Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UYmw8sFFCxV_Nler3_UNbS786Lw.roa
File: UYmw8sFFCxV_Nler3_UNbS786Lw.roa (raw, json)
Hash identifier: JiziqF3YhRobguomjC69j/s2lWujd/tGS5Uy5U0Hpf8=
Subject key identifier: 51:89:B0:F2:C1:45:0B:15:7F:36:57:AB:DF:F5:0D:6D:2E:FC:E8:BC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01878E9105A42B0A3DB369804856D1784514
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UYmw8sFFCxV_Nler3_UNbS786Lw.roa
Signing time: Mon 17 Apr 2023 09:34:41 +0000
ROA not before: Mon 17 Apr 2023 09:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26383
IP address blocks: 193.124.22.0/24 maxlen: 24
62.76.234.0/24 maxlen: 24
194.87.47.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
194.58.68.0/24 maxlen: 24
194.87.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:91:05:a4:2b:0a:3d:b3:69:80:48:56:d1:78:45:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 17 09:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5189b0f2c1450b157f3657abdff50d6d2efce8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:0d:54:a9:62:fc:6a:c3:49:a3:ce:82:38:
b0:30:f2:1b:d6:79:94:f9:da:2c:ea:77:92:ec:3f:
d2:96:23:28:c6:89:7e:84:fe:ba:eb:2a:d4:62:f1:
96:2b:0c:72:cc:55:7d:d4:a9:8e:82:0b:c0:8f:94:
58:b4:7d:84:7b:27:85:1f:d6:9f:ab:eb:a4:f0:05:
17:2b:7e:bd:59:fd:76:36:8f:ed:03:9a:7b:59:aa:
91:c5:ed:43:d2:e0:86:48:26:05:e8:e5:71:f0:c2:
2c:f4:b7:4b:f6:72:a2:be:db:d3:40:97:e2:fb:22:
04:4e:00:cb:c5:6a:76:cc:9c:f3:db:34:44:e2:78:
a8:f3:60:56:8b:bb:e7:92:7e:2a:7a:d5:e5:32:9b:
e0:af:d9:ee:fe:18:9c:a7:be:ce:0e:02:b1:df:ef:
c8:c9:a0:0f:92:81:35:2d:54:7d:0b:b2:db:33:74:
3b:05:9e:70:15:43:76:e3:a0:cd:8f:73:2a:0a:c5:
ec:c0:81:c7:e2:8c:e8:f5:c9:5d:0c:b4:e1:a6:c6:
94:55:19:c3:06:41:f9:30:2d:73:6d:81:d3:43:75:
d6:cc:ac:5e:6b:c3:f2:a6:ed:cc:26:bf:e4:27:f0:
69:b4:f5:3e:4d:be:77:7b:31:9b:57:75:bb:fc:73:
52:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:89:B0:F2:C1:45:0B:15:7F:36:57:AB:DF:F5:0D:6D:2E:FC:E8:BC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UYmw8sFFCxV_Nler3_UNbS786Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.234.0/24
185.72.8.0/24
193.124.22.0/24
194.58.34.0/24
194.58.68.0/24
194.87.47.0/24
194.87.189.0/24
212.192.12.0/24
212.192.15.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b1:46:20:3f:91:58:2e:d5:e8:20:a0:85:dd:8c:f0:33:5e:
c7:a4:0a:3d:a3:53:c0:da:1b:0e:86:20:4e:77:9d:5b:41:e4:
95:33:b6:ab:74:7f:8a:f6:f0:8c:73:69:e2:e3:df:7b:5e:87:
a8:5d:8b:20:66:bf:60:3c:b7:5e:b3:be:b3:74:47:33:bf:ab:
f4:93:01:1f:09:c2:4b:0b:93:29:5a:37:6d:8f:05:16:69:21:
66:28:90:95:08:78:ac:82:87:07:bf:17:4e:55:7f:6b:f9:36:
66:2a:ce:da:54:47:eb:a1:ff:c6:fb:b5:3e:00:a8:86:48:9c:
4c:01:d6:57:c7:a3:84:7d:4f:fb:45:c0:06:90:64:ce:1c:9a:
84:66:5b:21:c8:1b:da:0d:17:b8:0f:34:a9:50:00:1e:90:bc:
6a:6f:94:ec:5d:14:57:34:23:50:5e:ce:a3:5a:04:59:3a:1a:
7c:0b:d2:c1:0e:ca:c3:8b:9d:ce:50:97:e6:9f:a4:7c:de:c9:
34:c5:87:45:0c:25:54:c9:59:a8:61:a1:69:c5:02:76:2c:bc:
c8:79:f5:67:17:e2:e1:fe:44:12:6d:8e:e5:fe:df:60:b2:d7:
58:8f:ad:e7:34:c7:2c:3b:4f:51:99:d7:0d:d8:4e:18:2f:a4:
e8:29:79:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:04 2023 by rpki-client on console-fra.rpki-client.org