Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/uJBGqUsGQSI3skNcCPXRcXHQjTA.roa
File: uJBGqUsGQSI3skNcCPXRcXHQjTA.roa (raw, json)
Hash identifier: 1iLo98/6j1LNg7dvh/GDVGs2dVlcNmUkzKpDt9M9KrY=
Subject key identifier: B8:90:46:A9:4B:06:41:22:37:B2:43:5C:08:F5:D1:71:71:D0:8D:30
Certificate issuer: /CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Certificate serial: 01856F4B6F6F37C84476500DB6D70D82C8E5
Authority key identifier: 53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/uJBGqUsGQSI3skNcCPXRcXHQjTA.roa
Signing time: Sun 01 Jan 2023 21:44:52 +0000
ROA not before: Sun 01 Jan 2023 21:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.54.124.0/24 maxlen: 24
185.54.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:6f:6f:37:c8:44:76:50:0d:b6:d7:0d:82:c8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Validity
Not Before: Jan 1 21:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b89046a94b06412237b2435c08f5d17171d08d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:fd:ad:e0:06:30:dc:6e:93:75:7b:22:3d:
8c:6a:7a:62:71:35:c9:b4:59:c4:86:bd:b9:13:9c:
e3:b3:57:7a:43:7b:01:88:88:46:35:20:62:b1:24:
56:d8:31:1d:9b:57:1e:d3:01:88:1f:dd:cf:19:e3:
03:c6:a1:10:02:dd:4e:cf:de:29:91:ab:e4:6a:c2:
7e:39:0e:ca:22:a1:c4:3c:e1:27:ef:7a:c9:39:5f:
dd:51:36:aa:70:b4:0d:7e:86:cb:e4:dd:9d:6d:4a:
f9:d5:4f:cf:15:b5:86:dc:17:49:54:7a:a8:dc:c5:
19:fe:cd:c5:74:4c:03:cb:b7:61:ac:33:9f:9c:a9:
42:0f:99:5b:a1:fa:6d:71:ad:f7:eb:a9:92:f2:d4:
7d:08:d2:81:ee:b4:a4:46:ea:57:02:81:f2:5d:8f:
e3:85:0d:78:63:10:9e:4f:27:4b:f7:07:e2:57:07:
56:c3:a8:7f:92:27:36:80:6b:ce:ff:11:9e:9e:b5:
f8:ee:73:a7:7c:a2:00:5f:38:c9:1b:1e:57:69:91:
62:5e:95:a4:d9:2b:7d:cb:0b:63:97:05:75:8f:e2:
f1:26:74:85:2a:19:51:f2:8a:9f:6d:6b:b9:44:dd:
a3:0b:e5:aa:a7:dc:4d:87:07:fe:e5:0a:82:67:b4:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:90:46:A9:4B:06:41:22:37:B2:43:5C:08:F5:D1:71:71:D0:8D:30
X509v3 Authority Key Identifier:
keyid:53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/uJBGqUsGQSI3skNcCPXRcXHQjTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.124.0/24
185.54.126.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:1a:ef:29:85:cf:d9:23:14:32:94:c0:e5:37:27:3d:5b:89:
2c:8c:cd:5b:6c:c7:b5:9d:d1:2e:ab:91:d7:95:3c:13:b3:5e:
a2:c3:ed:ad:08:65:62:23:21:ad:51:d1:ae:9f:87:43:6f:68:
02:9f:1c:5d:a0:9c:22:cb:13:2f:d3:e0:4e:48:75:0a:76:0e:
cd:55:e6:3c:17:ed:04:26:ab:6f:32:15:bb:eb:34:92:82:af:
ba:d6:02:28:2a:9b:d7:8b:ed:bd:96:1e:8a:79:0c:eb:80:bc:
9c:b8:72:aa:48:7b:96:01:04:b5:9f:8d:12:52:e0:14:dc:16:
2c:71:97:48:8a:a3:6a:1a:96:f6:33:06:86:05:57:eb:9b:c8:
a1:95:55:dc:e9:05:91:ba:a2:84:09:f6:63:0d:0b:11:5b:e2:
cc:09:c2:bc:23:26:63:68:60:f8:0a:5f:a6:56:1d:8e:33:ea:
03:4e:9a:53:0d:63:2e:0e:43:44:9a:9b:1c:a0:9a:13:91:c4:
b1:80:cd:64:ac:83:e2:0c:97:4d:3f:c7:8a:07:77:0e:b0:5a:
98:4e:80:8b:f1:1a:03:a7:14:9b:26:45:b2:27:2c:78:4d:f1:
e9:3f:89:af:65:da:a5:78:a4:a4:c1:1f:41:8b:b4:4e:f0:42:
ce:1c:85:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:28 2024 by rpki-client on console-ams.rpki-client.org