Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UmPZt9AHrd035XZ8tUDD5WBi-OI.roa
File: UmPZt9AHrd035XZ8tUDD5WBi-OI.roa (raw, json)
Hash identifier: vXGKCdBSncNWS0z2PczW9IUgirWhlL9lOvQdnz3/9DM=
Subject key identifier: 52:63:D9:B7:D0:07:AD:DD:37:E5:76:7C:B5:40:C3:E5:60:62:F8:E2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81FC88453F06240FEE01682017195B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UmPZt9AHrd035XZ8tUDD5WBi-OI.roa
Signing time: Sun 01 Jan 2023 13:25:13 +0000
ROA not before: Sun 01 Jan 2023 13:25:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198228
IP address blocks: 94.156.3.0/24 maxlen: 24
87.121.34.0/24 maxlen: 24
87.121.35.0/24 maxlen: 24
87.121.35.1/32 maxlen: 32
91.92.194.0/24 maxlen: 24
2a00:1728:24::/48 maxlen: 48
2a00:1728:d::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:fc:88:45:3f:06:24:0f:ee:01:68:20:17:19:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5263d9b7d007addd37e5767cb540c3e56062f8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a0:16:eb:72:97:2d:81:3c:54:6c:33:43:81:
b9:cc:3a:9d:e3:25:32:96:6c:ae:52:83:9e:08:ea:
14:42:51:50:0e:53:73:6c:76:81:3e:3e:dd:bc:b5:
55:db:a6:6e:81:ce:01:00:e4:25:ad:a0:d8:20:be:
2e:8f:a6:88:98:88:de:7f:8a:66:58:4e:8d:85:c4:
6a:b3:23:16:d4:58:b6:61:d3:6b:f3:63:6b:73:3b:
d3:c4:79:f8:e4:96:62:db:94:ed:ae:2c:6b:e0:4d:
94:2f:7b:13:f9:cc:f6:8f:73:e1:e2:3c:7b:3b:32:
80:10:22:8f:c6:7b:48:24:12:6a:32:eb:e0:e4:35:
24:0c:72:6b:4a:e4:c7:e7:16:6f:e7:7c:0d:76:d4:
1d:7c:62:1e:50:92:79:af:16:a2:64:33:ee:66:f7:
49:34:2a:20:21:7a:57:da:14:5a:63:d8:3d:df:cb:
e9:e3:dd:51:00:5a:28:a3:57:4d:81:5a:71:a0:4f:
1c:c9:5d:2a:63:6b:c4:e7:41:3a:21:d1:6a:56:8d:
05:d6:f9:af:4d:20:de:e6:d1:c1:bb:ba:e8:62:d8:
43:4d:db:30:0d:87:cc:63:7e:f2:df:f8:29:db:61:
6d:75:82:fa:fa:66:74:20:1b:79:b5:f2:37:35:bc:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:63:D9:B7:D0:07:AD:DD:37:E5:76:7C:B5:40:C3:E5:60:62:F8:E2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UmPZt9AHrd035XZ8tUDD5WBi-OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.34.0/23
91.92.194.0/24
94.156.3.0/24
IPv6:
2a00:1728:d::/48
2a00:1728:24::/48
Signature Algorithm: sha256WithRSAEncryption
a4:6c:7e:bb:23:20:a9:e0:0b:1e:55:74:b5:f0:9c:2e:93:d8:
45:4c:1c:4e:be:1b:d4:f2:b1:b7:87:76:35:69:9e:1c:b5:e5:
5b:a9:36:f0:9a:10:06:2f:98:6a:59:ba:32:6c:86:d1:76:6c:
a7:b4:23:f1:7c:a3:b8:a4:9a:53:f7:1d:c3:83:76:0b:f7:40:
eb:ed:71:51:fd:76:cd:68:f8:4e:d7:80:17:de:cb:fa:8e:bf:
d6:f7:9f:da:ca:11:1d:d5:a9:54:13:20:4b:4c:a7:29:3f:ae:
50:47:b2:3f:26:19:4d:7c:67:54:ba:0b:e9:d3:0f:ef:ca:f5:
10:74:6c:86:ba:d4:b8:c6:1c:5d:de:ca:5b:ca:9a:ef:75:c0:
70:f3:93:78:be:ae:db:3e:b6:ef:b8:3c:b3:53:93:1f:ea:c8:
a3:f0:69:62:6e:22:1c:28:66:79:46:84:a6:e6:cd:be:7c:13:
f3:37:6f:16:54:7e:7a:33:35:fe:74:d9:d5:e7:5e:6c:00:07:
02:4f:83:39:8f:90:16:d2:44:66:3a:20:20:17:5b:6f:6a:08:
c5:64:ca:9e:fa:db:ea:9f:ff:71:db:81:00:83:81:81:5a:31:
c4:e7:57:23:34:92:99:c6:d1:39:4b:f0:a8:9e:b4:a2:cc:7c:
cf:15:92:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:11 2024 by rpki-client on console-ams.rpki-client.org