Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/UBVT7m5vsIoUSPvi7PGzPQgq7Us.roa
File: UBVT7m5vsIoUSPvi7PGzPQgq7Us.roa (raw, json)
Hash identifier: 7ilFVN/DfmWf/8ECFh3FvzzcG4LTDoSq1yAYlgmoexo=
Subject key identifier: 50:15:53:EE:6E:6F:B0:8A:14:48:FB:E2:EC:F1:B3:3D:08:2A:ED:4B
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 018BF2A59C49A9C3A2EC1AFF024C48E2BB65
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/UBVT7m5vsIoUSPvi7PGzPQgq7Us.roa
Signing time: Tue 21 Nov 2023 16:10:21 +0000
ROA not before: Tue 21 Nov 2023 16:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6461
IP address blocks: 185.83.150.0/23 maxlen: 24
185.83.148.0/23 maxlen: 24
94.26.93.0/24 maxlen: 24
94.26.97.0/24 maxlen: 24
94.26.95.0/24 maxlen: 24
94.26.98.0/23 maxlen: 24
94.26.101.0/24 maxlen: 24
94.26.103.0/24 maxlen: 24
94.26.109.0/24 maxlen: 24
104.255.128.0/21 maxlen: 24
185.75.80.0/22 maxlen: 24
185.49.216.0/22 maxlen: 24
153.94.56.0/21 maxlen: 24
185.94.78.0/23 maxlen: 24
185.94.76.0/23 maxlen: 24
45.94.8.0/22 maxlen: 24
45.94.10.0/24 maxlen: 24
185.9.212.0/22 maxlen: 24
192.190.168.0/22 maxlen: 24
94.190.196.0/22 maxlen: 24
94.190.196.0/24 maxlen: 24
94.190.199.0/24 maxlen: 24
94.190.198.0/24 maxlen: 24
94.190.197.0/24 maxlen: 24
45.89.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:a5:9c:49:a9:c3:a2:ec:1a:ff:02:4c:48:e2:bb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Nov 21 16:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=501553ee6e6fb08a1448fbe2ecf1b33d082aed4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f0:52:a2:ba:c8:73:07:d7:6c:28:ab:80:e1:
e8:fc:b6:3f:e4:a3:44:d0:83:44:b6:d2:20:d6:ac:
d0:e5:e3:eb:c5:f4:92:6a:e1:83:7f:29:8f:90:2c:
00:a3:90:e4:de:2b:f0:12:8b:17:ca:84:d0:13:98:
f0:45:47:d9:da:16:59:a1:70:43:36:72:ff:43:35:
9b:5e:6d:be:39:98:bf:48:ef:eb:8a:b9:a9:3b:1f:
f1:01:76:8a:14:14:59:d9:9d:f4:e9:7b:15:df:ff:
b2:95:95:05:c4:eb:0c:e4:79:7b:83:00:9c:ac:ed:
88:15:df:36:b9:b8:6b:8c:b7:80:b6:8a:ae:2d:dc:
72:71:82:bd:82:50:f0:4f:fb:80:22:f3:10:4b:47:
66:10:c9:5b:e8:81:f8:be:6d:99:46:a8:3c:0d:62:
25:69:3a:27:09:3d:db:d5:6c:3a:24:0a:35:06:51:
18:f5:05:7d:0e:a5:1a:de:0f:ef:55:de:8c:3a:57:
5d:04:c0:ef:cd:56:85:c9:b1:81:ce:ae:cb:f2:1a:
37:dd:b9:7c:f7:a3:cc:5f:00:24:72:d7:34:0a:1e:
ed:6b:16:a2:25:fc:c7:dc:2e:3b:98:2f:30:8d:d9:
cd:fc:56:6a:4a:c2:38:29:f0:ff:a2:96:1d:ae:1e:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:15:53:EE:6E:6F:B0:8A:14:48:FB:E2:EC:F1:B3:3D:08:2A:ED:4B
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/UBVT7m5vsIoUSPvi7PGzPQgq7Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.212.0/22
45.94.8.0/22
94.26.93.0/24
94.26.95.0/24
94.26.97.0-94.26.99.255
94.26.101.0/24
94.26.103.0/24
94.26.109.0/24
94.190.196.0/22
104.255.128.0/21
153.94.56.0/21
185.9.212.0/22
185.49.216.0/22
185.75.80.0/22
185.83.148.0/22
185.94.76.0/22
192.190.168.0/22
Signature Algorithm: sha256WithRSAEncryption
39:76:71:e0:71:e5:69:bc:b1:3d:ce:a5:df:31:95:53:55:a4:
90:bf:f5:60:9b:68:68:8f:ec:bc:a8:a7:7c:89:75:8c:ce:6e:
20:8a:5b:1d:1b:7c:df:ba:4e:ef:b0:a6:9c:de:f8:26:0a:c8:
39:33:4c:35:48:c7:c0:c8:86:b4:d8:76:cf:40:8b:25:85:eb:
2f:08:a0:5d:ff:86:35:43:07:54:13:bf:00:8f:24:68:44:63:
a9:2b:b4:28:c5:08:28:da:28:32:eb:03:af:8b:0f:64:97:0f:
8c:72:dc:58:65:f2:4e:56:f5:2a:53:b1:7a:7c:15:df:f3:20:
06:af:9f:65:62:60:14:45:70:36:d1:7f:47:cf:5e:28:e4:76:
7e:b2:d4:64:76:41:ce:cc:18:f7:ab:12:0d:3b:21:ed:f6:35:
a8:c8:62:89:97:fc:e3:a4:26:af:bc:21:1a:0a:bc:b9:da:19:
6e:02:95:28:dc:7d:d0:b4:9f:af:1f:e0:b4:53:7c:1f:65:93:
df:2b:61:0f:c4:ff:09:66:9b:eb:ec:ab:a0:76:13:47:c8:36:
7c:7d:5d:5c:b6:60:78:55:ed:c8:19:26:5b:d6:e0:15:f9:1d:
22:42:b2:10:2c:02:c1:99:d0:d7:12:2a:b5:cf:a1:66:99:29:
94:59:ff:c8
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAYvypZxJqcOi7Br/AkxI4rtlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWM0ZTBjZjVjOGRiYmI2YTY3Y2YxZGEyZjMxZjQxNjI3
NDlmZGQwHhcNMjMxMTIxMTYxMDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDE1NTNlZTZlNmZiMDhhMTQ0OGZiZTJlY2YxYjMzZDA4MmFlZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPBSorrIcwfXbCirgOHo/LY/5KNE
0INEttIg1qzQ5ePrxfSSauGDfymPkCwAo5Dk3ivwEosXyoTQE5jwRUfZ2hZZoXBD
NnL/QzWbXm2+OZi/SO/rirmpOx/xAXaKFBRZ2Z306XsV3/+ylZUFxOsM5Hl7gwCc
rO2IFd82ubhrjLeAtoquLdxycYK9glDwT/uAIvMQS0dmEMlb6IH4vm2ZRqg8DWIl
aTonCT3b1Ww6JAo1BlEY9QV9DqUa3g/vVd6MOlddBMDvzVaFybGBzq7L8ho33bl8
96PMXwAkctc0Ch7taxaiJfzH3C47mC8wjdnN/FZqSsI4KfD/opYdrh79WwIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFFAVU+5ub7CKFEj74uzxsz0IKu1LMB8GA1UdIwQY
MBaAFKScTgz1yNu7amfPHaLzH0FidJ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMt
ODhlZDhkNzcxN2E0LzEvVUJWVDdtNXZzSW9VU1B2aTdQR3pQUWdxN1VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMtODhlZDhkNzcxN2E0
LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAi1Z1AME
Ai1eCAMEAF4aXQMEAF4aXzAMAwQAXhphAwQCXhpgAwQAXhplAwQAXhpnAwQAXhpt
AwQCXr7EAwQDaP+AAwQDmV44AwQCuQnUAwQCuTHYAwQCuUtQAwQCuVOUAwQCuV5M
AwQCwL6oMA0GCSqGSIb3DQEBCwUAA4IBAQA5dnHgceVpvLE9zqXfMZVTVaSQv/Vg
m2hoj+y8qKd8iXWMzm4gilsdG3zfuk7vsKac3vgmCsg5M0w1SMfAyIa02HbPQIsl
hesvCKBd/4Y1QwdUE78AjyRoRGOpK7QoxQgo2igy6wOviw9klw+MctxYZfJOVvUq
U7F6fBXf8yAGr59lYmAURXA20X9Hz14o5HZ+stRkdkHOzBj3qxINOyHt9jWoyGKJ
l/zjpCavvCEaCry52hluApUo3H3QtJ+vH+C0U3wfZZPfK2EPxP8JZpvr7KugdhNH
yDZ8fV1ctmB4Ve3IGSZb1uAV+R0iQrIQLALBmdDXEiq1z6FmmSmUWf/I
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:00 2024 by rpki-client on console-fra.rpki-client.org