Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/UWALGquE_0VES-NeGiqJ-UzF2Bg.roa
File: UWALGquE_0VES-NeGiqJ-UzF2Bg.roa (raw, json)
Hash identifier: uSerV/h6g0gYZCAiW34qBYh4Sjmv5QwF0/B9jW/PlNA=
Subject key identifier: 51:60:0B:1A:AB:84:FF:45:44:4B:E3:5E:1A:2A:89:F9:4C:C5:D8:18
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 01856C65F12E32493C06BC182FC18A6D768F
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/UWALGquE_0VES-NeGiqJ-UzF2Bg.roa
Signing time: Sun 01 Jan 2023 08:14:58 +0000
ROA not before: Sun 01 Jan 2023 08:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49637
IP address blocks: 95.181.146.0/24 maxlen: 24
95.181.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:f1:2e:32:49:3c:06:bc:18:2f:c1:8a:6d:76:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 08:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51600b1aab84ff45444be35e1a2a89f94cc5d818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:74:46:c1:c1:02:6c:01:22:0f:0a:31:13:
0e:b0:10:c1:82:24:0a:fd:6c:79:84:3d:e9:82:d1:
43:00:cc:c9:ee:14:2b:ec:a8:70:cd:5e:bb:f0:ae:
bd:73:be:47:a1:67:25:fe:50:e3:9f:ad:16:76:80:
f3:49:65:b4:ca:f3:dd:36:df:d1:67:3f:d5:43:9e:
30:da:12:99:c2:0d:76:2d:81:9b:a1:c8:75:ce:78:
41:06:0d:79:c3:de:80:9a:e7:ec:e8:ba:1b:fd:6b:
67:81:b0:af:56:d9:cd:62:55:bb:8f:65:df:4c:04:
39:7d:e3:0d:ed:f5:41:ad:71:e7:32:43:ff:b0:92:
1c:f1:ee:8a:ba:ce:99:72:53:0d:17:7b:0e:78:f7:
cb:37:1f:15:8b:52:33:8b:7f:6d:c6:91:f7:98:a3:
3b:60:8f:08:b8:b1:19:14:da:e5:9e:cb:eb:ca:98:
70:c2:ae:4d:ae:a6:80:8d:bc:79:55:c5:b6:d0:22:
d6:71:72:a9:08:10:8b:71:3b:9d:0a:97:48:3c:37:
1d:aa:62:2b:2a:26:4e:3e:99:f7:a6:55:94:8e:33:
41:ae:cb:d0:6d:89:9f:3f:f1:d6:30:87:33:00:e2:
54:e5:6b:8b:f2:4c:d7:51:24:f5:21:30:05:16:ed:
de:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:60:0B:1A:AB:84:FF:45:44:4B:E3:5E:1A:2A:89:F9:4C:C5:D8:18
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/UWALGquE_0VES-NeGiqJ-UzF2Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.146.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:a1:14:30:84:6f:d0:68:77:99:3b:a9:fd:0c:e1:e8:61:4b:
9a:e9:05:31:fd:93:50:e3:14:56:ce:d6:6f:a8:81:12:f3:e4:
f3:56:f3:2e:7c:a2:e3:f4:2e:c3:b8:90:23:1c:bd:84:a9:08:
6c:18:c3:03:13:b9:8d:13:8c:ef:d6:f3:68:a6:a2:0e:3f:a9:
e0:d6:50:cf:db:52:cb:86:cf:65:24:0e:f1:cd:c2:a1:42:00:
f4:cb:8a:99:28:0c:fd:b0:6a:e0:d9:e7:8b:76:8c:b8:16:c1:
07:5e:55:08:c9:a2:88:69:6f:5f:1d:f4:8b:48:f0:a8:18:43:
63:92:d2:f2:43:ae:3e:e9:26:5d:0d:ed:09:a2:3b:2e:eb:df:
80:7f:a5:82:98:27:de:db:78:af:84:6a:72:ba:b6:49:29:d8:
1c:c4:43:3d:b4:cc:4e:04:7f:6d:64:ab:96:f1:02:3e:3b:7f:
7d:43:b2:f5:19:f0:b0:05:05:49:aa:34:16:7d:59:2a:70:34:
3f:95:4d:df:35:fe:04:63:f8:a3:89:88:bb:b8:19:83:e9:4f:
d1:d0:a2:6d:92:a9:b3:0f:dc:7d:75:d2:2b:02:50:9f:17:ba:
9f:56:42:82:f9:14:54:e9:58:76:d9:f3:ca:7b:cc:5e:88:a2:
1b:04:98:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:21 2024 by rpki-client on console-ams.rpki-client.org