Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/UfdT69E8Dr_oxKd5C607zzzL_8Q.roa
File: UfdT69E8Dr_oxKd5C607zzzL_8Q.roa (raw, json)
Hash identifier: 3m9M9Az7yixVhFIOgkdX6rHzQqOspMb0hCqJ4SpdPMI=
Subject key identifier: 51:F7:53:EB:D1:3C:0E:BF:E8:C4:A7:79:0B:AD:3B:CF:3C:CB:FF:C4
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 018849AA6A3749F36B3D68F24851CEE5434B
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/UfdT69E8Dr_oxKd5C607zzzL_8Q.roa
Signing time: Tue 23 May 2023 17:31:24 +0000
ROA not before: Tue 23 May 2023 17:31:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 5.182.244.0/24 maxlen: 24
93.157.189.0/24 maxlen: 24
93.157.191.0/24 maxlen: 24
185.233.245.0/24 maxlen: 24
89.200.218.0/24 maxlen: 24
89.200.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Jun 2023 10:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:49:aa:6a:37:49:f3:6b:3d:68:f2:48:51:ce:e5:43:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: May 23 17:31:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51f753ebd13c0ebfe8c4a7790bad3bcf3ccbffc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6b:b2:00:a9:3b:fd:03:3d:ed:6d:81:ec:b8:
7a:c7:6b:b8:b0:6a:c3:e0:16:7b:7a:89:a0:65:48:
01:2f:6a:1e:02:a8:e7:f1:09:30:c8:1a:b7:8d:89:
d4:2f:6a:b1:7a:72:c1:10:09:10:e6:86:cd:ea:7b:
34:d7:2a:f6:e8:1d:0e:48:7b:10:42:99:22:ae:7a:
79:00:7b:34:72:06:06:b8:ce:37:69:e2:a4:a9:8f:
73:bb:54:29:50:78:5e:61:74:d6:ad:0c:a2:b9:7b:
e5:4e:b2:09:52:86:ae:74:8f:84:b4:6c:e0:a0:6d:
c4:7d:0e:3c:36:13:70:8a:09:69:b7:5e:ae:0d:c2:
48:e3:2a:85:ce:df:6e:4a:78:9c:04:f6:36:f4:ce:
09:23:66:70:0d:0c:4d:ea:b2:b0:73:76:e3:f9:12:
57:1d:32:98:22:82:51:2a:ad:f4:62:a1:15:9a:34:
c0:af:20:72:a0:40:c8:4e:56:d5:ac:7c:09:5e:01:
29:d6:fa:07:0e:68:3c:e7:39:15:c7:0d:c5:a4:1f:
c6:28:a1:96:9a:60:22:23:09:f1:73:66:f7:84:30:
70:f7:fd:c0:eb:f0:33:22:34:9e:e9:5b:cd:30:e7:
e6:42:2f:17:37:06:ea:5e:c8:0c:75:9b:f9:88:69:
57:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F7:53:EB:D1:3C:0E:BF:E8:C4:A7:79:0B:AD:3B:CF:3C:CB:FF:C4
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/UfdT69E8Dr_oxKd5C607zzzL_8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.244.0/24
89.200.218.0/23
93.157.189.0/24
93.157.191.0/24
185.233.245.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:de:25:e6:ea:62:4c:1e:a9:fb:a0:81:aa:e8:49:5a:97:45:
00:34:e7:05:42:31:01:77:06:96:b7:d5:68:e2:1d:e4:82:a8:
c2:2a:07:5d:ab:01:c8:f8:72:0c:c2:b2:5c:59:84:3f:70:24:
c9:26:92:cf:7f:09:13:03:75:6b:00:03:5f:27:cc:ea:dd:4d:
c6:5e:87:5a:97:18:dc:58:be:43:8b:d7:2c:f7:9a:a3:58:de:
a3:a1:97:0c:53:b0:9c:9d:b7:b9:75:de:59:1d:5c:65:94:54:
66:c4:ab:7f:10:a6:f5:c0:dd:32:a7:af:08:4e:9e:1c:6a:a1:
8a:8e:3f:68:01:28:8e:c4:85:a7:4f:50:04:69:e9:14:2e:42:
01:ae:a0:24:a0:b2:18:42:7a:36:9c:df:1b:5e:5c:ee:5b:76:
01:bb:a2:81:29:06:2e:81:76:32:fa:7b:0d:36:7d:93:b1:12:
49:7e:56:07:c2:8f:a3:cd:1f:a1:44:ec:1b:fe:13:d1:2d:22:
73:f8:46:8c:70:0e:77:54:97:df:63:1d:a3:c4:f9:33:d2:5c:
db:20:66:1e:10:93:04:cc:04:76:54:bb:99:f2:a5:02:3b:ed:
13:b0:a8:37:25:e1:c5:bb:98:4a:e1:e6:ae:05:7c:31:9b:fc:
b9:5f:9f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:51 2024 by rpki-client on console-fra.rpki-client.org