Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uno_PCoEwph8DE9oW0HEw9FXpH8.roa
File: uno_PCoEwph8DE9oW0HEw9FXpH8.roa (raw, json)
Hash identifier: NM1SGYVaBKeRM4p42/ToYYk10yynbKfAoJ49UwPaQaM=
Subject key identifier: BA:7A:3F:3C:2A:04:C2:98:7C:0C:4F:68:5B:41:C4:C3:D1:57:A4:7F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CEDA3732C5B4CF087E357032926AEFD29
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uno_PCoEwph8DE9oW0HEw9FXpH8.roa
Signing time: Tue 09 Jan 2024 09:52:41 +0000
ROA not before: Tue 09 Jan 2024 09:52:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 91.92.26.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
93.123.75.0/24 maxlen: 24
45.8.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 14:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:a3:73:2c:5b:4c:f0:87:e3:57:03:29:26:ae:fd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 9 09:52:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba7a3f3c2a04c2987c0c4f685b41c4c3d157a47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:6f:ee:40:87:3f:6b:62:eb:f4:7d:4c:90:
97:cf:af:55:7f:43:37:a2:a7:8c:1f:7f:7a:12:95:
aa:2a:13:99:89:5e:2a:ea:4c:22:0b:8d:98:c8:71:
67:c6:87:90:cb:56:dd:6a:ce:fd:2c:58:4e:e9:64:
94:9a:e6:92:3e:ee:6d:6e:7a:aa:ef:e9:39:06:a7:
b7:14:e0:8c:39:5c:c8:ef:27:63:61:be:d5:c6:ae:
8c:49:c9:db:f3:64:05:88:bf:03:f6:3b:19:08:9b:
ae:96:43:a2:5e:9c:71:aa:9f:1e:bd:fc:e1:96:a4:
8d:70:6a:fb:2e:d5:13:5b:15:f4:ee:fc:1c:6d:fc:
2e:a7:bd:69:f9:70:28:1a:df:e4:c5:e9:9f:98:2d:
b0:a7:59:fc:be:01:73:ad:fd:3b:f6:2d:42:2c:4a:
c4:4b:a1:7c:0b:25:4f:9a:64:3b:0f:eb:ef:95:d5:
cd:69:71:25:7d:03:f1:9e:74:4d:5c:41:67:62:de:
79:88:3a:aa:02:d4:56:39:a8:9f:a2:51:7c:ef:b5:
39:b6:11:96:88:e2:a8:08:03:f7:cd:b1:27:3f:61:
04:f5:02:ef:b8:65:92:ec:8b:82:93:5b:27:3f:1e:
09:02:52:67:18:fe:95:15:32:85:d7:14:c7:ee:dd:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7A:3F:3C:2A:04:C2:98:7C:0C:4F:68:5B:41:C4:C3:D1:57:A4:7F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uno_PCoEwph8DE9oW0HEw9FXpH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/24
87.120.192.0/23
91.92.26.0/24
93.123.75.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:33:fc:7e:42:81:e0:c0:99:30:9d:18:9c:5d:80:14:6f:52:
97:64:7f:5a:ec:da:b3:9b:25:1c:64:b5:2c:04:db:45:4a:ab:
da:6b:8d:a5:74:e5:fb:e0:4e:06:c5:4b:ed:12:0b:c1:65:78:
71:38:f4:16:2c:d3:23:e5:18:5f:72:85:88:6a:c9:33:22:b4:
6e:6e:d3:11:79:20:6b:2f:41:02:21:d6:5a:91:1a:88:ca:69:
58:66:35:80:e4:ef:cf:21:ff:ed:d5:9c:db:0a:f4:97:b6:16:
65:a5:c3:52:94:9f:01:21:74:2e:b0:c5:b9:e6:7a:28:6d:94:
4f:7b:ee:04:5c:15:71:e1:36:af:94:67:c0:ca:38:b7:97:26:
16:1f:47:47:b0:b9:48:98:5e:e5:70:db:2c:e5:89:07:d7:6a:
5f:d4:6e:11:74:ca:8c:c0:6a:6a:5d:9f:f4:1f:d3:03:ef:ac:
1e:14:b6:85:e6:dc:a5:ca:02:74:b1:94:27:c8:be:58:42:b9:
7c:88:e4:bd:c0:df:7e:85:96:2c:92:b1:02:ce:39:7c:4f:d0:
a0:5e:00:a6:d3:87:4a:32:ec:50:2d:2c:f2:5b:95:9f:cf:24:
91:7f:7b:75:b7:e0:6d:a3:cc:eb:bc:14:bd:00:38:7b:df:f7:
cb:ec:fe:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 18:24:24 2024 by rpki-client on console-ams.rpki-client.org