Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/UbxGydH9XzRd1Ox5bqFBKvNTG_s.roa
File: UbxGydH9XzRd1Ox5bqFBKvNTG_s.roa (raw, json)
Hash identifier: TQgrX4GnojBDguXoiPe7IgbLeU6OkNwXq0vYEoXUfAE=
Subject key identifier: 51:BC:46:C9:D1:FD:5F:34:5D:D4:EC:79:6E:A1:41:2A:F3:53:1B:FB
Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial: 01856F26D6BE8D4C693DED340DB6345DACA8
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/UbxGydH9XzRd1Ox5bqFBKvNTG_s.roa
Signing time: Sun 01 Jan 2023 21:04:54 +0000
ROA not before: Sun 01 Jan 2023 21:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34979
IP address blocks: 194.24.166.0/24 maxlen: 24
194.24.166.0/23 maxlen: 23
194.24.167.0/24 maxlen: 24
91.204.246.0/24 maxlen: 24
91.204.244.0/24 maxlen: 24
91.204.244.0/22 maxlen: 22
91.204.245.0/24 maxlen: 24
91.204.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:d6:be:8d:4c:69:3d:ed:34:0d:b6:34:5d:ac:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Validity
Not Before: Jan 1 21:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51bc46c9d1fd5f345dd4ec796ea1412af3531bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:4e:98:20:e7:d0:bd:30:3f:f2:66:cc:42:
74:77:78:e5:27:5e:44:58:f0:71:28:0d:c1:e9:b0:
51:7e:af:fa:f4:81:48:27:3f:41:73:69:c5:29:45:
2f:cf:0b:8a:33:e9:ab:ba:a3:d5:15:9d:74:81:06:
b8:09:e3:78:c3:4a:c6:5c:3f:01:82:1f:6d:93:e4:
85:36:11:f3:3f:39:33:c2:25:89:63:60:76:59:9a:
48:78:7d:77:47:7c:19:4d:c5:4e:80:0c:3d:41:6c:
8c:4d:ac:32:e8:ef:68:86:e1:ab:30:c9:81:76:72:
34:2e:8b:4f:74:6e:bc:15:1a:b9:ee:45:39:af:14:
cc:ff:67:86:b1:65:22:0c:d3:89:03:31:7d:d4:99:
12:ef:e1:a2:6a:59:5d:34:23:42:61:32:6d:b6:64:
19:64:cb:3e:e6:32:74:fe:28:65:c4:52:fa:67:4d:
db:f6:e9:ec:c4:61:f9:7b:b0:29:28:2d:6b:e9:fd:
1f:d0:9c:36:97:6c:8e:94:89:75:73:ca:1d:4e:08:
ca:28:0a:89:17:44:f7:3b:0f:e9:84:a4:8b:9a:16:
ed:f3:ab:f6:84:f6:f6:7d:4f:8f:fb:b9:98:8b:28:
d5:bc:3e:7e:c8:48:13:95:43:22:e4:7b:e4:d3:8d:
11:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BC:46:C9:D1:FD:5F:34:5D:D4:EC:79:6E:A1:41:2A:F3:53:1B:FB
X509v3 Authority Key Identifier:
keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/UbxGydH9XzRd1Ox5bqFBKvNTG_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.244.0/22
194.24.166.0/23
Signature Algorithm: sha256WithRSAEncryption
99:55:84:1c:18:29:72:59:9e:6e:ee:f8:32:5b:c1:c9:c3:7c:
49:53:5d:f0:58:17:34:19:84:c2:e6:a3:07:72:68:c1:01:a0:
fd:82:90:83:8e:6e:e1:7d:32:51:93:1a:80:ca:5a:6c:08:46:
d9:d2:3e:4a:ff:fa:a4:c5:14:21:3e:3b:ad:00:6c:b2:64:35:
dc:b8:25:cc:5c:cb:21:a2:19:f3:a7:40:64:f3:13:a4:ba:9a:
75:16:d5:6b:5b:ee:ca:30:1d:ec:47:44:82:a4:1b:ce:86:ec:
90:ff:a7:ff:aa:21:95:89:aa:36:04:2e:f0:34:c1:51:a0:4f:
ba:67:0c:49:1e:b8:ca:18:7e:51:be:01:f8:3e:f1:ce:55:07:
64:3e:7b:0d:f1:f0:45:5e:81:53:3f:88:1d:bc:76:67:40:2d:
f6:25:98:5a:e9:86:a7:12:63:ef:4f:69:d9:01:39:f4:d1:a6:
19:49:c4:26:17:ff:ac:f6:8a:30:a8:4b:ac:6c:08:b5:2f:89:
00:98:1a:3c:b9:73:d5:93:61:68:89:19:a1:ee:6d:a5:9a:05:
57:73:36:51:0d:0f:08:68:55:fb:fa:cb:a9:9b:8a:98:52:4a:
4a:bb:89:e8:68:3e:3f:9b:d9:03:c7:3e:2d:f7:a4:8f:5e:f9:
89:1e:88:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:21 2024 by rpki-client on console-ams.rpki-client.org