Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/UMveVZ-xAOv8YTWUsbkygzXqIIc.roa
File: UMveVZ-xAOv8YTWUsbkygzXqIIc.roa (raw, json)
Hash identifier: UEDxylX/qCeX4LVF5i1snFnvrJTSOJIZ0m333eqfHT4=
Subject key identifier: 50:CB:DE:55:9F:B1:00:EB:FC:61:35:94:B1:B9:32:83:35:EA:20:87
Certificate issuer: /CN=8b27483dc16c318e5afff8322930c817fd192c91
Certificate serial: 018ECD9E996BA67B7FA5DE799A49EB79218C
Authority key identifier: 8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/UMveVZ-xAOv8YTWUsbkygzXqIIc.roa
Signing time: Thu 11 Apr 2024 14:45:06 +0000
ROA not before: Thu 11 Apr 2024 14:45:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49368
IP address blocks: 188.94.32.0/21 maxlen: 21
188.126.32.0/20 maxlen: 20
188.126.48.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 12 Apr 2024 06:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cd:9e:99:6b:a6:7b:7f:a5:de:79:9a:49:eb:79:21:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b27483dc16c318e5afff8322930c817fd192c91
Validity
Not Before: Apr 11 14:45:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50cbde559fb100ebfc613594b1b9328335ea2087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:13:c7:be:67:2b:85:93:40:a8:15:34:ba:
f5:2e:df:92:c1:e8:4b:6d:0a:f1:63:0b:c7:80:a4:
dd:ba:54:f9:2c:5a:ce:ec:37:71:06:d9:84:de:15:
cb:d2:50:1c:cf:84:6a:84:b6:60:18:a7:4b:05:9d:
5e:a4:cb:81:aa:08:e1:5b:60:5d:86:2b:34:44:a5:
85:e8:9e:0e:9f:ad:7f:3a:44:98:bd:78:78:2d:c2:
fd:68:cf:07:16:d6:50:1a:0a:bf:cc:96:d4:71:71:
67:24:ea:d2:7c:bb:2f:62:07:6a:de:c1:69:a8:85:
47:b9:c9:1b:d6:81:a7:8b:d9:04:1c:6f:19:c5:5e:
23:50:25:fe:09:20:0b:d8:22:51:1b:16:87:e4:2c:
3b:51:11:9c:16:20:77:f3:a6:47:b3:6c:c7:5f:51:
ac:b7:7b:86:2b:91:36:7d:93:89:3b:f2:3d:c7:cc:
df:95:9a:84:1e:4e:fe:97:76:2e:46:99:48:79:1b:
f2:94:db:76:f4:62:78:5c:cf:b0:5c:77:3e:a1:bf:
95:72:f9:4d:a7:e4:2d:9c:8f:e7:8f:26:24:56:9d:
0f:11:41:88:79:06:dc:fb:e2:96:70:1d:5f:23:43:
7b:71:25:9b:73:b2:1a:e6:ae:b9:01:79:4a:54:75:
3b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CB:DE:55:9F:B1:00:EB:FC:61:35:94:B1:B9:32:83:35:EA:20:87
X509v3 Authority Key Identifier:
keyid:8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/UMveVZ-xAOv8YTWUsbkygzXqIIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.32.0/21
188.126.32.0/19
Signature Algorithm: sha256WithRSAEncryption
82:80:62:d7:44:27:d6:74:63:c3:9e:4a:f9:6c:37:eb:c3:10:
61:0e:bd:38:2f:ee:7a:03:b8:fa:bd:b4:5c:30:cb:d0:24:b7:
29:38:6a:33:64:b3:65:e3:f4:e2:fc:34:60:ed:3e:e5:11:00:
75:e9:25:a1:2f:0b:48:1a:2d:3a:03:44:9e:40:7e:76:49:18:
98:ec:87:fc:ae:dd:61:3a:ef:d4:e4:9d:ff:31:e2:ab:54:15:
8e:ca:0c:88:b1:ee:fd:f7:44:f8:b1:c5:7c:15:fa:d5:b2:5e:
d3:13:1a:e9:b0:30:dd:46:8f:2c:a3:cd:63:d7:ff:f7:a1:ac:
4b:4e:c3:92:65:54:1e:ee:01:77:cd:59:9c:9f:f1:99:8c:37:
42:fc:0c:71:91:34:80:1d:79:27:a9:31:12:ff:7f:b0:4e:0f:
55:af:3b:c2:0c:72:8a:e4:ab:c4:41:28:1a:68:f0:cb:da:1b:
8f:64:a9:28:3c:20:d7:79:fa:c4:b0:2c:3d:eb:ed:99:a3:c2:
ba:24:5d:2f:dc:0b:45:6d:7a:f8:6a:67:ef:31:c2:dc:1f:c5:
e7:8b:36:db:66:ee:9a:4d:d3:5c:0b:ad:82:06:3f:3f:06:1e:
c2:b5:cb:8c:4e:31:08:f3:c7:b8:d1:dc:aa:90:f5:3d:61:9d:
39:9f:e0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:24 2024 by rpki-client on console-fra.rpki-client.org