Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UCOkECBiFmPPpX1O5SXD26h6A4c.roa
File: UCOkECBiFmPPpX1O5SXD26h6A4c.roa (raw, json)
Hash identifier: JfX2h18n8Hc/LcDUzE8b4fks44AXkZjTtU8FfjwZqak=
Subject key identifier: 50:23:A4:10:20:62:16:63:CF:A5:7D:4E:E5:25:C3:DB:A8:7A:03:87
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01875A5302C47067ABFB4DADC3BD735FF0AE
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UCOkECBiFmPPpX1O5SXD26h6A4c.roa
Signing time: Fri 07 Apr 2023 06:06:42 +0000
ROA not before: Fri 07 Apr 2023 06:06:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 88.216.185.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:53:02:c4:70:67:ab:fb:4d:ad:c3:bd:73:5f:f0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 7 06:06:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5023a41020621663cfa57d4ee525c3dba87a0387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:c3:f6:c9:32:0f:08:65:43:6d:53:a1:c0:
ef:ae:4f:8e:32:62:f9:2b:c1:4d:b6:c5:55:87:b7:
0a:b4:1d:b7:fe:4f:a3:38:51:df:04:2d:83:60:02:
3b:26:b6:27:8c:50:66:3e:27:41:39:2b:f1:4e:a9:
57:c3:54:d2:ec:f5:b6:be:4f:29:a9:fa:76:9e:e6:
aa:ec:2f:34:c5:41:f9:e2:6e:e6:85:77:be:3e:5f:
0e:ae:43:50:be:08:08:f2:21:17:28:d7:a8:7b:79:
f3:20:00:9b:e3:e8:4e:ee:b2:b0:18:1d:0b:20:ad:
cc:79:64:fa:b0:84:18:36:9f:b6:07:8b:1e:67:59:
6d:d7:35:e2:e3:7d:75:5c:a4:3d:ff:ca:74:16:15:
7c:25:de:a8:51:7c:97:9f:59:98:22:73:6f:b2:2e:
78:8e:34:a5:26:04:ee:06:9f:3b:4d:ac:c7:fe:21:
30:05:8f:a3:a4:d4:a1:4e:47:49:4e:67:4f:65:64:
4e:0e:00:0b:73:92:75:4b:95:4a:eb:00:9d:10:46:
c7:73:d8:07:2a:91:83:07:a6:79:f2:08:a6:ae:49:
49:54:4f:8a:f0:45:65:9a:9a:e3:55:71:e8:97:1e:
96:78:a7:8e:48:0b:45:b2:97:a5:b5:c4:32:bd:34:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:23:A4:10:20:62:16:63:CF:A5:7D:4E:E5:25:C3:DB:A8:7A:03:87
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UCOkECBiFmPPpX1O5SXD26h6A4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.152.0-84.32.154.255
84.32.156.0/24
84.32.158.0/23
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.132.0/24
88.216.185.0/24
Signature Algorithm: sha256WithRSAEncryption
70:fc:e0:bf:3f:87:df:cb:50:94:90:b2:85:0d:31:08:9f:66:
3c:12:13:64:1b:08:f1:ab:68:46:15:90:1f:4c:94:8d:d7:8b:
ba:e1:ec:99:01:20:c5:06:64:72:16:32:49:bd:f6:4a:4f:62:
14:fe:d8:5b:e6:8a:8a:c0:a9:1d:c7:da:f5:d3:e3:6f:b0:40:
5a:7d:65:09:30:bf:2d:b4:65:47:2d:03:58:e5:73:e4:25:dc:
bb:44:f0:b5:80:42:5e:8d:67:03:8a:0d:10:c8:dc:19:d4:9a:
32:65:bb:e1:10:d8:d2:4b:0d:98:af:f8:af:de:c4:22:11:b9:
e6:8d:cb:03:a2:b3:96:77:8f:91:e1:06:5d:6e:ae:02:83:7c:
ca:05:d2:cd:fb:3f:04:e7:d5:16:ea:d7:f9:9f:4b:d4:09:43:
f1:a5:a3:46:ed:a0:40:0c:51:29:fd:45:cb:0b:a5:58:7e:cb:
63:89:43:cc:3b:cc:a9:24:9e:8a:3f:ea:44:f1:fb:ba:24:47:
f0:ec:1e:d8:aa:38:70:8d:98:0e:de:33:99:9d:d7:54:01:ee:
2d:47:3b:1c:ed:18:2c:5a:d7:c7:e3:d3:66:87:ef:68:c4:ed:
3b:bf:39:f7:ff:18:30:84:af:a9:1b:51:5c:1d:45:0d:da:3a:
05:da:7e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:30 2023 by rpki-client on console-ams.rpki-client.org