Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/UteEeFXebkOuNfw2b-U8O2DFbIc.roa
File: UteEeFXebkOuNfw2b-U8O2DFbIc.roa (raw, json)
Hash identifier: Gnb2QsLA2rSCw/P6TBw+k8FtopsKqel9zN/SdKSSnZ4=
Subject key identifier: 52:D7:84:78:55:DE:6E:43:AE:35:FC:36:6F:E5:3C:3B:60:C5:6C:87
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018C9B6BBC890206B7358495D41A81A25060
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/UteEeFXebkOuNfw2b-U8O2DFbIc.roa
Signing time: Sun 24 Dec 2023 10:42:58 +0000
ROA not before: Sun 24 Dec 2023 10:42:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44889
IP address blocks: 212.16.64.0/19 maxlen: 24
212.16.71.0/24 maxlen: 24
212.16.72.0/24 maxlen: 25
212.16.86.0/23 maxlen: 23
212.16.89.0/24 maxlen: 24
212.16.92.0/23 maxlen: 23
212.80.0.0/19 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.29.0/24 maxlen: 24
46.38.141.0/24 maxlen: 24
46.38.144.0/21 maxlen: 21
46.38.144.0/23 maxlen: 23
46.38.140.0/24 maxlen: 24
46.38.150.0/24 maxlen: 24
46.38.156.0/23 maxlen: 23
46.38.158.0/24 maxlen: 24
46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9b:6b:bc:89:02:06:b7:35:84:95:d4:1a:81:a2:50:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Dec 24 10:42:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52d7847855de6e43ae35fc366fe53c3b60c56c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:44:b2:4b:08:d4:0b:9c:5f:a3:71:07:ed:
73:77:c8:d0:c0:a3:04:8d:5b:e6:8f:22:c7:41:61:
05:53:2d:7f:cd:35:91:09:94:cc:e2:87:fb:8e:1d:
8f:d7:ae:ec:d4:54:50:5f:b3:e3:01:b0:49:40:b3:
34:e2:88:9d:b2:43:55:21:0c:f1:c7:98:e5:d6:aa:
27:67:8e:b7:13:7f:1c:68:cd:a4:34:17:49:4a:15:
d5:40:95:94:10:1d:46:1f:6d:60:5c:5e:0f:0d:81:
4d:1d:9c:e1:8e:8c:56:43:f1:a6:a5:98:ee:6f:06:
ce:b2:bb:bf:be:61:e4:2a:a6:80:c4:64:f5:21:9a:
5b:ad:6d:ba:3b:c2:6b:fc:99:cc:f3:b3:a3:dd:a8:
13:b0:70:29:b3:30:03:9b:b5:5d:5f:b9:b5:24:cb:
83:21:fb:fa:a1:c2:11:bb:e0:b4:c5:2a:95:f9:01:
1a:8b:97:46:08:a9:11:cf:15:bb:8f:b7:9b:8c:67:
82:db:5c:ca:05:c8:9a:a0:86:3a:8b:a3:e9:ca:b1:
4f:5b:0c:eb:b4:4a:be:82:77:b7:ee:99:4a:76:d2:
d8:7b:bc:67:e8:3e:84:7b:f0:5a:47:4c:e9:e5:54:
f0:3b:41:13:2c:aa:4a:0c:64:ca:f7:73:44:43:fa:
a6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D7:84:78:55:DE:6E:43:AE:35:FC:36:6F:E5:3C:3B:60:C5:6C:87
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/UteEeFXebkOuNfw2b-U8O2DFbIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.140.0/23
46.38.144.0/21
46.38.156.0-46.38.158.255
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
00:4d:cc:8c:48:53:48:a3:71:41:6f:97:11:5a:77:83:84:88:
86:62:70:22:08:d8:ac:d9:7b:71:52:40:c2:1b:10:55:0c:bb:
38:9c:01:ec:e2:fe:d6:55:8d:73:fa:e8:a5:43:d4:d7:49:21:
e6:da:c8:97:31:39:aa:ae:44:39:d5:af:ac:a3:75:91:d7:84:
e6:98:55:89:2e:7b:1d:b3:75:6a:4b:bb:03:c0:20:65:cc:84:
ca:73:c3:e4:72:71:df:26:12:4b:63:69:0c:e8:92:d8:97:ab:
54:8f:46:12:61:20:65:36:b3:60:68:64:43:2b:13:32:bc:bf:
3f:c3:1b:50:11:96:9a:1e:7d:56:68:cf:3a:a9:d6:ed:85:48:
25:bc:27:5c:cf:cd:64:98:17:f9:77:60:0d:cc:89:94:46:95:
7c:0b:c9:3b:8a:bd:b8:70:d3:98:90:1b:4e:81:c6:ee:12:8e:
6e:f1:80:db:c2:83:99:2a:ba:39:04:15:e1:69:e7:75:5d:aa:
eb:be:f8:44:e5:84:a8:2b:36:3d:27:77:19:89:29:6c:e1:39:
9f:5b:95:43:c3:fd:ce:36:33:60:ba:39:2c:7b:2a:d6:e3:71:
01:c4:6c:ad:66:78:64:4e:56:28:89:7e:aa:8f:1d:b6:82:0c:
41:a6:e6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:48 2024 by rpki-client on console-ams.rpki-client.org