Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/uoi-IDkQQwyGG__Ney6-Wh_SaMY.roa
File: uoi-IDkQQwyGG__Ney6-Wh_SaMY.roa (raw, json)
Hash identifier: uvPC3qSNOtHimuRx7KRM+WCuFtczmsz8IjxIDZYNBGk=
Subject key identifier: BA:88:BE:20:39:10:43:0C:86:1B:FF:CD:7B:2E:BE:5A:1F:D2:68:C6
Certificate issuer: /CN=01d075a4e5137f879563c58997ca7576b4059ede
Certificate serial: 0186C067E92592449B33F6615ED3DCE9D92C
Authority key identifier: 01:D0:75:A4:E5:13:7F:87:95:63:C5:89:97:CA:75:76:B4:05:9E:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdB1pOUTf4eVY8WJl8p1drQFnt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/uoi-IDkQQwyGG__Ney6-Wh_SaMY.roa
Signing time: Wed 08 Mar 2023 08:48:00 +0000
ROA not before: Wed 08 Mar 2023 08:48:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206720
IP address blocks: 193.56.36.0/24 maxlen: 24
193.56.35.0/24 maxlen: 24
185.187.246.0/24 maxlen: 24
193.56.40.0/24 maxlen: 24
185.187.245.0/24 maxlen: 24
193.56.39.0/24 maxlen: 24
185.187.244.0/24 maxlen: 24
193.56.45.0/24 maxlen: 24
185.187.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:67:e9:25:92:44:9b:33:f6:61:5e:d3:dc:e9:d9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d075a4e5137f879563c58997ca7576b4059ede
Validity
Not Before: Mar 8 08:48:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba88be203910430c861bffcd7b2ebe5a1fd268c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:5e:b8:1b:25:13:9c:3e:00:67:40:bb:08:
d7:4f:33:79:44:86:c0:54:37:8c:ec:ba:47:c3:5b:
de:f5:dd:e8:38:36:b4:89:0c:5a:f6:f5:2b:9b:27:
4a:7b:f3:df:9a:68:cf:56:2a:34:d1:9e:b9:9d:69:
1d:7f:86:37:c5:31:3c:0a:ab:e4:7b:41:48:48:dc:
94:ea:0a:9a:af:c9:e0:16:c3:67:a6:ae:ca:e3:b2:
9f:39:0c:8c:f5:85:48:d9:ee:99:63:9e:db:41:79:
ff:a9:7e:13:d5:2e:b9:f1:2f:77:39:5c:78:c6:74:
9d:0b:47:a2:d4:2d:36:91:36:bc:03:b4:79:50:8c:
7e:2b:95:3d:bc:9f:60:42:5e:35:e9:ec:85:74:5f:
b3:22:0a:61:6e:98:ce:9d:44:15:b0:5f:ee:6d:8a:
4c:25:04:91:74:8e:64:9c:b4:d5:33:2d:64:48:6b:
95:dc:d2:9c:35:af:26:35:6d:53:43:43:e4:9b:25:
5e:84:c1:d7:9a:34:4c:14:60:89:94:d5:c0:8c:a2:
6f:0f:2c:82:cc:32:59:82:66:62:b5:db:0a:b4:3f:
70:84:18:d7:2e:1f:29:83:6b:2f:70:79:a4:12:89:
55:d3:fb:31:b4:cc:8b:1d:f9:10:50:2f:23:51:a9:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:88:BE:20:39:10:43:0C:86:1B:FF:CD:7B:2E:BE:5A:1F:D2:68:C6
X509v3 Authority Key Identifier:
keyid:01:D0:75:A4:E5:13:7F:87:95:63:C5:89:97:CA:75:76:B4:05:9E:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdB1pOUTf4eVY8WJl8p1drQFnt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/uoi-IDkQQwyGG__Ney6-Wh_SaMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/AdB1pOUTf4eVY8WJl8p1drQFnt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.244.0/22
193.56.35.0-193.56.36.255
193.56.39.0-193.56.40.255
193.56.45.0/24
Signature Algorithm: sha256WithRSAEncryption
11:57:4a:95:cc:a7:5b:fa:a4:c9:24:be:4d:6a:67:aa:0f:bc:
12:a7:40:cf:f1:cf:ec:5f:87:eb:90:0f:73:50:f4:6e:44:fe:
0c:6c:cf:ef:12:c9:92:c7:3f:2f:62:04:e8:61:6e:b8:f9:a4:
ff:0e:a9:bb:bf:5a:b3:9f:b9:60:3a:60:b3:a1:de:06:59:a7:
72:5c:63:fa:30:1b:43:36:9e:ea:9f:42:91:02:61:12:bc:e1:
62:b3:ed:c9:eb:8b:3c:5d:5c:90:7b:f7:01:db:e6:89:3b:7f:
73:67:8d:0e:4f:22:9a:ed:5b:42:49:1f:6d:6a:04:61:98:3f:
30:f1:dc:4d:25:3a:ee:1e:c3:2c:80:49:11:f2:7e:78:8c:81:
de:2c:bc:6b:c8:5f:bf:57:44:a1:d4:4c:55:9b:39:98:d5:88:
db:36:c3:2e:19:f9:e1:a6:b8:a5:49:36:8a:de:e8:8b:6f:05:
de:68:f4:cc:a0:73:ab:95:9c:91:c8:07:6d:26:4c:5d:eb:72:
b1:ef:14:c1:95:68:ba:2f:cc:be:84:8c:1f:d5:11:41:31:cd:
6c:95:b8:19:91:68:f2:e8:74:57:b5:d6:d1:0a:9c:bc:e5:67:
59:c8:08:ec:ac:c1:a3:99:85:41:86:42:5b:c8:4b:8f:f7:2b:
a4:57:5e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:56 2023 by rpki-client on console-ams.rpki-client.org