Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/uNOG4ncGl_eHTfkPGL5ucxSBa2M.roa
File: uNOG4ncGl_eHTfkPGL5ucxSBa2M.roa (raw, json)
Hash identifier: BHGEUASaJy1tVsbSta4IuJbANc/pSYUSfEN0YqaVeL8=
Subject key identifier: B8:D3:86:E2:77:06:97:F7:87:4D:F9:0F:18:BE:6E:73:14:81:6B:63
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 0186FFDC83D6376A921AB50BAD27DE184B0B
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/uNOG4ncGl_eHTfkPGL5ucxSBa2M.roa
Signing time: Mon 20 Mar 2023 16:31:27 +0000
ROA not before: Mon 20 Mar 2023 16:31:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15547
IP address blocks: 81.88.176.0/20 maxlen: 20
81.88.176.0/21 maxlen: 21
185.17.176.0/22 maxlen: 22
213.221.128.0/19 maxlen: 19
195.162.164.0/23 maxlen: 23
195.162.167.0/24 maxlen: 24
185.17.108.0/22 maxlen: 22
2a03:4380::/32 maxlen: 32
2001:14a8::/32 maxlen: 32
2a02:26a0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 20 Mar 2023 16:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:dc:83:d6:37:6a:92:1a:b5:0b:ad:27:de:18:4b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Mar 20 16:31:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8d386e2770697f7874df90f18be6e7314816b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:62:53:f6:15:bd:8f:d0:a7:92:cd:47:02:
60:d0:ba:30:e6:9e:bd:fc:5a:da:84:7a:80:88:06:
e9:ae:18:f7:c7:5e:92:cc:10:09:5f:6c:2b:db:2a:
44:c4:05:f8:47:ba:bd:4c:4c:b8:2d:30:ef:74:16:
20:23:8b:f3:9f:2f:f4:a8:26:d4:36:f2:ed:71:7a:
ea:1f:81:39:f6:4a:4d:be:f4:fb:95:35:57:a6:d3:
d9:36:b4:9c:d9:d6:43:7f:d6:20:da:fb:3b:5e:d1:
03:54:27:be:aa:ee:2e:28:03:30:c7:bc:0e:f8:17:
29:67:76:bb:08:8f:af:3e:de:09:b8:93:94:ed:84:
22:10:28:d5:0a:1a:75:69:a4:2a:75:a0:e5:fb:62:
76:44:03:90:d6:74:a2:5d:5e:5c:b1:80:3f:65:6b:
3a:c8:78:ec:f2:d6:69:b9:ab:a8:14:cd:9d:91:4b:
86:e6:ab:17:76:c6:f2:07:00:06:b6:f7:fb:28:c9:
61:64:97:e3:0b:ca:f6:12:a4:07:c2:e6:30:ea:02:
89:0b:a2:3d:48:8c:1d:e3:49:5f:f5:31:7b:ca:31:
5d:6e:ef:70:fb:a5:63:1c:2f:31:1d:58:04:0e:2d:
2f:41:5b:0f:5c:93:24:17:73:37:14:a4:5c:ad:ff:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D3:86:E2:77:06:97:F7:87:4D:F9:0F:18:BE:6E:73:14:81:6B:63
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/uNOG4ncGl_eHTfkPGL5ucxSBa2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.176.0/20
185.17.108.0/22
185.17.176.0/22
195.162.164.0/23
195.162.167.0/24
213.221.128.0/19
IPv6:
2001:14a8::/32
2a02:26a0::/29
2a03:4380::/32
Signature Algorithm: sha256WithRSAEncryption
78:26:2b:54:2e:8b:cf:3b:66:91:37:34:b5:db:87:7a:11:9e:
ac:31:8f:30:49:bf:cd:00:e0:6d:6e:77:bd:c3:12:37:87:0b:
3d:c3:01:f6:09:71:db:b3:d4:1d:eb:a7:63:14:b8:3e:05:17:
82:e1:40:d0:e1:74:57:35:ac:d1:cc:be:dc:ca:77:94:53:58:
99:5a:29:c6:06:f9:96:ee:c4:0b:56:04:09:3b:2b:fd:e7:e0:
b7:30:8f:11:b1:59:f2:26:b0:80:d6:c4:b7:02:76:04:84:73:
97:97:9a:e3:a2:3e:ea:33:a9:d6:70:c1:71:28:67:d1:95:e0:
56:47:a7:7c:d7:c3:a0:8c:b5:b8:27:a3:8d:63:bc:92:7d:32:
e9:4f:c6:62:47:d4:d8:3b:4e:5b:00:e1:70:73:f2:69:24:ef:
d2:b8:12:14:30:9b:d5:68:9d:87:ac:d6:2a:c6:88:22:af:fb:
20:2d:ca:bc:3b:45:fa:82:4e:6e:f8:da:59:d4:93:45:18:14:
bd:3e:bc:24:8e:01:d3:14:a4:66:80:e6:e5:08:cf:b7:e8:d1:
fa:f9:2a:27:a6:3e:ac:c9:c2:87:6d:0f:f6:22:50:3e:07:3d:
67:ae:0b:0b:18:96:30:24:30:ac:bc:f4:49:c1:39:6a:0d:da:
2b:ae:e1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:33 2024 by rpki-client on console-fra.rpki-client.org