Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/UVKP4eZMeMRFlNGH4NAv1_BQZOc.roa
File: UVKP4eZMeMRFlNGH4NAv1_BQZOc.roa (raw, json)
Hash identifier: RnQeV8G4rpdHl87WJi+0bNy0eyCx/8sg0ErzHnZbVmQ=
Subject key identifier: 51:52:8F:E1:E6:4C:78:C4:45:94:D1:87:E0:D0:2F:D7:F0:50:64:E7
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018E3236075BF2CC2DD64F47ED508EED7A0D
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/UVKP4eZMeMRFlNGH4NAv1_BQZOc.roa
Signing time: Tue 12 Mar 2024 10:29:45 +0000
ROA not before: Tue 12 Mar 2024 10:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 194.143.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 08:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:36:07:5b:f2:cc:2d:d6:4f:47:ed:50:8e:ed:7a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Mar 12 10:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51528fe1e64c78c44594d187e0d02fd7f05064e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:95:15:31:fd:ad:6a:58:fe:33:b5:30:1c:
29:48:04:6b:43:cb:da:94:2f:3e:1a:3f:f8:4c:60:
91:bb:b9:ce:32:1a:1a:77:7a:08:2f:51:30:1b:d5:
ff:5a:1a:cd:f2:75:8d:20:77:f0:33:22:d5:cb:16:
af:e4:d2:49:16:63:cb:78:88:bf:1a:79:9f:39:2b:
d1:af:1c:d7:e2:5e:b0:3e:0e:c3:3e:60:4c:22:40:
43:76:ca:45:83:4a:cf:31:88:4b:3a:17:62:49:c3:
41:67:2b:7c:7f:58:2e:fb:90:ec:62:4c:c7:ab:1d:
15:ca:5a:21:9d:27:08:fb:ca:90:b1:92:98:45:3e:
5a:9d:dd:5c:d8:b8:00:d1:73:0f:ca:9b:bb:aa:44:
5b:bd:4e:52:9a:5d:bf:12:7b:f9:a6:ed:2c:54:a1:
95:6f:68:ce:7e:8f:25:49:ce:ff:5d:30:cd:24:e6:
76:90:0a:7c:23:6d:3c:ee:3b:aa:6c:6d:be:78:22:
16:0d:ec:ee:60:8f:6d:cb:5e:f4:91:96:79:f3:59:
df:6e:e9:f0:d4:57:a1:9f:78:ca:77:14:fc:bb:21:
ac:6f:35:e7:d7:39:4d:3e:b5:ce:77:3e:52:3f:ca:
1e:82:79:65:73:05:43:76:05:40:43:54:a0:ee:e0:
86:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:52:8F:E1:E6:4C:78:C4:45:94:D1:87:E0:D0:2F:D7:F0:50:64:E7
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/UVKP4eZMeMRFlNGH4NAv1_BQZOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.214.0/24
Signature Algorithm: sha256WithRSAEncryption
72:6f:b2:85:61:d7:e3:9d:65:21:50:0d:c5:88:9c:7b:c8:85:
0e:bb:56:86:d2:4a:2e:a3:70:45:91:f6:17:2d:58:5f:cf:c1:
fe:64:5f:62:e1:d1:cd:e8:6f:ee:d1:11:88:ea:d1:83:d0:d5:
51:1f:12:f7:e7:07:8f:f6:a3:e8:d8:bc:1b:35:b1:01:65:6e:
f2:12:9f:b3:f9:7e:5e:0f:61:96:55:b1:3a:19:97:74:17:92:
f3:cf:2d:e8:4c:74:88:bb:f5:ba:b7:6a:aa:6d:11:22:03:9b:
9e:46:84:63:ac:95:2b:0f:b8:24:26:d4:dc:3f:be:ec:84:74:
6f:df:6d:1d:d6:d9:d1:38:63:30:94:be:f0:bc:dc:31:8f:0d:
a6:8d:8b:08:34:d2:57:1e:37:1e:64:94:ea:41:78:1c:73:13:
e7:f8:24:be:0c:ef:f9:13:71:70:68:86:a6:db:03:de:fb:42:
e5:b8:cf:76:ef:a4:dc:f9:bf:67:73:ba:3e:74:da:be:85:a1:
de:91:4a:f0:b5:ee:99:dd:7f:77:a4:63:a3:38:5b:84:dc:4f:
6b:4c:db:3b:21:e6:fa:18:36:b6:c5:06:60:d9:12:da:6a:3e:
96:f3:9d:32:27:4a:5d:8c:ab:3d:9f:c7:90:62:6d:2e:ed:47:
e3:61:6a:dd
-----BEGIN CERTIFICATE-----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Generated at Mon Apr 1 09:09:08 2024 by rpki-client on console-fra.rpki-client.org