Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uMs7I3-2oP22BmnCC-yLXxgfnTc.roa
File: uMs7I3-2oP22BmnCC-yLXxgfnTc.roa (raw, json)
Hash identifier: pyMZOWfOHFQTx6PKZzmhSkuAcuNorZ7lrY3FlBSMQDw=
Subject key identifier: B8:CB:3B:23:7F:B6:A0:FD:B6:06:69:C2:0B:EC:8B:5F:18:1F:9D:37
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CADC63B38BF64A78695DDDCDE120AF2BF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uMs7I3-2oP22BmnCC-yLXxgfnTc.roa
Signing time: Thu 28 Dec 2023 00:14:58 +0000
ROA not before: Thu 28 Dec 2023 00:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 45.148.116.0/22 maxlen: 24
185.238.188.0/22 maxlen: 24
2a0e:b107:1870::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a10:ccc0:110::/44 maxlen: 48
2a06:de01:d0::/44 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a10:ccc3:ccce::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
2a06:de01:400::/40 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ad:c6:3b:38:bf:64:a7:86:95:dd:dc:de:12:0a:f2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 28 00:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8cb3b237fb6a0fdb60669c20bec8b5f181f9d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:c0:4f:80:a7:39:61:d7:e7:84:db:72:b3:
2d:e8:2c:2f:4d:c1:01:18:4e:21:af:37:9b:6c:2c:
b5:71:e5:3f:9e:c7:df:f6:19:f4:72:f8:e7:a8:f4:
7a:de:22:ba:8a:a9:35:ac:db:49:25:c3:9f:21:a1:
a9:bb:e2:d2:a5:4e:a1:06:89:6e:17:0b:ae:3e:4a:
8c:80:d7:70:4c:8a:9e:46:b5:79:8e:3d:c4:81:f5:
e9:57:b1:d6:39:d7:07:cb:1c:bd:be:6f:41:9e:ca:
7e:90:d0:8c:a5:1d:1d:67:eb:3b:a4:56:c6:36:62:
9b:b3:20:39:12:b4:96:c2:4a:25:37:ec:44:6c:b3:
93:be:4c:7a:69:43:4d:84:ee:ab:44:6f:ce:6f:dc:
18:e1:a9:67:09:96:d0:c6:97:1f:fb:e9:89:a1:d6:
82:85:87:9d:de:cf:2d:40:04:1c:0e:f9:81:de:0c:
67:4d:c1:dd:c9:7e:ee:62:ac:d3:ec:10:55:2a:83:
de:c1:38:1a:57:f0:37:91:66:31:1b:90:6b:82:e0:
78:cc:7d:ae:a3:e7:27:63:8a:6b:20:5c:f4:5f:36:
cc:4a:43:35:28:5a:a9:e2:e7:da:93:10:53:70:48:
b3:62:08:69:ee:4c:bf:fe:30:4e:4f:c2:2a:24:7e:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CB:3B:23:7F:B6:A0:FD:B6:06:69:C2:0B:EC:8B:5F:18:1F:9D:37
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uMs7I3-2oP22BmnCC-yLXxgfnTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
185.238.188.0/22
IPv6:
2a06:de01:d0::/44
2a06:de01:400::/40
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc0:110::/44
2a10:ccc3:ccce::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
13:fd:0b:88:9a:2d:b1:26:b6:54:4e:83:6e:c2:12:1d:18:3e:
bd:ab:80:e7:23:76:1b:16:8d:93:c6:63:e9:22:c7:ca:f2:21:
76:29:df:d9:e5:1a:27:05:74:9f:ba:ba:18:26:0e:dd:f1:c8:
50:7e:21:b9:0f:c1:63:77:7e:7b:65:03:2a:45:64:2f:20:77:
7b:e7:27:05:74:f9:40:d4:4b:f1:33:7c:dc:9e:51:c4:1b:91:
7d:61:17:4c:dd:a3:63:c3:76:cf:d0:6d:aa:20:d6:e3:71:94:
f1:83:d4:f5:6b:14:ca:a6:47:8f:10:ad:ea:94:f5:3c:e5:d1:
d4:8e:b0:c8:31:84:fd:ad:86:78:a7:0c:15:0c:2d:32:f7:a2:
5c:c0:59:ee:3a:bf:93:a5:9f:0b:aa:6f:6f:9f:f1:3c:15:bc:
4d:51:74:80:d6:03:11:84:ec:66:43:39:b9:cb:5a:0f:4f:5a:
e5:7b:fd:50:a6:05:a6:b8:dd:4c:bb:34:3c:92:e1:8a:c6:16:
90:77:60:6a:e6:10:45:fd:36:24:0b:bb:1d:51:f9:b4:13:fd:
db:42:d2:aa:fe:0a:22:1a:4d:27:81:ca:3c:f9:df:50:3f:25:
c4:91:5a:32:1c:1d:71:9d:a8:30:25:a3:33:bb:84:ed:ce:e8:
09:40:ba:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 14:20:37 2023 by rpki-client on console-fra.rpki-client.org