:26:D8:C6:FE:32:61:B5:19:A1
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/UGCnTTex4kqqqXom2Mb-MmG1GaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.113.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a3:86:84:a3:e1:e7:bb:7d:1f:57:bf:24:fe:5f:c4:3e:90:
84:d2:16:2e:dd:33:b3:df:de:1e:de:80:4d:1e:dc:50:37:dd:
33:d9:2a:d3:6d:36:9d:30:99:c0:10:ac:ed:35:f1:98:b3:e4:
ba:f2:76:f3:a7:74:23:e3:fa:6e:30:a3:21:03:64:eb:0e:0a:
02:14:50:14:70:81:ad:29:ad:65:fe:89:4b:66:d8:cd:66:4a:
54:36:3f:20:92:61:05:5b:67:ad:36:0e:4b:1c:d9:cb:46:b7:
84:90:dc:7c:0f:85:8e:19:79:94:5a:3d:63:a0:63:4a:09:42:
09:c5:06:a7:6a:3c:31:94:b2:02:59:55:4a:34:e7:f7:a7:a3:
60:a7:81:e4:17:c2:b5:b4:61:f0:11:b9:45:2e:26:6d:99:79:
4f:e4:f1:2a:76:6f:4c:56:88:19:a3:24:5f:22:c1:6e:e9:d5:
ac:97:05:47:1f:89:6a:fb:ec:81:7e:d4:8f:37:c8:c7:c5:5f:
74:b3:af:3a:d7:5c:03:55:d2:8f:56:68:ed:cd:70:62:44:35:
84:62:de:c3:47:83:12:51:4b:80:1c:49:23:88:1c:81:27:2e:
ce:a5:01:fc:fe:78:77:56:f8:d8:72:40:0c:1a:a2:34:38:07:
02:f5:30:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org