Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UJFCFs4t8AYn7dqTr0n3nzG-iJ0.roa
File: UJFCFs4t8AYn7dqTr0n3nzG-iJ0.roa (raw, json)
Hash identifier: TA4/S/dhImzhGLoWoXP11ZdqW4MoynDfzudSVBVJoqI=
Subject key identifier: 50:91:42:16:CE:2D:F0:06:27:ED:DA:93:AF:49:F7:9F:31:BE:88:9D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A5A77A3D9873555EAD7C90E978076D47C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UJFCFs4t8AYn7dqTr0n3nzG-iJ0.roa
Signing time: Sun 03 Sep 2023 09:55:04 +0000
ROA not before: Sun 03 Sep 2023 09:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 193.124.4.0/24 maxlen: 24
195.133.78.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.20.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5a:77:a3:d9:87:35:55:ea:d7:c9:0e:97:80:76:d4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 3 09:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50914216ce2df00627edda93af49f79f31be889d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:3e:84:86:c5:50:d8:05:c4:39:bb:78:f0:
3e:90:13:37:07:ed:44:0e:7d:da:88:02:95:0f:45:
3d:99:56:f3:cb:ea:cf:93:7d:31:0e:88:16:5f:85:
31:cb:6c:c3:1a:ae:0e:38:47:45:3b:24:85:dc:2c:
61:f1:72:cb:9c:67:8f:a5:52:f1:8f:65:16:da:74:
5d:7d:0d:cb:41:23:9d:40:7e:fd:89:ba:e6:c6:42:
18:90:48:42:ec:d5:75:4e:13:51:54:f8:fa:24:ef:
c9:36:33:bd:44:df:a3:37:ae:88:a4:ba:1c:6c:bc:
e4:2b:11:c1:da:f4:0a:2a:cc:28:b0:f5:c8:b8:a6:
00:bf:98:db:2c:53:8e:05:47:ab:65:70:b2:ca:9b:
a9:e8:80:5e:48:9d:e9:9d:cd:27:8b:3f:dc:b7:e7:
cb:a8:ef:06:1e:bf:22:d5:8c:8a:4e:a9:ad:76:69:
5e:f0:41:d6:2e:78:5c:d0:8b:c4:34:65:ff:ae:63:
af:d6:8d:77:6a:6e:1e:94:ae:80:f8:d5:51:33:11:
36:7c:d4:c8:fc:e1:5b:f3:9f:b2:01:e4:93:55:d0:
e3:6e:99:d2:b6:64:8c:8e:79:ef:7e:dd:37:22:23:
1e:cc:46:22:10:12:8d:45:bc:e3:74:8a:e6:4d:18:
ac:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:91:42:16:CE:2D:F0:06:27:ED:DA:93:AF:49:F7:9F:31:BE:88:9D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UJFCFs4t8AYn7dqTr0n3nzG-iJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.183.0/24
193.124.4.0/24
194.87.2.0/24
194.87.20.0/24
194.87.30.0/24
194.87.44.0/24
194.87.221.0/24
194.135.105.0/24
195.58.34.0/24
195.58.58.0/24
195.133.35.0/24
195.133.78.0/24
212.192.8.0/24
212.192.248.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:4b:50:73:b5:3f:a0:c6:5d:4b:18:a0:4f:2b:28:45:c0:02:
1c:80:26:a5:e5:ca:77:1a:f2:57:84:ee:ce:be:9a:d1:ca:c9:
bc:2d:9a:c9:82:36:25:40:29:c6:98:20:c4:b5:cf:fb:5c:dc:
d0:a0:40:e1:7f:63:18:7e:a3:c2:01:bd:e3:16:dd:df:fd:e9:
9d:7a:17:3c:f8:cd:3b:d9:b1:6c:fc:46:63:66:a0:42:09:f2:
bc:32:ba:e6:30:33:2d:cc:6d:38:60:bf:a2:fe:32:5f:b3:d6:
9a:62:6d:30:9a:1e:a8:2a:ff:c6:4e:5a:87:16:70:68:3b:cb:
f7:33:14:bf:41:d6:79:fd:33:c6:e9:85:39:84:b2:27:1d:df:
92:24:c5:c9:ea:da:06:3c:53:4d:02:b6:22:67:95:6d:73:61:
6a:b5:6f:33:1a:ea:b9:6f:25:4a:db:15:c3:4d:4a:98:8d:fb:
34:4c:0f:97:8b:86:b8:62:a7:47:19:ef:e5:c0:79:1a:e4:0b:
bc:ca:48:2d:d9:19:53:f5:4b:de:e7:f7:d9:8b:36:ac:74:14:
df:3e:58:2d:e6:a5:9b:73:b9:cb:50:c0:54:52:ef:26:45:39:
03:07:3c:be:21:56:cf:77:28:4b:30:a3:81:08:bb:d6:6b:de:
dd:f6:48:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 10:03:21 2023 by rpki-client on console-fra.rpki-client.org