Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/UHrEcCSeI7qKXQtKd6iq_89TlJI.roa
File: UHrEcCSeI7qKXQtKd6iq_89TlJI.roa (raw, json)
Hash identifier: Yt/utHy7n9gS2yVsjaqFz14H0dl/3wRgG6giOWdXZEo=
Subject key identifier: 50:7A:C4:70:24:9E:23:BA:8A:5D:0B:4A:77:A8:AA:FF:CF:53:94:92
Certificate issuer: /CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Certificate serial: 018A2677CC3D911BE6A4DC2ADFCFA99A4169
Authority key identifier: 44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/UHrEcCSeI7qKXQtKd6iq_89TlJI.roa
Signing time: Thu 24 Aug 2023 07:34:59 +0000
ROA not before: Thu 24 Aug 2023 07:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201183
IP address blocks: 94.156.156.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Aug 2023 19:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:26:77:cc:3d:91:1b:e6:a4:dc:2a:df:cf:a9:9a:41:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Validity
Not Before: Aug 24 07:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=507ac470249e23ba8a5d0b4a77a8aaffcf539492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1c:b1:c2:1b:87:38:1f:8f:9a:58:a9:a8:f3:
25:82:3a:16:a2:5f:f1:04:7e:6c:fa:1e:bc:b7:b8:
a2:c0:7b:0f:08:5a:7c:46:a1:56:8f:18:a9:5a:9e:
00:9f:e3:62:3a:da:cd:0f:35:53:3e:42:61:65:83:
5b:70:21:78:16:f5:df:30:21:34:d2:28:49:90:8f:
69:f7:8c:c0:f7:d8:15:87:fb:06:2d:4c:fb:e1:f0:
07:0c:16:e7:7f:16:bd:7b:58:d8:13:52:03:68:99:
f8:d1:12:33:9f:2c:c3:a7:03:94:85:a4:0f:41:74:
5d:7a:eb:39:48:49:1b:c1:b6:e7:33:02:95:4d:3a:
78:72:89:89:3f:b9:75:18:ff:62:47:0a:bd:23:c2:
f0:ad:cd:c6:ef:06:21:11:d4:b0:6e:26:4a:7b:5c:
e9:86:5a:f3:28:86:25:3b:11:21:b7:fd:65:66:90:
0f:22:bf:5c:a3:d1:17:e4:b6:bf:a8:d6:69:74:49:
a3:af:db:15:8e:da:96:04:79:76:1b:24:fb:f3:d2:
f7:bd:8c:63:1a:16:49:a9:e2:ab:6c:41:7a:15:26:
d0:f2:1a:f7:e6:9e:16:ef:4f:24:aa:3e:1f:11:e5:
72:b3:e5:e9:15:91:a8:e3:72:20:b9:06:cd:82:d5:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7A:C4:70:24:9E:23:BA:8A:5D:0B:4A:77:A8:AA:FF:CF:53:94:92
X509v3 Authority Key Identifier:
keyid:44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/UHrEcCSeI7qKXQtKd6iq_89TlJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.156.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:97:03:38:0c:c4:27:9b:51:35:28:b1:c0:16:9d:b0:69:84:
be:fa:b1:2d:e3:90:18:07:b9:9c:c2:9b:13:82:5e:9d:fd:77:
57:85:e2:74:a2:01:23:f1:39:ec:82:e0:e5:f2:1e:3a:d8:b0:
29:c6:77:c4:9e:b1:73:20:c7:9a:4f:0e:22:19:48:51:e7:f0:
a2:47:57:5c:54:5f:b8:bd:2f:6a:10:b7:13:5f:af:55:41:02:
86:13:1f:31:52:88:4b:1c:3d:5e:91:39:ff:ba:c6:22:63:c4:
f2:b9:dc:03:b0:d3:8e:78:ae:db:d9:a2:a7:4a:1e:f9:39:7b:
c5:07:58:35:a4:16:a5:ae:e6:13:be:c3:58:57:a3:36:bb:e1:
ec:c3:59:4b:52:5e:9b:45:56:af:91:fe:f0:1d:7c:a6:45:dc:
34:39:9b:87:c4:1e:20:62:9c:03:8c:8a:cf:1b:63:04:21:70:
a5:b1:a0:52:0e:f5:00:8d:f4:a1:2e:01:e2:07:e9:2e:d5:e4:
ec:ed:ca:af:05:8b:90:b2:34:cc:56:93:25:17:e3:47:32:aa:
4d:4c:5a:5f:58:55:7f:17:fe:0c:af:60:da:38:a0:00:a3:93:
fc:f8:21:44:c9:b2:55:a5:62:a0:bb:7c:da:1b:b0:ae:86:3c:
98:a9:0d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:18 2024 by rpki-client on console-fra.rpki-client.org