Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UMMT2EZC87XruelX_js-0N5F3BA.roa
File: UMMT2EZC87XruelX_js-0N5F3BA.roa (raw, json)
Hash identifier: JeRUm75HgwoY9wSVad5yxqRuOu9RfL1AvL44i/9xdj4=
Subject key identifier: 50:C3:13:D8:46:42:F3:B5:EB:B9:E9:57:FE:3B:3E:D0:DE:45:DC:10
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018835E5606075DC02E7F5E2F38BF9934EAA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UMMT2EZC87XruelX_js-0N5F3BA.roa
Signing time: Fri 19 May 2023 21:23:24 +0000
ROA not before: Fri 19 May 2023 21:23:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 94.156.6.0/24 maxlen: 24
185.216.68.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
79.110.48.0/24 maxlen: 24
193.42.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:35:e5:60:60:75:dc:02:e7:f5:e2:f3:8b:f9:93:4e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 19 21:23:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50c313d84642f3b5ebb9e957fe3b3ed0de45dc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:21:b8:60:27:fd:56:4c:a0:d0:23:f8:d8:
e4:55:52:ba:f5:b6:dd:42:a8:e2:e5:1c:96:93:b8:
38:cf:b8:e5:8d:65:74:fe:50:1d:4d:8c:cc:f8:15:
79:be:39:42:5b:08:31:f7:67:4a:f3:b0:cc:a7:7a:
7c:a2:c9:cc:48:8d:b6:a1:99:15:90:dc:42:76:a9:
b2:d0:96:d8:f9:66:ba:4f:a6:42:6a:ed:eb:e8:ab:
23:9c:d6:37:5a:2e:b6:1c:0e:67:65:25:96:93:53:
2f:0a:6d:b3:a8:02:28:7f:15:8e:d0:16:30:1a:45:
1f:da:9d:b9:66:ab:55:a1:1a:5c:53:f5:47:76:03:
fd:79:0e:d0:d7:03:06:34:19:1a:e9:aa:97:3d:ed:
33:35:a0:be:83:5f:64:c1:39:ca:6c:c1:11:b8:68:
49:f7:de:67:09:95:83:e6:4c:4b:5f:24:79:10:64:
29:32:2b:8c:b1:ae:94:b0:5d:04:07:d0:5b:43:f6:
ef:63:54:2a:6b:77:48:8d:f3:20:91:c9:a8:e0:b9:
82:81:7b:32:8c:dc:e0:ad:46:3f:92:8c:ec:78:fa:
e6:a2:0d:56:20:0e:32:79:8c:a9:18:c4:da:e4:27:
7e:20:a4:5d:b2:61:5a:f3:fa:41:98:0c:94:25:92:
16:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C3:13:D8:46:42:F3:B5:EB:B9:E9:57:FE:3B:3E:D0:DE:45:DC:10
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UMMT2EZC87XruelX_js-0N5F3BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.48.0/24
79.110.51.0/24
94.156.6.0/24
185.216.68.0/24
193.42.33.0/24
Signature Algorithm: sha256WithRSAEncryption
32:14:4a:a0:e3:52:21:bf:cd:4a:dc:5d:ba:d4:97:2d:6e:2c:
a0:4f:8b:26:5e:6f:3a:d3:f5:81:4d:6b:9d:e0:32:8a:fe:53:
36:45:8f:d3:02:ae:f0:e1:fe:d6:e6:df:51:e6:c5:8c:2d:be:
59:91:49:a7:5d:67:3a:38:89:da:3c:2b:01:6e:dd:6a:62:5f:
29:5f:9c:77:e6:cb:cc:b5:a2:64:0f:8e:c8:d3:f2:7e:af:e6:
75:d0:56:8a:c7:71:4c:0f:39:a4:c7:ee:52:e1:8a:99:19:93:
9f:95:11:4f:30:fb:be:c8:1f:52:b6:d6:77:d1:c5:7d:31:85:
ef:d6:15:60:d2:39:67:d3:c1:2a:2e:49:66:35:ab:3a:d5:ea:
ad:ab:92:1d:64:b2:08:08:e4:fe:53:48:61:9c:4f:d6:d6:53:
52:fc:55:11:bf:b9:c6:24:c7:94:01:24:8b:dc:0a:de:87:8d:
c4:83:71:49:e2:86:4b:4f:55:7b:44:b8:9b:65:6f:b2:e1:9e:
be:7d:2f:ee:43:8d:49:41:42:54:26:eb:f3:b3:ef:c8:1b:85:
35:e6:0c:01:51:2e:63:dd:3c:ea:7d:03:03:4c:97:89:fe:8a:
e7:e1:aa:4d:af:6c:e5:2a:de:07:18:9f:39:25:53:de:9c:a2:
50:ff:67:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org