Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/UP-ZD-4BfZhWuwHc2E520-IwCyE.roa
File: UP-ZD-4BfZhWuwHc2E520-IwCyE.roa (raw, json)
Hash identifier: 4vV2nycMP8TFsjGMEqTEYOxNAej3GN+ooJy5GVpbADk=
Subject key identifier: 50:FF:99:0F:EE:01:7D:98:56:BB:01:DC:D8:4E:76:D3:E2:30:0B:21
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 0189F3ACFF316389F1CDAE63BDE18D8D7725
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/UP-ZD-4BfZhWuwHc2E520-IwCyE.roa
Signing time: Mon 14 Aug 2023 10:52:28 +0000
ROA not before: Mon 14 Aug 2023 10:52:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207728
IP address blocks: 46.28.234.0/24 maxlen: 24
185.162.11.0/24 maxlen: 24
185.162.9.0/24 maxlen: 24
185.162.8.0/24 maxlen: 24
87.236.177.0/24 maxlen: 24
31.210.172.0/24 maxlen: 24
31.210.170.0/23 maxlen: 24
104.192.42.0/24 maxlen: 24
31.210.173.0/24 maxlen: 24
93.88.75.0/24 maxlen: 24
93.88.74.0/24 maxlen: 24
31.10.5.0/24 maxlen: 24
194.146.127.0/24 maxlen: 24
185.204.52.0/24 maxlen: 24
2a12:9cc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 15 Aug 2023 07:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:ac:ff:31:63:89:f1:cd:ae:63:bd:e1:8d:8d:77:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Aug 14 10:52:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50ff990fee017d9856bb01dcd84e76d3e2300b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a4:fa:81:52:88:c6:fc:3b:72:e6:76:a8:da:
5e:e6:35:7c:6e:04:d6:75:53:e2:e5:02:b5:b7:a7:
eb:b9:aa:d3:21:76:39:f6:16:5a:64:0c:2e:65:d4:
30:bf:21:b4:93:d8:20:d8:8b:ad:34:30:6e:56:ed:
e4:25:ea:95:79:fb:85:f7:7d:6b:82:41:97:2c:15:
3d:01:31:5f:5a:1b:63:57:6a:83:ec:b2:24:15:15:
87:a3:8f:47:39:08:13:01:27:ce:2f:34:3c:f6:5e:
99:07:07:98:5f:e8:3b:7f:13:f7:93:a2:3f:6d:61:
4f:e8:f9:32:d2:6b:f4:96:94:6a:3a:9d:ff:c5:ed:
79:9f:98:db:b6:da:aa:2b:fa:1b:71:d1:d1:eb:25:
49:7a:6a:ab:b6:b8:ee:2e:33:e4:64:98:5c:9e:2b:
9a:92:25:65:65:34:a5:d7:ac:be:da:8f:49:4d:39:
b0:bc:c3:69:9f:ae:45:3e:7b:08:32:59:2d:96:e8:
0d:c3:4f:3f:22:36:da:65:6a:43:d6:8c:25:e9:f5:
88:78:90:1c:f1:be:e0:78:2e:6f:64:50:75:d2:2f:
53:11:27:42:2f:70:62:01:a7:d6:ae:70:6a:64:ea:
67:22:af:1c:30:f6:20:d1:58:40:86:f0:db:49:a8:
3f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FF:99:0F:EE:01:7D:98:56:BB:01:DC:D8:4E:76:D3:E2:30:0B:21
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/UP-ZD-4BfZhWuwHc2E520-IwCyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.5.0/24
31.210.170.0-31.210.173.255
46.28.234.0/24
87.236.177.0/24
93.88.74.0/23
104.192.42.0/24
185.162.8.0/23
185.162.11.0/24
185.204.52.0/24
194.146.127.0/24
IPv6:
2a12:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
2d:79:88:9c:9f:76:fb:57:c1:96:d3:8f:64:02:9c:19:9a:d0:
c2:ce:06:51:df:63:36:fc:90:af:45:59:c9:ce:15:46:9c:a4:
d7:50:50:3b:65:4f:45:f5:b8:82:27:33:9a:9c:f5:0b:f0:3d:
32:83:de:b9:04:00:01:10:ec:8b:26:ba:19:3a:e0:83:47:44:
44:4e:df:e0:b2:6d:f1:bd:51:64:97:17:a3:bf:eb:df:61:9f:
a8:f2:f4:b8:e6:ae:76:d0:e6:4b:0b:19:b5:2d:eb:de:05:82:
d7:83:2c:25:a5:fe:8e:e7:10:71:fd:0c:b6:02:c1:f3:82:3a:
ac:aa:ac:7f:25:23:1d:f0:5f:81:c0:d6:4f:cb:99:f8:6a:67:
40:a3:f4:e9:c0:41:6f:a4:95:53:e3:38:03:3d:80:db:b5:e1:
3c:a2:ec:a1:4d:fa:94:e7:d8:ba:75:92:66:4e:40:d4:6c:9f:
b5:80:52:20:a6:59:0a:3b:f8:56:a6:7e:a2:f2:c0:76:ca:ec:
00:bd:33:0a:11:97:c4:d3:79:43:ab:cf:ee:db:b4:38:af:cf:
53:54:37:bd:31:b4:9b:9d:03:81:3e:a6:5b:c1:fa:1e:68:6c:
7f:99:95:cc:98:6c:cd:5b:fa:b7:40:bf:1a:36:95:76:a5:0f:
86:1e:bf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:03 2024 by rpki-client on console-fra.rpki-client.org