Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/uhyW7-1iIuMjcrOdJZNFvypXOdU.roa
File: uhyW7-1iIuMjcrOdJZNFvypXOdU.roa (raw, json)
Hash identifier: ffVBjiKNJ6YROA2u8M2gNWugU3ec462tzKyNBJhxyp4=
Subject key identifier: BA:1C:96:EF:ED:62:22:E3:23:72:B3:9D:25:93:45:BF:2A:57:39:D5
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0187954ECA289BEFB6AB7C2FC8A776BCFC7F
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/uhyW7-1iIuMjcrOdJZNFvypXOdU.roa
Signing time: Tue 18 Apr 2023 16:59:41 +0000
ROA not before: Tue 18 Apr 2023 16:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3507
IP address blocks: 213.209.145.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:95:4e:ca:28:9b:ef:b6:ab:7c:2f:c8:a7:76:bc:fc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 18 16:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba1c96efed6222e32372b39d259345bf2a5739d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:6d:a6:7b:ff:08:b2:9c:f1:6b:8a:f5:9e:
9e:5d:29:2a:b3:df:6c:e7:d9:17:65:f6:86:7f:9e:
2b:69:21:af:b5:b5:4a:e6:11:e8:bf:41:3f:92:d5:
38:10:f1:98:4b:c9:9e:58:6d:7c:89:99:20:06:3d:
cf:f9:78:10:41:6f:76:5b:2a:2c:f8:e3:90:5b:24:
73:e3:b8:e8:be:c5:22:2c:08:10:bf:23:22:25:a7:
81:15:cf:9f:5f:10:f6:98:9b:9b:45:5b:46:de:6a:
d4:a5:b5:2b:9f:3a:c9:8f:8f:d4:6b:9c:94:58:51:
61:00:46:e6:25:72:ec:2a:53:dc:ef:03:ff:bb:80:
82:51:9b:3f:1a:de:bf:7a:b6:4c:3b:9c:5b:a8:b6:
d5:71:79:e5:fa:37:d2:17:ea:2b:2e:86:7e:8b:df:
fa:02:d5:27:37:cb:85:02:2e:ea:f3:1d:1c:7e:70:
ad:9e:24:3d:c5:f7:0a:1e:9f:05:f3:d5:e6:b6:18:
dc:24:45:3b:87:36:8d:0e:4c:d2:e8:8e:66:1f:2e:
c4:c2:d6:e5:0c:99:eb:80:4d:64:b0:0c:25:d8:d8:
a9:0f:0f:90:08:3f:d3:a1:41:70:4b:67:b1:24:50:
98:7f:84:9c:2e:e5:23:f1:0c:be:f7:72:07:6d:a9:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1C:96:EF:ED:62:22:E3:23:72:B3:9D:25:93:45:BF:2A:57:39:D5
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/uhyW7-1iIuMjcrOdJZNFvypXOdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.145.0/24
213.209.150.0/24
Signature Algorithm: sha256WithRSAEncryption
84:1e:93:e8:72:70:29:05:c9:37:83:11:7a:f4:9c:c4:73:ab:
3b:47:23:bb:dc:69:60:bf:69:ac:01:3f:3e:45:5c:31:c2:0a:
31:9d:7e:d2:21:f6:59:c9:f6:b7:43:74:0c:d4:ac:b4:be:43:
24:48:45:68:83:57:dc:5b:05:3e:b8:ac:b1:8b:f0:90:4d:bd:
61:82:5b:e5:18:54:67:1f:29:de:5c:6d:ec:e0:20:de:0a:00:
ba:7a:8c:ce:1b:c4:76:2d:25:a1:10:f0:4a:04:3a:bd:42:6c:
c3:5d:1a:1d:15:2b:98:c0:89:21:96:90:40:5b:b2:c1:56:89:
9d:63:85:44:8f:60:11:79:95:6b:db:cb:1a:1d:c3:b4:d6:fb:
f7:93:a5:7d:35:67:4b:87:66:d0:08:8f:7c:85:b6:f1:92:2f:
91:f6:50:d6:63:15:69:0f:35:88:a1:2a:71:ae:1a:41:1a:1e:
22:1f:a6:62:c1:4f:7a:0c:3a:63:73:3c:25:dd:ec:14:82:20:
04:a3:2a:fd:75:b9:3d:28:46:22:82:c0:64:b5:32:8e:09:6d:
03:b7:32:a3:1b:c8:bd:36:fd:43:f7:96:ab:d8:b2:3a:91:38:
e6:14:e0:ad:ff:22:1c:71:b8:97:61:d1:66:d2:29:b7:f9:4a:
11:f1:de:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:09 2023 by rpki-client on console-ams.rpki-client.org