Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/UIqk88NaOjq5HWNe3cgnCoLQWrk.roa
File: UIqk88NaOjq5HWNe3cgnCoLQWrk.roa (raw, json)
Hash identifier: SEDsJKZlCGBh+xnCin4ZHav4uRgqArwxJ2+De+YY3pk=
Subject key identifier: 50:8A:A4:F3:C3:5A:3A:3A:B9:1D:63:5E:DD:C8:27:0A:82:D0:5A:B9
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 018571FA0A2D269B106BD1AC644628CB1D5A
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/UIqk88NaOjq5HWNe3cgnCoLQWrk.roa
Signing time: Mon 02 Jan 2023 10:14:50 +0000
ROA not before: Mon 02 Jan 2023 10:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207258
IP address blocks: 93.188.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:0a:2d:26:9b:10:6b:d1:ac:64:46:28:cb:1d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 2 10:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=508aa4f3c35a3a3ab91d635eddc8270a82d05ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:a2:12:f9:67:46:d5:7a:65:20:0b:52:41:
5c:89:c0:17:cc:2d:4b:58:a4:88:c9:1a:d6:17:18:
ce:26:7b:b3:3a:e8:4c:b8:db:48:98:dd:49:ca:b2:
7d:7c:72:b9:00:6b:cf:45:0d:05:98:96:cf:09:70:
3b:8b:76:64:ed:a3:6b:0e:a7:95:4b:cd:dc:24:ab:
4c:69:06:96:cf:90:34:40:c3:18:56:d7:86:04:18:
d4:4b:08:3f:0d:ba:3c:a3:6a:a8:c7:ac:5a:e3:79:
e2:94:57:d3:88:58:7f:1a:1f:83:58:d3:51:1b:c1:
c6:6b:aa:d3:6b:01:90:81:c0:ed:3e:f4:62:36:e9:
69:4e:4e:cc:f3:c0:1a:e0:16:81:a9:76:c9:bc:8e:
89:e8:09:82:5a:f7:ae:6c:1d:24:f6:6f:22:1f:a5:
2d:d0:fe:9b:2f:45:72:9c:78:30:57:43:23:4d:b4:
3d:9c:ca:c3:42:2d:21:1c:a7:40:f3:40:8f:3c:a8:
6a:cc:5e:0e:4e:8d:fe:0e:60:b6:33:40:62:34:cb:
c9:04:3f:01:18:1c:0c:14:b2:ea:05:e2:08:a7:bb:
d9:2d:07:62:d3:87:d9:6a:fe:96:f5:ae:8b:09:0b:
21:58:4a:28:53:21:53:1a:45:22:76:e9:6e:7c:72:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8A:A4:F3:C3:5A:3A:3A:B9:1D:63:5E:DD:C8:27:0A:82:D0:5A:B9
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/UIqk88NaOjq5HWNe3cgnCoLQWrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.200.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:41:42:9f:75:00:a0:1e:59:37:68:64:15:cd:ee:de:e8:0f:
7a:aa:cd:81:f5:f5:48:4b:61:9e:db:31:44:c1:2c:8e:a1:77:
8d:76:42:40:e1:9d:25:b5:b2:2a:87:1c:92:b0:3e:e9:d1:4c:
46:27:cf:aa:a9:84:52:40:0c:58:39:cf:e2:a1:94:52:99:d3:
59:b3:26:14:1d:17:fa:88:78:78:8e:19:e8:27:c6:1d:88:bb:
b5:25:fe:89:bd:b0:30:bb:2d:9e:0b:09:dd:6b:c7:ff:ed:30:
f8:0f:87:be:9f:21:18:05:e2:97:8b:f9:c6:c6:28:4d:1b:08:
2f:ec:9d:5f:f0:56:ef:4b:75:9d:50:17:2d:4d:fc:76:2e:2e:
54:50:b2:ea:3b:61:f1:e1:62:7b:f6:50:00:59:33:1a:1c:75:
5d:14:06:c2:2f:73:38:5e:0c:32:62:39:36:17:a9:7a:3b:0e:
c0:3b:f7:e1:5c:58:66:a7:08:93:5a:84:2a:c5:d3:8e:69:c0:
6d:f8:88:39:ce:19:41:10:ee:1c:95:b4:89:c9:d7:85:69:29:
db:7e:ac:3e:88:17:6f:fe:95:22:30:d6:c3:88:b8:fc:96:45:
77:6b:ed:1f:ec:42:c2:3b:da:0d:9c:4d:e4:7c:17:ec:b8:e6:
23:69:28:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:51 2024 by rpki-client on console-fra.rpki-client.org