Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/Uqy_O0so1RT2vTjcZztWn6DOLjs.roa
File: Uqy_O0so1RT2vTjcZztWn6DOLjs.roa (raw, json)
Hash identifier: XdsZw1imSbHV+Ym1NJuhZdKmrp6+fpYfJ/5T0BndBC0=
Subject key identifier: 52:AC:BF:3B:4B:28:D5:14:F6:BD:38:DC:67:3B:56:9F:A0:CE:2E:3B
Certificate issuer: /CN=f3ea162a492ac2b47e796e9a3c1d51858383fb12
Certificate serial: 018570706E1CE022623BD54E1D72CDF23F07
Authority key identifier: F3:EA:16:2A:49:2A:C2:B4:7E:79:6E:9A:3C:1D:51:85:83:83:FB:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-oWKkkqwrR-eW6aPB1RhYOD-xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/Uqy_O0so1RT2vTjcZztWn6DOLjs.roa
Signing time: Mon 02 Jan 2023 03:04:54 +0000
ROA not before: Mon 02 Jan 2023 03:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34177
IP address blocks: 81.161.58.0/24 maxlen: 24
194.88.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:6e:1c:e0:22:62:3b:d5:4e:1d:72:cd:f2:3f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ea162a492ac2b47e796e9a3c1d51858383fb12
Validity
Not Before: Jan 2 03:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52acbf3b4b28d514f6bd38dc673b569fa0ce2e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:6b:99:22:7a:04:13:26:46:e0:9a:32:ed:
d0:6d:3d:8b:b8:9a:29:63:23:0b:5f:05:7b:b1:f2:
9c:d7:ba:e2:41:bb:23:4e:05:64:94:4d:72:23:28:
53:a4:96:4d:49:bb:cd:73:7e:cc:bb:db:90:a3:c9:
7a:db:c3:7e:8e:38:ff:55:dd:41:fd:55:50:f0:fc:
d8:c6:3f:82:fa:f1:18:8b:ef:6f:92:c3:ec:7c:2d:
cf:fa:ef:0a:fc:e8:68:15:8e:d9:cb:53:b6:fb:73:
ae:98:80:9c:f4:e5:ec:dd:4d:f1:9a:f4:e5:c6:a1:
e7:4c:9a:d4:bf:e5:7c:3b:6b:a1:eb:cc:bf:f6:a9:
c0:7a:ec:6c:43:77:68:1f:3c:30:9f:bc:58:e0:dd:
05:ed:84:28:93:31:31:2a:3a:be:e9:e9:07:e5:c5:
57:cc:4c:52:a7:76:2f:bc:df:48:88:c3:4e:f7:7d:
13:13:d1:71:60:cc:35:58:74:82:94:9e:91:b4:49:
f8:fd:ba:a5:f6:df:cc:8f:49:31:93:36:65:e9:f5:
ad:bb:b0:dc:fa:ff:84:c9:54:bd:40:41:11:10:98:
c0:26:6e:b2:1e:11:54:35:c9:94:4a:e4:19:8c:04:
70:17:fb:e5:a1:66:04:53:11:63:89:ba:08:ad:db:
89:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AC:BF:3B:4B:28:D5:14:F6:BD:38:DC:67:3B:56:9F:A0:CE:2E:3B
X509v3 Authority Key Identifier:
keyid:F3:EA:16:2A:49:2A:C2:B4:7E:79:6E:9A:3C:1D:51:85:83:83:FB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-oWKkkqwrR-eW6aPB1RhYOD-xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/Uqy_O0so1RT2vTjcZztWn6DOLjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/8-oWKkkqwrR-eW6aPB1RhYOD-xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.58.0/24
194.88.246.0/23
Signature Algorithm: sha256WithRSAEncryption
f3:1e:e8:36:ac:e2:f5:1e:18:0f:b9:d3:bc:c3:39:b5:ea:58:
b8:f0:c3:cf:53:17:e0:9d:64:5c:db:ab:61:d7:24:9c:86:10:
56:9f:01:ff:15:2e:1e:18:7f:b2:ec:6d:41:0f:87:1f:c8:b2:
cb:ea:b8:08:b5:6a:fd:a5:2b:dc:0a:69:30:db:a7:c3:d7:ae:
1b:5d:fb:a6:b8:e7:fa:f6:df:39:37:7b:81:76:5f:33:fc:24:
69:ba:3f:a7:c1:4c:38:84:45:f5:b2:6e:d6:c6:88:85:2d:fe:
6a:f3:99:85:b5:8e:b1:49:bd:58:34:9b:67:6b:c6:45:af:c6:
39:1c:44:8e:4c:03:7d:b4:9f:0c:b0:c6:42:bb:2b:d3:23:e1:
69:26:e5:a6:6b:8c:7c:8c:64:c4:e4:17:b1:ca:3b:c0:c4:0c:
56:3c:a3:2e:b4:6c:e9:06:6b:77:bb:f1:3e:e8:08:fe:ba:95:
6b:87:c8:f1:6a:2f:60:a3:cc:24:80:1c:27:3e:f5:b8:f3:cd:
c2:ba:e4:43:17:5a:71:84:d9:6d:74:64:b8:4b:c5:2d:5c:8f:
4b:db:4b:e3:04:e7:ff:45:1e:d4:ca:29:10:ae:b9:1d:f5:9c:
92:72:55:fe:b9:35:65:a7:3a:8c:ce:d2:90:49:fd:f7:76:d1:
38:ec:b2:fd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwcG4c4CJiO9VOHXLN8j8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZWExNjJhNDkyYWMyYjQ3ZTc5NmU5YTNjMWQ1MTg1ODM4
M2ZiMTIwHhcNMjMwMTAyMDMwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmFjYmYzYjRiMjhkNTE0ZjZiZDM4ZGM2NzNiNTY5ZmEwY2UyZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+BrmSJ6BBMmRuCaMu3QbT2LuJop
YyMLXwV7sfKc17riQbsjTgVklE1yIyhTpJZNSbvNc37Mu9uQo8l628N+jjj/Vd1B
/VVQ8PzYxj+C+vEYi+9vksPsfC3P+u8K/OhoFY7Zy1O2+3OumICc9OXs3U3xmvTl
xqHnTJrUv+V8O2uh68y/9qnAeuxsQ3doHzwwn7xY4N0F7YQokzExKjq+6ekH5cVX
zExSp3YvvN9IiMNO930TE9FxYMw1WHSClJ6RtEn4/bql9t/Mj0kxkzZl6fWtu7Dc
+v+EyVS9QEEREJjAJm6yHhFUNcmUSuQZjARwF/vloWYEUxFjiboIrduJiQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFKsvztLKNUU9r043Gc7Vp+gzi47MB8GA1UdIwQY
MBaAFPPqFipJKsK0fnlumjwdUYWDg/sSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC1vV0tra3F3clItZVc2YVBCMVJoWU9ELXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kMzdiZjAtYWRhZS00NGM1LTk0Mzgt
ZjM0NWVkM2I2MDE2LzEvVXF5X08wc28xUlQydlRqY1p6dFduNkRPTGpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kMzdiZjAtYWRhZS00NGM1LTk0MzgtZjM0NWVkM2I2MDE2
LzEvOC1vV0tra3F3clItZVc2YVBCMVJoWU9ELXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUaE6AwQB
wlj2MA0GCSqGSIb3DQEBCwUAA4IBAQDzHug2rOL1HhgPudO8wzm16li48MPPUxfg
nWRc26th1ySchhBWnwH/FS4eGH+y7G1BD4cfyLLL6rgItWr9pSvcCmkw26fD164b
XfumuOf69t85N3uBdl8z/CRpuj+nwUw4hEX1sm7WxoiFLf5q85mFtY6xSb1YNJtn
a8ZFr8Y5HESOTAN9tJ8MsMZCuyvTI+FpJuWma4x8jGTE5BexyjvAxAxWPKMutGzp
Bmt3u/E+6Aj+upVrh8jxai9go8wkgBwnPvW4883CuuRDF1pxhNltdGS4S8UtXI9L
20vjBOf/RR7UyikQrrkd9ZySclX+uTVlpzqMztKQSf33dtE47LL9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:56 2024 by rpki-client on console-fra.rpki-client.org