Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/uTcMagTqYycaaC8s3A6cD_buhBY.roa
File: uTcMagTqYycaaC8s3A6cD_buhBY.roa (raw, json)
Hash identifier: Yv4SL4tbR16ttH8oR/I0sHoow7KixXZg8s37YeRqtuA=
Subject key identifier: B9:37:0C:6A:04:EA:63:27:1A:68:2F:2C:DC:0E:9C:0F:F6:EE:84:16
Certificate issuer: /CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Certificate serial: 01857039603E11E640ED306BBCEC5B903014
Authority key identifier: 5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/uTcMagTqYycaaC8s3A6cD_buhBY.roa
Signing time: Mon 02 Jan 2023 02:04:46 +0000
ROA not before: Mon 02 Jan 2023 02:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6802
IP address blocks: 194.141.0.0/24 maxlen: 24
194.141.1.0/24 maxlen: 24
194.141.2.0/24 maxlen: 24
194.141.3.0/24 maxlen: 24
194.141.8.0/24 maxlen: 24
194.141.9.0/24 maxlen: 24
194.141.5.0/24 maxlen: 24
194.141.0.0/16 maxlen: 16
194.141.6.0/24 maxlen: 24
194.141.66.0/24 maxlen: 24
194.141.67.0/24 maxlen: 24
194.141.68.0/24 maxlen: 24
194.141.69.0/24 maxlen: 24
194.141.78.0/24 maxlen: 24
194.141.79.0/24 maxlen: 24
194.141.84.0/24 maxlen: 24
194.141.86.0/24 maxlen: 24
194.141.104.0/21 maxlen: 21
194.141.112.0/24 maxlen: 24
194.141.118.0/24 maxlen: 24
194.141.116.0/22 maxlen: 22
194.141.113.0/24 maxlen: 24
194.141.116.0/23 maxlen: 23
194.141.16.0/22 maxlen: 22
194.141.15.0/24 maxlen: 24
194.141.12.0/24 maxlen: 24
194.141.22.0/24 maxlen: 24
194.141.24.0/21 maxlen: 21
194.141.37.0/24 maxlen: 24
194.141.32.0/22 maxlen: 22
194.141.43.0/24 maxlen: 24
194.141.44.0/23 maxlen: 23
194.141.38.0/23 maxlen: 23
194.141.40.0/24 maxlen: 24
194.141.41.0/24 maxlen: 24
194.141.51.0/24 maxlen: 24
194.141.47.0/24 maxlen: 24
194.141.52.0/22 maxlen: 22
194.141.56.0/23 maxlen: 23
194.141.64.0/23 maxlen: 23
194.141.221.0/24 maxlen: 24
194.141.222.0/24 maxlen: 24
194.141.225.0/24 maxlen: 24
194.141.226.0/24 maxlen: 24
194.141.119.0/24 maxlen: 24
194.141.228.0/22 maxlen: 22
194.141.232.0/21 maxlen: 21
194.141.227.0/24 maxlen: 24
194.141.245.0/24 maxlen: 24
2001:4b58::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:60:3e:11:e6:40:ed:30:6b:bc:ec:5b:90:30:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Validity
Not Before: Jan 2 02:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9370c6a04ea63271a682f2cdc0e9c0ff6ee8416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:d6:88:73:73:6b:5c:f5:fa:64:5c:d3:74:
d5:f9:1c:25:d9:60:1a:f4:3c:65:20:4b:0d:f5:25:
73:e6:5d:c6:1e:77:9b:1d:69:2c:1a:76:a8:9f:73:
68:5b:b1:8a:8a:96:f3:e5:18:66:42:7b:9a:fe:0d:
b7:1a:ff:a3:53:50:59:84:3d:ef:64:91:52:c5:0d:
71:95:db:ff:c2:f6:3c:e9:dc:a7:e4:70:6e:ee:dc:
86:bf:df:d7:ba:47:df:54:b2:5e:90:f1:bc:cb:92:
2d:17:54:7d:a8:84:47:2f:55:7e:10:8b:b2:b2:8b:
f7:35:04:65:fc:30:92:97:3b:a8:15:fb:58:bc:eb:
a1:89:17:40:23:93:60:b1:fe:da:08:75:08:bb:8b:
c7:47:17:42:06:9a:f2:db:ca:a7:77:a6:2d:21:21:
7a:10:83:fd:15:c7:bc:c4:63:6b:b1:27:e3:42:86:
4e:48:3a:bc:96:42:80:8f:0d:2a:fb:e6:92:e4:6b:
93:7c:c0:fb:19:1a:a5:32:0c:b3:3d:06:fe:58:0a:
1d:03:12:d8:68:cf:99:f3:08:f6:af:3d:d6:7d:b9:
33:d4:7b:91:da:e3:e3:ec:3b:50:69:f0:19:1f:ae:
30:ee:5b:63:55:8a:ea:14:ae:b5:7d:2a:d5:b1:f7:
44:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:37:0C:6A:04:EA:63:27:1A:68:2F:2C:DC:0E:9C:0F:F6:EE:84:16
X509v3 Authority Key Identifier:
keyid:5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/uTcMagTqYycaaC8s3A6cD_buhBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.141.0.0/16
IPv6:
2001:4b58::/32
Signature Algorithm: sha256WithRSAEncryption
74:a2:1a:25:cc:eb:e8:b7:5e:f8:b8:84:26:dc:9a:96:07:ff:
74:6e:4e:11:3a:3c:c0:d2:56:66:88:35:e8:60:71:15:39:30:
49:03:1b:02:05:40:e1:10:a8:c2:c2:c6:70:db:f6:45:0a:5d:
5f:96:d7:66:09:ca:12:c6:65:48:25:fc:41:d5:c2:83:5c:47:
8b:1c:e4:a8:19:a2:e5:11:e2:ba:9c:dc:cf:4e:c8:4b:2c:8e:
1a:ea:d8:63:6e:17:1f:a1:cf:49:51:95:1b:73:8c:ea:0b:b2:
d0:8a:74:d3:ae:12:5c:cb:5d:46:61:80:31:1c:d4:cd:c2:f7:
54:e9:40:05:04:bf:5c:a0:5e:74:55:ee:c1:83:b2:24:b6:5e:
f0:d7:b6:ee:ec:b3:f1:1c:d8:81:64:20:6d:f1:a1:ce:59:9f:
0d:e0:35:24:2a:13:e6:e8:90:df:19:f9:f3:e4:19:9a:3a:ba:
45:ee:26:3c:9e:8a:74:38:e0:03:be:70:7d:91:67:c2:d5:5a:
10:cb:3e:73:31:ea:85:5d:6c:dd:c8:b0:d4:da:6a:92:73:20:
49:47:44:d1:4c:cb:49:5c:d9:7d:12:66:4a:98:fc:03:5f:2b:
fc:dd:04:08:62:d6:df:ee:04:6b:16:5e:3a:7e:dd:50:4d:a8:
dc:82:e6:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:52 2024 by rpki-client on console-ams.rpki-client.org