Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/uouYSACA63XdhkEbCLEJkuKQqDg.roa
File: uouYSACA63XdhkEbCLEJkuKQqDg.roa (raw, json)
Hash identifier: Ac4LWERQ4Bogfdt86v1Lrobm+PBY2umA1kz2UVCfttU=
Subject key identifier: BA:8B:98:48:00:80:EB:75:DD:86:41:1B:08:B1:09:92:E2:90:A8:38
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0188B9A5164C4E77FAD7858AF1768CF3BD3F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/uouYSACA63XdhkEbCLEJkuKQqDg.roa
Signing time: Wed 14 Jun 2023 11:23:04 +0000
ROA not before: Wed 14 Jun 2023 11:23:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
2.56.110.0/24 maxlen: 24
2.56.111.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:a5:16:4c:4e:77:fa:d7:85:8a:f1:76:8c:f3:bd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 14 11:23:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba8b98480080eb75dd86411b08b10992e290a838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:92:dc:3b:13:38:f9:b4:3c:47:5b:c3:b0:
05:0c:7a:e0:f8:97:f3:77:03:42:f4:b3:3a:fa:16:
5e:a0:be:87:3f:cf:e7:d6:0a:db:37:40:e6:92:f1:
82:dc:1b:9f:75:ce:b9:a4:fc:0a:25:f2:1c:cd:a4:
ad:cb:5c:45:9f:14:b8:85:8a:9e:94:b5:dd:c2:28:
af:c7:71:3c:7f:34:54:12:9a:53:e5:79:ec:8c:d1:
db:f7:24:48:9d:81:6d:a1:46:8e:5e:e6:c8:9e:f5:
5a:62:02:c7:ae:b9:e0:4f:1e:66:6b:42:d4:d4:d6:
8a:78:e2:aa:ef:0c:72:1a:48:8a:8c:77:43:39:74:
96:76:06:83:81:69:98:53:53:89:35:24:97:cc:ed:
22:61:4e:c7:e6:79:47:c5:d7:d2:1f:c1:41:2b:36:
ae:da:5c:6f:0e:17:17:63:9f:bf:6a:47:2d:ac:f4:
65:a4:c9:2a:46:ae:48:fb:73:37:83:f6:58:0d:a7:
2a:c0:47:e9:58:26:77:84:27:d9:5f:af:33:01:ad:
aa:d8:6e:4e:94:b5:fd:2f:6f:a5:2a:3f:99:a1:60:
33:cb:d7:64:65:e3:61:64:81:a4:52:0d:d2:01:9a:
b9:c6:27:28:e6:7f:19:ac:6f:f7:d1:04:09:9e:ba:
bb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8B:98:48:00:80:EB:75:DD:86:41:1B:08:B1:09:92:E2:90:A8:38
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/uouYSACA63XdhkEbCLEJkuKQqDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.110.0/23
45.94.171.0/24
45.138.183.0/24
77.83.38.0/23
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
13:24:35:ec:d9:64:86:d3:9d:a3:99:2f:e7:76:61:05:41:57:
16:51:f8:9e:a7:cf:e8:41:e0:5e:97:20:d8:25:e2:cf:46:b5:
2e:9f:72:91:f6:b5:b0:be:a9:b1:64:e8:fa:4f:13:36:9d:f2:
7d:6b:e4:8d:8e:b1:91:c1:6e:50:35:97:63:4d:c2:bd:41:e4:
4b:3b:63:d7:77:df:7b:38:04:1b:80:07:00:c0:66:a2:6f:a7:
c5:d0:c9:07:4e:cb:11:bc:3c:2a:b5:57:df:c5:1a:58:07:92:
8b:c5:1e:77:71:2d:36:c0:28:ac:af:70:eb:9c:2b:47:f3:26:
87:22:66:00:5f:a8:ca:87:b6:c5:3b:cd:85:11:f8:47:db:20:
05:fc:90:5a:84:ab:ad:db:43:69:a0:50:c4:c5:b7:16:cd:89:
06:75:24:94:30:ed:ed:b2:66:06:36:3d:74:68:46:b2:31:47:
a3:eb:6d:1b:8c:78:32:3c:4e:c8:21:fc:d8:3c:ad:64:00:d1:
29:e3:f2:31:9c:11:01:2f:db:d9:6e:73:e9:7e:70:4d:7e:84:
a5:57:53:73:63:d0:9d:ba:d9:c4:8c:33:00:7b:cd:2d:a7:9a:
8e:de:7c:b6:c3:e0:04:b6:3d:dc:13:04:16:bc:09:8a:0e:10:
52:7b:c5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:33 2023 by rpki-client on console-fra.rpki-client.org