Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/6_UgH2dbrzkpOYt8kAmoXHW5pX0.roa
File: 6_UgH2dbrzkpOYt8kAmoXHW5pX0.roa (raw, json)
Hash identifier: ubuzGGOAIF5+rmz/D2kJCzwW40ZsDs6oqJD1bv5DPfw=
Subject key identifier: EB:F5:20:1F:67:5B:AF:39:29:39:8B:7C:90:09:A8:5C:75:B9:A5:7D
Certificate issuer: /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial: 01856CAF33562AA66FDD80557D669A57D0AA
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/6_UgH2dbrzkpOYt8kAmoXHW5pX0.roa
Signing time: Sun 01 Jan 2023 09:34:59 +0000
ROA not before: Sun 01 Jan 2023 09:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34714
IP address blocks: 193.238.56.0/22 maxlen: 22
185.238.56.0/22 maxlen: 22
91.201.76.0/22 maxlen: 22
91.213.34.0/24 maxlen: 24
37.143.168.0/24 maxlen: 24
37.143.175.0/24 maxlen: 24
193.32.140.0/22 maxlen: 22
2a03:8f80::/32 maxlen: 32
2a03:8f81::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:33:56:2a:a6:6f:dd:80:55:7d:66:9a:57:d0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
Validity
Not Before: Jan 1 09:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebf5201f675baf3929398b7c9009a85c75b9a57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:85:d0:fd:33:ab:0f:62:a2:58:6d:59:e8:b0:
c1:f2:64:1f:da:71:c6:ba:47:98:e1:1b:8e:7f:eb:
d5:26:56:58:b6:5b:b2:69:2e:b0:a2:c5:be:fe:cc:
b3:c8:49:19:c2:96:b8:28:29:e1:a7:92:4c:da:ac:
1b:c1:fa:5b:62:14:f1:fe:12:29:f4:4b:b2:f6:0a:
49:f6:2f:03:d1:a3:34:ec:ca:6b:60:a7:8e:4b:4a:
a3:b3:dc:22:ad:5e:85:fc:d2:04:1b:51:0a:b9:1f:
c3:1f:b4:d0:a7:49:b2:ea:db:32:08:28:5f:c9:ab:
98:6d:66:b8:ca:bb:12:75:38:da:54:f9:27:b0:63:
40:a4:db:27:0f:34:bd:8b:b9:c5:cf:64:43:d9:23:
15:c9:6a:a0:f5:14:64:28:88:d0:91:11:b0:40:22:
0b:93:56:43:c2:a2:87:11:c8:74:70:02:1b:bd:37:
a7:8f:ee:48:84:26:2c:15:59:4e:a4:1e:94:81:f6:
f5:11:48:e7:75:66:54:8c:e9:b6:7c:de:2f:e3:e2:
a2:de:a5:f8:54:70:71:ff:a6:c8:f0:ca:20:13:9d:
7f:1a:31:ec:52:5a:0c:6f:5d:f0:da:d4:93:9f:a4:
53:b0:4e:78:ec:fc:7a:03:f6:74:04:0c:47:e8:c4:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F5:20:1F:67:5B:AF:39:29:39:8B:7C:90:09:A8:5C:75:B9:A5:7D
X509v3 Authority Key Identifier:
keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/6_UgH2dbrzkpOYt8kAmoXHW5pX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.168.0/24
37.143.175.0/24
91.201.76.0/22
91.213.34.0/24
185.238.56.0/22
193.32.140.0/22
193.238.56.0/22
IPv6:
2a03:8f80::/31
Signature Algorithm: sha256WithRSAEncryption
3e:f1:db:fd:62:6b:86:5b:75:c8:b7:0d:f4:b0:2f:9e:2b:a8:
81:d2:f4:73:55:53:21:34:8f:2b:00:2f:ce:81:bf:4d:92:da:
77:e0:f9:c8:6a:7d:2c:ab:56:1b:b2:e7:ef:19:da:77:38:aa:
46:7c:55:bb:2b:63:77:3d:60:c4:be:3c:fc:71:ab:c9:95:9d:
4b:d9:a6:4b:f1:fe:a3:ed:99:75:7b:cd:8c:84:b8:09:3b:b2:
d7:d5:1d:3d:08:39:a2:4a:07:ab:3b:41:f6:45:bc:62:22:97:
67:57:fe:f4:5a:0e:06:46:f2:1b:fe:ee:30:b8:f7:91:e7:57:
c0:20:a2:ad:b8:8e:02:a1:ae:11:cc:e9:11:d4:e9:c9:13:16:
3e:89:31:f8:7b:0f:29:42:14:c7:ca:50:87:5b:dc:2e:2c:20:
53:00:ab:c1:24:7c:93:1e:0e:41:84:50:90:1f:fe:19:0e:fb:
bc:8e:47:e7:65:bd:61:03:47:06:86:38:cd:8d:b6:e3:0a:d3:
95:ed:b1:57:05:50:9a:04:97:55:dc:15:aa:71:a0:40:69:5b:
4a:6d:56:9f:97:31:2a:15:f6:6c:68:75:c3:82:45:25:d4:08:
49:0a:4e:08:f3:af:c5:78:6a:cd:64:0d:31:f2:4a:3f:89:ab:
1d:99:89:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:36 2023 by rpki-client on console-fra.rpki-client.org