Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/UkEuubx4ORj_DPLCub-lXhCAACI.roa
File: UkEuubx4ORj_DPLCub-lXhCAACI.roa (raw, json)
Hash identifier: EqVqPv8UY8IwDJQ+KQGfpYytTHd0kJksG+qg+j/v6ow=
Subject key identifier: 52:41:2E:B9:BC:78:39:18:FF:0C:F2:C2:B9:BF:A5:5E:10:80:00:22
Certificate issuer: /CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Certificate serial: 018C491D11193F18A15AA9AB90DC876621D7
Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/UkEuubx4ORj_DPLCub-lXhCAACI.roa
Signing time: Fri 08 Dec 2023 11:08:10 +0000
ROA not before: Fri 08 Dec 2023 11:08:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211467
IP address blocks: 185.98.219.0/24 maxlen: 24
185.98.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:1d:11:19:3f:18:a1:5a:a9:ab:90:dc:87:66:21:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Validity
Not Before: Dec 8 11:08:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52412eb9bc783918ff0cf2c2b9bfa55e10800022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:18:68:56:51:c1:3d:81:61:b3:60:d4:7f:73:
81:62:67:be:90:d0:14:f8:d4:ad:e7:96:e3:90:ee:
3f:b4:21:fe:37:66:29:87:1b:67:0c:1f:df:57:12:
78:b9:6c:f0:47:89:e4:bb:73:2c:cf:be:41:a5:56:
d9:0f:c0:65:cf:30:96:a3:cd:b0:01:3c:5c:d0:86:
4f:2e:6b:33:fc:a2:dc:2e:25:0c:78:dc:4c:34:37:
19:70:fb:4d:6f:95:1b:68:48:ec:72:53:3e:1d:54:
c8:3b:10:d3:8d:15:54:67:6c:87:da:2a:01:83:d2:
52:97:64:ea:8c:ef:c2:5e:3f:fc:1b:80:c9:ff:76:
3b:1c:42:1d:dc:98:e5:d2:4b:8e:46:e8:3b:2e:9a:
91:70:d1:ac:97:c7:09:34:6b:c8:8e:ff:14:d2:98:
9c:dd:a6:8d:a6:3d:54:1b:dc:19:02:37:94:0e:6a:
39:b1:8d:d9:76:d5:b9:5e:9e:60:b2:f2:91:67:94:
18:26:14:dc:24:d4:d4:c0:ef:54:de:56:51:c2:cc:
02:ab:f8:47:b2:7c:4e:db:1b:61:f5:2a:3a:cb:5f:
81:33:55:29:ac:2a:4f:bc:d9:24:f3:ca:3b:fd:f1:
35:44:32:e6:5d:4b:c8:f7:da:e7:24:a2:4f:07:28:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:41:2E:B9:BC:78:39:18:FF:0C:F2:C2:B9:BF:A5:5E:10:80:00:22
X509v3 Authority Key Identifier:
keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/UkEuubx4ORj_DPLCub-lXhCAACI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.217.0/24
185.98.219.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5c:b6:d1:38:62:58:5c:e2:31:c1:50:cd:c6:4c:46:a6:77:
d8:1d:bb:d8:63:0e:11:c7:11:08:30:14:38:82:ce:dc:d2:76:
b9:1c:51:8c:45:a9:38:f7:24:b5:25:cd:15:00:ce:20:bd:8b:
e8:4d:0c:5f:3c:0a:8c:44:e6:2e:21:c4:96:74:06:ff:f7:87:
92:6d:af:9e:0e:60:5a:e5:99:49:4d:ab:29:eb:9e:f6:85:69:
d5:2e:8e:bf:21:5f:cc:4b:11:30:1b:ae:00:21:8b:8e:02:92:
06:0c:a8:19:9e:b4:f4:ac:bf:23:82:82:23:11:2a:f0:37:92:
43:55:29:fa:1c:86:80:30:5d:4f:3f:46:1b:32:e8:6f:ad:1c:
40:d3:9f:20:90:fa:d8:17:a3:63:b5:bc:b8:a0:8d:60:88:2a:
1e:bd:3c:72:67:e5:ec:f4:89:71:86:09:57:37:73:55:8a:fd:
4a:c4:46:b4:f1:c9:41:4c:93:11:fe:6c:ec:af:59:5f:b7:dc:
5b:b8:4b:c4:8e:c3:20:6d:ca:7a:91:85:81:80:fd:bf:19:d3:
0d:ab:7e:39:6d:bf:23:7f:40:4d:5a:61:cd:40:da:6a:40:1c:
0b:d2:38:6e:4a:43:01:d7:08:2c:2f:e5:a0:0e:63:28:4c:57:
9a:71:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 12:29:44 2023 by rpki-client on console-fra.rpki-client.org