Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UCH5dhsveIbwtuV0-HpQS5IFm00.roa
File: UCH5dhsveIbwtuV0-HpQS5IFm00.roa (raw, json)
Hash identifier: UrfzrzkKdTGn9qIjELwzLluyQJfbwenwOSN8DhItCbM=
Subject key identifier: 50:21:F9:76:1B:2F:78:86:F0:B6:E5:74:F8:7A:50:4B:92:05:9B:4D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189BB5E7C022450975FDF70B372CF8826A0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UCH5dhsveIbwtuV0-HpQS5IFm00.roa
Signing time: Thu 03 Aug 2023 12:27:58 +0000
ROA not before: Thu 03 Aug 2023 12:27:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3214
IP address blocks: 92.119.124.0/22 maxlen: 24
45.88.88.0/23 maxlen: 24
87.120.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:5e:7c:02:24:50:97:5f:df:70:b3:72:cf:88:26:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 3 12:27:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5021f9761b2f7886f0b6e574f87a504b92059b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0f:f2:f6:ba:fc:7f:cb:89:67:e7:bd:26:a6:
cb:11:c4:38:b3:26:23:d3:de:d6:e5:37:bc:2d:7f:
0c:9b:a6:61:6c:ec:ea:53:47:d8:67:92:d0:2f:4e:
36:2f:b0:d2:3e:f4:97:9c:4f:76:28:09:9f:42:97:
fe:50:81:12:99:8b:a1:16:53:31:02:c2:01:4d:07:
6d:6e:32:12:e2:73:06:5f:6d:8c:7e:06:1a:03:7c:
ef:12:cf:17:48:4d:0d:9c:46:ab:97:53:23:b1:22:
e8:5a:4d:c6:f9:9a:67:97:1a:4b:ad:44:e6:42:8d:
13:28:50:7f:3f:30:c1:ef:67:bb:53:52:93:d6:62:
7e:4d:c0:19:f5:bb:15:03:c4:d2:a0:1a:c4:f4:51:
d5:b7:ec:ec:c8:cd:b5:15:f0:42:1a:fd:04:36:cc:
f6:64:6d:4e:8d:2c:aa:6c:67:99:a3:82:ea:8b:6e:
e6:fa:e5:61:bc:4c:98:82:c0:0f:c0:6e:f0:4a:08:
f6:a6:eb:a3:25:8d:c8:45:1c:93:75:d2:8d:16:65:
1e:36:13:45:63:12:e7:e3:1b:c9:7a:f2:e4:95:1b:
ee:dc:53:a7:be:99:c5:ca:7e:17:ce:56:86:71:38:
03:5c:e2:19:cd:1d:c0:9e:23:03:e0:2f:aa:59:62:
db:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:21:F9:76:1B:2F:78:86:F0:B6:E5:74:F8:7A:50:4B:92:05:9B:4D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UCH5dhsveIbwtuV0-HpQS5IFm00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/23
87.120.218.0/24
92.119.124.0/22
Signature Algorithm: sha256WithRSAEncryption
27:ca:83:6a:0f:4a:d5:36:41:d2:70:fc:c2:3b:4c:c7:bf:ee:
93:e6:af:6e:b9:d6:18:ae:8c:77:51:4e:0d:89:0c:22:97:3f:
07:d2:ea:2f:34:b2:4a:9f:83:88:fb:5d:70:4c:15:50:da:a5:
2b:0b:2c:fd:08:a8:c6:0d:67:06:3b:46:77:37:4e:e0:63:5f:
cc:99:51:2e:41:15:2d:c4:dc:b7:99:3e:37:e7:b1:8a:c7:e0:
00:5e:8b:82:c9:4d:1a:56:90:67:e0:b4:0a:21:70:25:73:bd:
48:15:78:60:72:33:e2:ce:18:7f:1a:9b:92:b7:30:31:7f:61:
77:ba:ea:03:41:51:f0:c9:ac:bf:9c:7d:0d:6f:7f:29:a5:4a:
20:c0:83:47:5e:55:89:4f:ff:14:3e:09:b7:e8:a4:a7:54:f3:
a6:5a:28:18:f1:9f:f9:5f:c0:5d:7a:04:d2:50:e9:c9:c4:be:
1a:b1:6f:88:b9:dd:87:22:16:ee:e5:62:d3:fc:96:20:3c:8d:
0c:7a:2b:5b:69:cf:9c:42:c2:95:b5:dd:be:81:93:73:67:87:
0c:de:d2:7a:7f:06:2e:28:98:17:cf:16:46:e2:a6:3d:ce:78:
ce:c4:dd:6a:74:f2:ce:7a:98:82:d2:8d:c2:fd:a5:82:bb:c6:
8d:b7:68:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 06:54:35 2023 by rpki-client on console-fra.rpki-client.org