Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/UgWU30gBmBOKzvUjTeQbEN8tU6M.roa
File: UgWU30gBmBOKzvUjTeQbEN8tU6M.roa (raw, json)
Hash identifier: LHv1IEOuoMZ8Z8VQMaSSXzThEKSf6VM3j5QMVvPeIIA=
Subject key identifier: 52:05:94:DF:48:01:98:13:8A:CE:F5:23:4D:E4:1B:10:DF:2D:53:A3
Certificate issuer: /CN=d2de05d3ca750dd5c27eebfa5539c20b7d2829cf
Certificate serial: 018D25A2DDC6A280B373967B4F324113BAEF
Authority key identifier: D2:DE:05:D3:CA:75:0D:D5:C2:7E:EB:FA:55:39:C2:0B:7D:28:29:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t4F08p1DdXCfuv6VTnCC30oKc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/UgWU30gBmBOKzvUjTeQbEN8tU6M.roa
Signing time: Sat 20 Jan 2024 06:50:47 +0000
ROA not before: Sat 20 Jan 2024 06:50:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206818
IP address blocks: 185.157.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 22 Mar 2024 11:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:25:a2:dd:c6:a2:80:b3:73:96:7b:4f:32:41:13:ba:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2de05d3ca750dd5c27eebfa5539c20b7d2829cf
Validity
Not Before: Jan 20 06:50:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=520594df480198138acef5234de41b10df2d53a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5d:e7:15:85:8f:30:08:f1:e2:59:63:25:b4:
e6:24:bd:e0:d3:da:50:82:ae:7e:70:ad:eb:d6:06:
e4:15:24:ab:38:29:c9:78:2b:83:d8:36:d2:18:68:
6d:46:1b:67:a1:a4:e1:be:30:87:e9:6c:7b:b2:2e:
47:8e:75:a7:70:93:de:49:8f:ce:bd:c9:f9:36:ee:
cb:51:26:f5:c1:00:18:c6:db:88:3e:dd:74:db:c7:
de:af:fb:d6:b8:81:0b:4b:e0:ed:a1:0f:8d:eb:58:
eb:42:3a:43:39:fb:ab:4c:15:76:35:92:22:d0:d0:
ae:30:b4:fa:79:9b:f6:c3:2c:c6:45:ba:0d:b1:cf:
23:f7:6d:78:e1:40:e6:b5:a4:07:24:8a:bd:00:16:
0a:a3:6b:7a:3a:44:61:de:e5:9d:67:18:43:27:79:
36:8b:50:2e:89:5f:ec:ca:70:12:ca:d0:f0:fb:d5:
a8:42:6c:0f:dd:cd:cc:a2:52:3c:26:a2:68:5f:bf:
e1:c1:7f:8b:5d:dc:58:dd:a3:bb:8b:e3:63:47:03:
21:9f:7b:a1:28:38:58:49:9d:df:7d:95:c4:22:e6:
be:d1:8d:c0:b4:ad:99:71:6a:1f:e6:4a:72:ea:93:
ee:a8:43:1f:83:7e:7e:ad:1e:76:0e:dd:e3:e0:92:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:05:94:DF:48:01:98:13:8A:CE:F5:23:4D:E4:1B:10:DF:2D:53:A3
X509v3 Authority Key Identifier:
keyid:D2:DE:05:D3:CA:75:0D:D5:C2:7E:EB:FA:55:39:C2:0B:7D:28:29:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t4F08p1DdXCfuv6VTnCC30oKc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/UgWU30gBmBOKzvUjTeQbEN8tU6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/0t4F08p1DdXCfuv6VTnCC30oKc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.184.0/22
Signature Algorithm: sha256WithRSAEncryption
19:35:ac:64:16:55:8e:1a:7b:0e:09:2f:a5:2c:8b:f6:43:5a:
04:f4:29:15:96:3e:6d:d4:27:80:f2:85:b3:d4:5d:21:04:cf:
7a:b3:93:86:56:4c:b7:49:b4:ef:73:ea:13:8f:db:f2:07:69:
18:e0:d5:1a:ed:97:d7:68:6a:2a:3c:f3:4b:f7:4b:c2:20:82:
14:ae:27:5f:aa:6c:c8:6d:a6:06:6d:7b:bc:d1:61:db:87:94:
25:55:7c:c3:5a:04:19:ab:a1:0e:14:4d:cc:bf:52:3f:94:f5:
ee:29:f5:7f:57:fa:0b:cc:a9:0b:e6:da:af:67:02:8a:a9:17:
41:e6:a5:6b:4e:bf:b2:f2:a2:a6:7b:fe:fd:5b:7e:46:8b:85:
5c:c8:d4:82:c0:22:2a:5f:ac:9b:a9:e2:87:80:b8:89:fb:3f:
d7:f0:7a:8b:9d:78:d5:48:5c:32:1d:cc:7a:bb:5a:6a:42:9a:
43:c2:a8:14:f7:2b:8e:7d:d2:71:25:52:bb:f2:df:b4:c3:bf:
00:99:af:d9:05:e7:8a:f1:2b:5e:ce:34:85:e0:6d:0f:07:f5:
68:95:b1:1e:ad:0c:24:aa:c9:b3:de:e0:4f:9a:80:56:59:98:
8c:cd:80:34:7b:37:08:af:06:22:8b:ab:60:5b:00:4d:e7:0a:
57:c4:09:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 13:39:54 2024 by rpki-client on console-fra.rpki-client.org