Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/UzLRMEwL8k98xfwBK8HPs7tJR5Q.roa
File: UzLRMEwL8k98xfwBK8HPs7tJR5Q.roa (raw, json)
Hash identifier: Jsr+XhS6XxvG9CE+C3jAV100IuxjdVLZ/HEtN3iTkZo=
Subject key identifier: 53:32:D1:30:4C:0B:F2:4F:7C:C5:FC:01:2B:C1:CF:B3:BB:49:47:94
Certificate issuer: /CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Certificate serial: 01856E8B02E4C906EDF4F6DB787530AA7757
Authority key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/UzLRMEwL8k98xfwBK8HPs7tJR5Q.roa
Signing time: Sun 01 Jan 2023 18:14:42 +0000
ROA not before: Sun 01 Jan 2023 18:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34108
IP address blocks: 95.128.88.0/21 maxlen: 24
178.250.144.0/21 maxlen: 24
2a02:928::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:02:e4:c9:06:ed:f4:f6:db:78:75:30:aa:77:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Validity
Not Before: Jan 1 18:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5332d1304c0bf24f7cc5fc012bc1cfb3bb494794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:4f:94:e3:73:61:6f:b6:dc:8a:a9:c4:f0:
9b:4b:03:49:93:c3:59:43:00:cf:2b:61:80:17:40:
1a:e5:50:da:3d:cb:aa:c6:52:71:18:cf:02:f4:3f:
5c:a3:0a:4b:3d:29:07:80:40:6a:36:32:ef:c2:31:
36:b7:4b:26:00:b2:3e:b3:41:ff:ed:84:ad:17:87:
76:ca:37:24:f5:a0:d3:8a:6b:c9:89:aa:7e:e5:0b:
35:f8:01:dd:74:b8:20:3d:44:c8:0b:3e:7c:a6:f3:
b5:40:9a:ab:76:da:e6:f1:57:e4:7f:5d:8c:f0:f8:
36:67:13:09:4f:91:72:a9:6e:e2:ba:2e:d5:28:4c:
bc:f2:30:3f:2e:ae:b3:89:b5:cf:5f:90:0f:89:c9:
77:76:1b:12:80:22:e4:cd:e4:2a:2d:4c:6e:8c:7c:
d3:bb:0a:e2:69:bd:6c:54:e3:42:ab:2e:ee:e7:8e:
43:b7:42:1a:aa:9d:24:61:7c:35:fe:a1:bf:a4:a1:
48:16:7d:1a:0f:85:35:a4:d4:7c:6a:85:78:09:ea:
64:a7:ff:aa:7d:3d:95:3b:fa:79:c9:c5:d8:3a:05:
73:23:c3:bf:7f:f9:7c:61:72:44:01:38:52:75:e4:
a1:46:23:20:90:75:0e:07:41:f9:85:ee:96:be:10:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:32:D1:30:4C:0B:F2:4F:7C:C5:FC:01:2B:C1:CF:B3:BB:49:47:94
X509v3 Authority Key Identifier:
keyid:9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/UzLRMEwL8k98xfwBK8HPs7tJR5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.88.0/21
178.250.144.0/21
IPv6:
2a02:928::/32
Signature Algorithm: sha256WithRSAEncryption
60:8e:f2:c7:67:93:65:a2:dd:81:5d:32:14:81:fb:dd:ec:b9:
18:6f:2d:e3:2b:af:18:bb:d1:bb:d1:75:ac:9f:10:1e:c8:8e:
65:25:41:bf:fe:d6:85:78:14:a9:2f:91:e2:30:d1:c8:7d:c4:
1f:46:85:2b:4d:63:a4:e8:0b:b2:e3:bd:81:dd:31:7d:85:f6:
a3:99:13:c5:b2:c2:34:7f:b6:20:05:fc:0b:fc:53:72:d0:a9:
d7:89:8a:94:8f:67:3f:4f:96:c6:0a:91:92:c8:da:be:70:cc:
a0:78:7a:f1:0e:49:88:25:c7:c2:1d:88:e1:2f:23:6e:96:ee:
4c:f1:d8:b0:f1:16:3a:8d:52:84:62:ac:b8:e6:06:f4:71:14:
e5:ee:e1:2c:10:98:cb:50:56:68:61:45:75:a1:a5:fa:1d:cb:
34:39:a8:13:64:03:cc:ae:41:6a:f4:1e:96:2c:d5:09:ef:1b:
88:e8:a2:88:b2:79:a8:91:e2:1a:4d:f8:97:a8:e0:5f:36:bc:
6f:64:db:68:0e:7f:b0:18:1f:0f:f4:cc:fa:28:26:22:e9:f8:
1c:be:2f:3f:b9:d4:b5:1f:cf:13:77:d9:e8:f8:d3:3a:79:44:
34:3a:ae:4a:a7:a2:97:dc:91:7d:0a:20:ca:82:2d:df:22:83:
c9:31:85:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:38 2024 by rpki-client on console-fra.rpki-client.org