Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UAHFR2Z_bJF4S7cJKk0P6t57t00.roa
File: UAHFR2Z_bJF4S7cJKk0P6t57t00.roa (raw, json)
Hash identifier: PWRLgChF9S/CInTNxvxWPDChNn2r0FGAFN4pgAMBDhQ=
Subject key identifier: 50:01:C5:47:66:7F:6C:91:78:4B:B7:09:2A:4D:0F:EA:DE:7B:B7:4D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A97F098DBD58622C482082E3C6331217D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UAHFR2Z_bJF4S7cJKk0P6t57t00.roa
Signing time: Fri 15 Sep 2023 08:24:01 +0000
ROA not before: Fri 15 Sep 2023 08:24:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49217
IP address blocks: 212.115.41.0/24 maxlen: 24
45.84.222.0/24 maxlen: 24
45.88.89.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
87.120.33.0/24 maxlen: 24
185.226.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:97:f0:98:db:d5:86:22:c4:82:08:2e:3c:63:31:21:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 15 08:24:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5001c547667f6c91784bb7092a4d0feade7bb74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:d9:0a:c5:e6:d1:e0:82:91:98:a6:82:c5:
04:7c:c0:1f:24:26:f6:28:73:02:8b:ed:7d:b3:ce:
2f:af:02:95:cb:a1:af:ca:c6:02:5a:5b:2e:47:57:
9e:e0:1d:b5:62:0b:e8:60:90:10:af:51:22:1d:57:
5d:1c:77:86:24:e7:c1:5e:d1:60:70:c0:a9:05:7e:
14:73:65:20:d1:db:7b:0a:19:39:b9:4d:12:32:a2:
0c:f2:30:62:67:d2:f9:1c:5a:95:60:57:da:59:56:
ed:6e:49:42:1a:08:6c:e2:6b:10:98:25:98:43:29:
d6:ef:60:0b:33:e0:81:23:ea:e2:36:27:6d:36:68:
c7:20:83:36:9f:f0:45:3d:c5:11:c5:da:56:b5:24:
08:92:e4:73:81:51:fc:62:8e:d8:61:df:84:69:35:
2b:36:cd:bc:80:45:06:8e:59:08:52:45:9a:58:01:
bf:83:08:2d:19:14:74:2d:13:02:1c:13:04:b6:23:
a1:40:70:dd:c1:9d:66:6a:ef:1c:c6:16:82:d5:5a:
54:2f:f0:24:b7:da:8b:a3:61:91:a3:d4:4e:0a:de:
f8:29:23:9e:38:25:7f:b9:a1:bc:f8:3b:66:a4:81:
2d:19:37:d6:fe:56:32:a8:75:89:6c:fc:c4:55:f7:
aa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:01:C5:47:66:7F:6C:91:78:4B:B7:09:2A:4D:0F:EA:DE:7B:B7:4D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UAHFR2Z_bJF4S7cJKk0P6t57t00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.222.0/24
45.88.89.0/24
87.120.33.0/24
94.156.176.0/24
178.215.237.0/24
185.226.173.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:17:20:ae:1a:57:88:6b:78:6e:fc:ee:88:e3:4e:13:4d:ad:
3b:9f:40:bb:58:d0:6e:96:6f:39:0f:48:b8:15:69:d5:2d:66:
09:20:5b:59:d8:89:ff:9e:cb:cc:9d:6f:b5:12:3b:0a:46:27:
96:40:34:0f:26:3d:12:d6:a5:cf:eb:34:c4:c1:c5:37:c3:cb:
a5:92:1f:c7:49:0a:53:d2:7d:db:8e:0d:cb:e3:b0:a7:87:6b:
47:de:d6:7d:9d:7b:cd:b4:97:92:f5:a9:59:ea:38:0c:d2:a9:
60:ab:8f:5e:4b:b5:0a:fb:2c:56:62:64:63:18:4c:34:33:13:
b2:dc:5a:9f:90:c1:3c:02:d8:e8:c2:01:eb:49:d9:2f:5e:71:
40:a9:db:7a:b6:2f:2b:21:b9:b3:df:93:c0:d9:85:48:1a:7d:
2a:51:89:a6:2b:bc:a2:11:fc:f2:8d:14:2f:e8:5e:28:32:5e:
1d:33:45:a0:41:29:77:e3:f3:29:4f:5d:8a:8b:ed:ed:e2:2e:
ca:02:a2:e5:7a:e9:f2:eb:41:1b:6d:d4:91:7b:e6:3a:f7:3b:
c0:34:f2:0e:1f:8c:5b:bc:d5:bd:2b:33:19:03:8f:9e:dc:85:
37:58:77:a8:45:91:49:21:ec:30:28:f1:75:0a:62:8e:46:b3:
d3:3f:58:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 13:39:40 2023 by rpki-client on console-ams.rpki-client.org