Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/uUuwMcENX7q33qXJkX4AFUg2dD4.roa
File: uUuwMcENX7q33qXJkX4AFUg2dD4.roa (raw, json)
Hash identifier: ba3EqWttzVYxyZP9Cm+YagM1xmsZdd6rzDVuP9v0BDc=
Subject key identifier: B9:4B:B0:31:C1:0D:5F:BA:B7:DE:A5:C9:91:7E:00:15:48:36:74:3E
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 0187B558159B2DE661C01EBBB6ADF21DFDD4
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/uUuwMcENX7q33qXJkX4AFUg2dD4.roa
Signing time: Mon 24 Apr 2023 22:17:41 +0000
ROA not before: Mon 24 Apr 2023 22:17:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42337
IP address blocks: 2.188.225.0/24 maxlen: 24
2.188.224.0/20 maxlen: 24
2.188.232.0/23 maxlen: 23
2.188.234.0/24 maxlen: 24
2.188.236.0/23 maxlen: 23
2.188.240.0/20 maxlen: 24
2.188.40.0/21 maxlen: 24
2.188.164.0/22 maxlen: 22
2.188.160.0/22 maxlen: 22
2.188.165.0/24 maxlen: 24
2.188.161.0/24 maxlen: 24
2.188.160.0/21 maxlen: 24
2.188.176.0/23 maxlen: 23
2.188.192.0/19 maxlen: 24
2.189.160.0/21 maxlen: 24
2.189.168.0/21 maxlen: 24
2.189.80.0/21 maxlen: 24
2.189.88.0/21 maxlen: 24
2.188.72.0/22 maxlen: 24
2.189.48.0/21 maxlen: 24
2.189.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Apr 2023 14:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b5:58:15:9b:2d:e6:61:c0:1e:bb:b6:ad:f2:1d:fd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Apr 24 22:17:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b94bb031c10d5fbab7dea5c9917e00154836743e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:2a:26:ce:9d:bf:a4:b6:63:36:27:bd:d2:
59:5e:d2:1c:48:7c:09:50:2a:03:50:42:9a:dc:7a:
fb:2f:04:6b:bd:3e:c2:31:36:c4:ba:ec:4b:48:c0:
f4:12:08:f9:2f:da:d7:d0:ce:54:84:c1:e1:7d:07:
bb:13:50:58:b4:f2:46:05:1c:d2:cd:99:94:6d:19:
00:f4:4c:12:b3:77:94:d7:68:15:32:d3:b1:61:89:
db:01:44:b0:c5:03:7d:e4:15:d3:73:ef:ac:fc:0b:
b1:e3:00:f1:1d:71:eb:37:f5:5e:ed:5b:4b:9b:90:
ad:b1:ad:b8:78:08:fe:aa:92:8f:d1:49:a8:8b:cb:
16:5d:00:82:3a:39:53:0f:f5:79:64:0c:12:f5:ff:
67:32:08:b7:95:6b:08:9e:b4:f5:ec:e3:a5:9e:5f:
27:dc:1f:54:74:8f:dd:9d:28:b1:7d:72:5b:1b:1b:
1f:91:de:7c:88:13:d0:b9:27:d5:bb:2f:d6:e8:9c:
98:17:ee:c3:e1:fb:28:8e:63:41:a8:45:92:72:a3:
7d:dd:e8:db:b9:45:67:3c:94:72:37:c2:b7:4b:94:
96:95:97:97:8c:39:8b:91:11:69:4f:9d:17:be:19:
6d:de:08:75:01:5a:45:a2:5a:14:9f:49:89:0d:b4:
24:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4B:B0:31:C1:0D:5F:BA:B7:DE:A5:C9:91:7E:00:15:48:36:74:3E
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/uUuwMcENX7q33qXJkX4AFUg2dD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.40.0/21
2.188.72.0/22
2.188.160.0/21
2.188.176.0/23
2.188.192.0/18
2.189.48.0/21
2.189.64.0/22
2.189.80.0/20
2.189.160.0/20
Signature Algorithm: sha256WithRSAEncryption
06:55:fa:37:6b:67:df:15:db:4b:56:75:cd:31:cc:2a:0e:31:
86:77:4a:db:7e:e3:23:91:4b:9d:91:74:f4:73:01:6a:e6:d0:
f0:db:b5:71:fd:72:9f:99:c4:0d:82:04:fd:06:84:a3:99:6b:
5a:33:79:1b:30:c4:39:fc:07:ec:99:7c:dd:c2:ab:a9:6f:bf:
bc:e4:44:8b:0e:67:b8:05:10:37:9b:38:a1:24:bb:ce:64:bb:
6b:11:f0:0a:54:e3:a7:63:f8:65:9d:58:74:7b:9e:96:4d:1b:
88:9a:bd:f7:fe:76:47:9e:be:05:fc:95:35:ab:ad:63:df:fd:
81:3b:7f:03:97:e3:14:6e:b0:c6:4a:33:6d:64:c3:b8:af:76:
a6:3a:fc:0f:55:58:7f:53:26:75:61:3c:62:ab:dc:dc:88:6f:
5c:bb:25:79:60:0f:3e:16:b7:9a:56:55:54:80:7c:e2:06:24:
78:29:85:71:17:48:b1:c5:42:b9:b4:2a:57:2a:81:4a:50:35:
40:69:f2:a9:8e:e6:43:15:89:4e:7d:3a:c4:c5:74:23:aa:5b:
66:90:02:55:b5:05:29:4c:9c:88:27:63:e3:75:75:79:29:27:
d0:34:19:cf:be:c5:c6:2e:41:a0:cb:b9:92:a0:91:0c:b5:69:
03:11:91:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:48 2024 by rpki-client on console-fra.rpki-client.org