Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/UOWIy2Et_4KFuLSa1euscEGyDkE.roa
File: UOWIy2Et_4KFuLSa1euscEGyDkE.roa (raw, json)
Hash identifier: wmQMpqH5qh9vdiPaqARB4Dd+FfUaw2d+4NcjUwzvMUY=
Subject key identifier: 50:E5:88:CB:61:2D:FF:82:85:B8:B4:9A:D5:EB:AC:70:41:B2:0E:41
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 01876C166F81810C6C6AA8931C098328A970
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/UOWIy2Et_4KFuLSa1euscEGyDkE.roa
Signing time: Mon 10 Apr 2023 16:53:42 +0000
ROA not before: Mon 10 Apr 2023 16:53:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12357
IP address blocks: 185.195.179.0/24 maxlen: 24
185.195.178.0/24 maxlen: 24
185.195.177.0/24 maxlen: 24
185.195.176.0/22 maxlen: 22
185.195.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Apr 2023 10:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6c:16:6f:81:81:0c:6c:6a:a8:93:1c:09:83:28:a9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Apr 10 16:53:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50e588cb612dff8285b8b49ad5ebac7041b20e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:20:9e:2d:77:d3:10:f1:16:3d:72:5f:71:fe:
c9:50:8b:ee:d8:96:e1:d2:3e:18:3e:6e:47:07:eb:
de:57:64:37:42:73:04:92:9e:0d:82:66:6d:98:2c:
a4:bc:5d:88:ba:5d:d5:6f:f0:fb:1a:17:b2:d1:d8:
e2:87:ae:4e:2f:a9:35:7b:53:d7:c3:09:28:41:97:
74:7d:1c:95:19:a8:02:14:b8:b8:ab:d9:46:07:12:
02:dd:3e:80:c1:42:51:bd:96:e5:a8:e8:5d:9d:b6:
41:9c:f0:e4:bb:fb:44:79:1f:ca:29:fa:04:57:31:
41:f0:a1:13:27:a7:65:66:9c:9e:64:2d:f3:c6:23:
49:eb:db:5f:d2:0f:cb:f3:6d:25:e6:74:19:40:2c:
fb:2a:5e:e6:57:2c:10:0d:c5:82:77:4a:0b:80:57:
05:93:ed:73:71:90:e8:d9:e7:b8:43:b5:8d:80:87:
3b:e7:36:b7:9b:0a:27:e9:f2:62:f4:d4:2f:37:b0:
5c:bb:b9:82:53:71:09:19:8e:84:c7:60:90:dd:5a:
30:7a:71:b3:1f:d5:14:c5:60:24:71:6b:97:94:43:
6e:04:d1:71:4e:12:87:88:aa:57:6c:49:62:20:23:
d7:9b:96:39:30:f7:b2:7c:64:02:30:3a:09:b4:5c:
cc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E5:88:CB:61:2D:FF:82:85:B8:B4:9A:D5:EB:AC:70:41:B2:0E:41
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/UOWIy2Et_4KFuLSa1euscEGyDkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.176.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:ef:9c:f7:21:49:82:33:38:7d:0f:c6:d6:4a:c8:7c:99:87:
3c:84:ea:9d:8e:46:af:d5:31:d5:61:c5:9f:84:3b:a1:7d:9a:
b0:f5:6a:13:c7:2d:78:ef:dc:f8:a3:31:27:33:59:19:a7:77:
7b:e1:08:68:59:57:4e:6a:14:a8:ec:ee:2a:ca:3e:99:92:09:
68:08:79:8d:95:c2:9f:ee:09:07:5e:7b:5f:3b:a0:32:94:f2:
03:09:dd:c3:4c:be:a1:62:ea:2e:d7:5f:2f:c1:6a:2f:c3:3d:
56:36:13:96:bd:2d:a8:80:93:a7:47:8f:dc:31:a0:12:04:03:
eb:84:3a:32:30:2a:31:d6:ec:33:63:36:b9:6b:c0:63:41:cb:
f4:4b:43:e3:47:f5:de:94:48:26:76:4e:37:be:6f:e8:15:40:
97:05:26:a3:f0:17:02:f8:0f:01:b0:ed:55:48:a1:cd:f9:32:
ec:a9:7c:e9:04:57:b3:ff:29:2b:98:69:67:70:cc:08:5b:09:
b8:8a:e4:1f:48:b6:58:05:60:09:dc:c8:ea:1e:87:ef:b3:d8:
e6:d5:5a:2d:cb:bd:ed:2c:cb:96:8e:b4:b5:77:72:37:74:59:
88:23:24:c4:59:a8:ea:f8:56:a3:68:ad:93:91:78:87:fe:3e:
1c:d5:8b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:02 2024 by rpki-client on console-fra.rpki-client.org