Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/UuLftIzdO7oRKmh8nwXKWQyWZ9k.roa
File: UuLftIzdO7oRKmh8nwXKWQyWZ9k.roa (raw, json)
Hash identifier: tu2rZsQyJDybZfoEHlOOtFS2sBloGYa0sTDruDf3+Rg=
Subject key identifier: 52:E2:DF:B4:8C:DD:3B:BA:11:2A:68:7C:9F:05:CA:59:0C:96:67:D9
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 01856F14F02536D329BC85379E1BC8E05826
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/UuLftIzdO7oRKmh8nwXKWQyWZ9k.roa
Signing time: Sun 01 Jan 2023 20:45:21 +0000
ROA not before: Sun 01 Jan 2023 20:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51569
IP address blocks: 83.139.202.0/23 maxlen: 24
83.139.212.0/24 maxlen: 24
83.139.213.0/24 maxlen: 24
83.139.217.0/24 maxlen: 24
83.139.218.0/24 maxlen: 24
83.139.219.0/24 maxlen: 24
83.139.214.0/24 maxlen: 24
83.139.215.0/24 maxlen: 24
83.139.216.0/24 maxlen: 24
83.139.224.0/20 maxlen: 24
83.139.220.0/24 maxlen: 24
83.139.221.0/24 maxlen: 24
83.139.244.0/24 maxlen: 24
83.139.245.0/24 maxlen: 24
83.139.242.0/24 maxlen: 24
83.139.243.0/24 maxlen: 24
85.31.160.0/21 maxlen: 24
45.132.208.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:f0:25:36:d3:29:bc:85:37:9e:1b:c8:e0:58:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Jan 1 20:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52e2dfb48cdd3bba112a687c9f05ca590c9667d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:1d:a5:d9:22:2c:6e:61:02:69:72:51:9b:
43:6b:92:cb:30:23:fc:e2:69:67:bc:c9:81:d7:8c:
ee:55:09:2d:98:e4:67:a8:09:78:fc:50:66:2c:f3:
be:de:47:5d:55:a8:5b:7b:18:7a:bd:16:e0:07:b4:
df:20:36:bd:bc:51:63:8b:2a:2a:76:45:58:40:c5:
15:81:62:50:83:4a:12:e6:fb:ac:bd:9e:00:36:e4:
49:8d:a0:4e:ec:1c:52:16:69:f1:4e:e1:40:32:55:
f2:c7:e0:3e:cf:d1:24:c7:6a:35:6d:67:bc:66:0b:
cd:9e:c4:3b:7d:1b:66:25:a6:8d:d8:bb:40:87:b5:
f3:41:0d:cc:64:3b:87:e2:71:b2:a8:b4:0f:8e:84:
e5:45:bf:9e:1e:0d:42:1c:0e:9a:e5:59:4c:57:73:
ca:a6:5f:85:63:ef:e0:cd:73:eb:c2:a2:cb:e8:db:
07:75:6d:2c:18:28:18:df:9f:a4:9c:17:39:4a:db:
cf:44:52:ab:53:16:89:ee:08:47:d2:28:83:42:31:
04:7f:21:e3:90:80:1a:30:09:b0:6d:e7:9a:f0:ff:
09:75:2d:34:8a:b1:15:4d:47:a8:28:00:cd:45:02:
71:d1:dd:c5:35:37:56:c5:72:06:a0:ca:dd:64:52:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E2:DF:B4:8C:DD:3B:BA:11:2A:68:7C:9F:05:CA:59:0C:96:67:D9
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/UuLftIzdO7oRKmh8nwXKWQyWZ9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.208.0/22
83.139.202.0/23
83.139.212.0-83.139.221.255
83.139.224.0/20
83.139.242.0-83.139.245.255
85.31.160.0/21
Signature Algorithm: sha256WithRSAEncryption
38:14:6f:9e:2b:5e:fa:c6:62:10:ee:89:42:b9:54:85:e4:c0:
7a:30:0b:6c:50:6c:ef:e9:e9:62:1f:dd:6d:53:30:93:fa:95:
cf:ec:52:3f:da:9d:07:33:3d:ee:fe:b4:88:6f:ad:fe:24:76:
7e:70:f4:a2:65:2e:6a:16:79:27:85:0d:b8:9f:d0:63:ff:66:
b6:16:09:b3:0e:58:ef:a0:22:97:65:bd:b1:46:04:af:ea:0a:
53:b2:d1:e8:ec:4e:5c:51:14:9d:0d:2c:20:66:f6:5f:4e:ad:
00:d0:b2:24:f6:97:f7:28:0b:1b:ef:a1:d6:01:c9:75:cf:d2:
ef:16:6b:34:64:2a:27:95:05:a8:f6:2a:e4:a4:9f:50:18:fb:
90:b1:aa:d3:33:d4:89:12:c6:10:c9:1d:0b:5a:9a:1b:28:f2:
4c:65:9c:ea:ab:ff:32:56:d4:d5:4b:a8:b0:d8:04:ae:48:4e:
b2:d0:49:cb:65:29:c2:e2:34:e6:2a:44:56:f7:f2:e0:d8:e5:
56:16:31:a4:cc:0a:da:8a:e6:9f:63:fe:59:79:77:11:db:89:
41:44:fe:dc:c3:c9:98:7f:14:2d:a2:99:47:57:31:8e:4d:3e:
04:52:90:0a:fc:e5:24:47:fc:01:81:3f:7a:cf:ab:78:dd:02:
8e:22:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 12:37:27 2023 by rpki-client on console-fra.rpki-client.org