Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/u-VCja-3evejg1o9yx5MKd2dqZk.roa
File: u-VCja-3evejg1o9yx5MKd2dqZk.roa (raw, json)
Hash identifier: JSodk8cL2WIlzy1cRE+yyDmYtwOwn4ZaXGOGeRGc8T4=
Subject key identifier: BB:E5:42:8D:AF:B7:7A:F7:A3:83:5A:3D:CB:1E:4C:29:DD:9D:A9:99
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018B86C2F95EF93CEA48868246062C161016
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/u-VCja-3evejg1o9yx5MKd2dqZk.roa
Signing time: Tue 31 Oct 2023 17:23:26 +0000
ROA not before: Tue 31 Oct 2023 17:23:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.255.99.0/24 maxlen: 24
195.138.103.0/24 maxlen: 24
195.138.104.0/24 maxlen: 24
185.15.136.0/23 maxlen: 24
45.67.117.0/24 maxlen: 24
185.243.140.0/22 maxlen: 24
94.231.198.0/24 maxlen: 24
194.56.153.0/24 maxlen: 24
185.212.11.0/24 maxlen: 24
194.180.238.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
185.40.105.0/24 maxlen: 24
194.213.10.0/24 maxlen: 24
194.242.28.0/23 maxlen: 24
195.149.127.0/24 maxlen: 24
185.173.247.0/24 maxlen: 24
89.32.126.0/24 maxlen: 24
92.118.108.0/24 maxlen: 24
176.126.223.0/24 maxlen: 24
91.242.71.0/24 maxlen: 24
45.149.160.0/22 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:86:c2:f9:5e:f9:3c:ea:48:86:82:46:06:2c:16:10:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 31 17:23:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbe5428dafb77af7a3835a3dcb1e4c29dd9da999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:99:12:53:55:a1:a1:a8:af:28:e7:14:d2:
04:cd:60:a5:c5:60:4a:e0:07:3e:13:13:1f:3f:93:
b0:c9:89:ed:e9:b0:76:2e:69:d5:b1:ed:37:df:f7:
a1:bc:5e:db:5e:dd:ff:e3:83:d3:26:f4:48:82:a0:
2f:c2:98:15:a7:69:18:71:f5:f6:e5:f8:b0:62:33:
62:78:e7:44:86:c7:35:1f:d5:bc:a0:25:e7:e9:93:
4d:0e:be:02:f9:70:5c:25:e8:a8:aa:ca:3d:be:58:
08:42:ed:da:97:2d:47:cf:41:1f:14:7b:4d:2d:59:
76:01:de:ff:d6:35:a7:3f:5e:af:54:37:28:49:08:
70:7d:92:2d:4d:da:3a:8b:40:36:c1:98:29:ef:13:
69:25:73:85:45:5b:5d:a1:3d:fb:63:7d:6e:9b:56:
be:e5:77:ef:c8:8f:12:16:37:fe:08:df:30:89:1b:
aa:4d:ad:de:e2:1c:1e:e0:e4:bd:6e:ba:b7:74:41:
4a:a7:8b:13:d5:fc:74:52:2e:f3:0f:e0:d2:10:11:
9a:c3:6e:69:02:c8:6d:f6:42:80:27:b6:02:04:de:
bf:3b:15:9b:30:b2:1a:28:33:d9:e9:44:dc:ae:65:
f3:1d:d6:e0:43:16:5b:98:a8:3c:cc:d0:02:ef:4b:
17:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E5:42:8D:AF:B7:7A:F7:A3:83:5A:3D:CB:1E:4C:29:DD:9D:A9:99
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/u-VCja-3evejg1o9yx5MKd2dqZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.117.0/24
45.149.160.0/22
89.32.126.0/24
91.242.71.0-91.242.73.255
91.242.75.0/24
91.242.103.0/24
92.118.108.0/24
94.231.198.0/24
176.126.223.0/24
185.15.136.0/23
185.40.105.0/24
185.173.247.0/24
185.212.11.0/24
185.243.140.0/22
185.255.99.0/24
194.56.153.0/24
194.180.238.0/24
194.213.10.0/24
194.242.28.0/23
195.138.103.0-195.138.104.255
195.149.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a9:9d:b0:4a:fd:4f:52:56:a6:9c:77:d8:0c:bc:93:3d:af:
3f:eb:f7:5d:bd:18:fc:3b:45:ec:be:4a:d9:ee:4d:77:df:fd:
1f:db:40:49:65:54:c1:4f:9d:c0:9b:a6:81:3f:02:ce:89:e9:
91:84:0c:b7:33:b8:a7:90:68:25:a1:a1:6f:9f:32:13:94:84:
35:3f:04:0a:4b:d0:3d:9b:e5:c9:80:64:03:93:9f:39:4a:9f:
09:81:fd:5b:dc:a7:aa:94:fb:44:ac:d0:45:95:29:05:fd:2b:
29:82:77:7f:e7:55:56:b6:38:21:c2:e5:50:37:f9:e1:3d:78:
13:da:ca:34:c2:db:0f:6c:50:ae:40:62:ad:89:30:f7:55:84:
07:6d:64:46:68:1b:de:e2:bf:c3:d8:6e:1d:f1:c7:0e:4a:7d:
80:b9:62:a3:54:a8:5e:30:13:1a:65:54:d8:a8:a6:af:46:bf:
21:f3:eb:b5:15:23:db:01:e8:5c:29:45:5a:da:08:3e:27:93:
fe:eb:07:3b:2b:c8:11:91:e2:04:f1:2a:a6:4c:18:ed:6d:c5:
fd:6f:f9:a3:c4:a6:fb:1f:60:ab:34:de:3e:a8:ef:2a:58:36:
e7:98:c4:4c:cc:dd:61:fe:12:86:8f:4b:83:77:8f:f9:a4:f0:
ea:9e:3a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 18:19:22 2023 by rpki-client on console-ams.rpki-client.org