Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/Ul0g3cdPFonBuv1bwYODG4LNays.roa
File: Ul0g3cdPFonBuv1bwYODG4LNays.roa (raw, json)
Hash identifier: YlK1ULyDaEKILZZ2goFBrCqJnwMpPfJdA1lgwFtmptM=
Subject key identifier: 52:5D:20:DD:C7:4F:16:89:C1:BA:FD:5B:C1:83:83:1B:82:CD:6B:2B
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 0186C75F8CB4D5B0DECC2B33F53E875CDE67
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/Ul0g3cdPFonBuv1bwYODG4LNays.roa
Signing time: Thu 09 Mar 2023 17:16:13 +0000
ROA not before: Thu 09 Mar 2023 17:16:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197706
IP address blocks: 93.187.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Mar 2023 14:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c7:5f:8c:b4:d5:b0:de:cc:2b:33:f5:3e:87:5c:de:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Mar 9 17:16:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=525d20ddc74f1689c1bafd5bc183831b82cd6b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:70:20:69:25:85:3d:f2:4e:27:9c:9d:fb:
e7:23:4d:d2:9b:81:c6:e5:1f:c4:7c:02:45:37:14:
f3:26:e0:6d:ea:5b:2b:c1:f7:b0:10:7d:85:13:3f:
c5:b4:28:83:de:8f:ef:34:c9:8c:19:ec:d8:f6:94:
c8:cc:31:17:a9:bb:47:1c:e1:74:82:66:2f:83:1f:
af:3d:53:fe:59:0f:63:ba:df:2a:32:7e:c0:b1:ef:
d7:f3:6a:13:30:fd:65:af:98:be:fe:c9:9f:0c:66:
e8:24:f7:94:6c:3e:98:d3:5d:8f:ad:58:48:60:b8:
3c:18:84:9e:72:dc:de:a2:16:02:43:6e:c2:f4:91:
38:be:d0:38:92:5a:7d:99:cb:eb:68:e8:40:ef:8c:
c3:34:52:1e:40:43:26:11:6e:34:c8:fd:c8:cf:d2:
d9:d4:29:4f:1d:0d:20:f2:1f:10:02:b3:e2:0e:4b:
2f:69:e2:05:ca:a5:36:c6:f7:bd:a6:f8:ba:c3:c6:
d9:dd:8e:26:fe:e0:0c:26:31:c1:cd:10:be:1c:1f:
c9:fc:2b:3a:0d:f1:73:db:13:c0:2c:75:ca:69:0b:
f9:ad:a7:b6:a8:2d:87:c5:92:25:4b:0c:be:0c:56:
18:cc:8d:26:21:64:61:b3:11:bd:82:7a:17:01:80:
d4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5D:20:DD:C7:4F:16:89:C1:BA:FD:5B:C1:83:83:1B:82:CD:6B:2B
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/Ul0g3cdPFonBuv1bwYODG4LNays.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.110.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ee:75:5a:b5:fc:4f:09:bd:6e:ca:a7:82:61:37:51:53:17:
15:b3:95:ee:07:96:d3:84:29:0b:eb:14:85:14:62:cf:f2:5d:
5b:d1:96:c6:67:70:55:a0:f5:25:c9:ff:f8:5d:e7:ac:ed:2c:
94:54:69:15:a1:f3:2e:37:6d:fd:ee:f6:ea:46:1b:9a:46:7d:
42:1c:65:ea:15:bb:6d:88:f0:65:fc:67:92:9a:87:a2:8e:78:
72:f3:03:3e:fe:d3:1b:2f:ad:b7:ab:1b:6a:bd:da:6d:07:eb:
6c:fa:57:59:ab:38:05:89:8d:1d:e8:3d:17:f3:e9:7e:52:c5:
15:76:a2:8a:18:89:19:59:23:83:18:14:98:d5:c7:4e:fb:ad:
c9:c0:92:5e:21:08:cc:7f:ab:69:d5:e0:40:bf:15:5c:8f:5f:
be:15:5a:e4:a3:49:20:1b:21:60:7a:51:f7:42:bb:cf:40:31:
0c:d7:05:3a:77:23:d8:ef:12:e2:0e:7b:12:4a:57:ce:e1:e4:
45:d4:f0:fd:81:65:bb:74:eb:a1:68:32:30:1c:6b:07:37:4c:
aa:45:cc:fb:80:91:66:5a:4f:91:82:e2:52:f4:a8:57:26:28:
a4:f5:f6:a8:41:c5:d2:fc:68:63:1c:37:d8:02:4b:30:d1:24:
cc:85:05:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:13 2024 by rpki-client on console-ams.rpki-client.org