Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/UWlW-X2iMy3bMwWTYEDNY12DTzU.roa
File: UWlW-X2iMy3bMwWTYEDNY12DTzU.roa (raw, json)
Hash identifier: kZdYmzUOk/JfVyQyKZgPPAj17+riuuWzhaWocSFaUGQ=
Subject key identifier: 51:69:56:F9:7D:A2:33:2D:DB:33:05:93:60:40:CD:63:5D:83:4F:35
Certificate issuer: /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial: 01856F9DB1CEE950CC2C8CCB8F8333690B78
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/UWlW-X2iMy3bMwWTYEDNY12DTzU.roa
Signing time: Sun 01 Jan 2023 23:14:43 +0000
ROA not before: Sun 01 Jan 2023 23:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20546
IP address blocks: 185.5.82.0/24 maxlen: 24
185.5.83.0/24 maxlen: 24
185.5.80.0/24 maxlen: 24
185.5.81.0/24 maxlen: 24
91.236.122.0/24 maxlen: 24
80.90.0.0/19 maxlen: 24
2a02:cb45:104::/48 maxlen: 48
2a02:cb42::/32 maxlen: 32
2a02:cb43::/32 maxlen: 48
2a02:cb46:0:205::/64 maxlen: 64
2a02:cb43:4007::/48 maxlen: 48
2a02:cb46:0:6::/64 maxlen: 64
2a02:cb41::/32 maxlen: 32
2a02:cb44::/32 maxlen: 32
2a02:cb46:0:3::/64 maxlen: 64
2a02:cb45:101::/48 maxlen: 48
2a02:cb40::/32 maxlen: 32
2a02:cb43:f::/48 maxlen: 48
2a02:cb46:0:204::/64 maxlen: 64
2a02:cb46::/32 maxlen: 32
2a02:cb46:0:5::/64 maxlen: 64
2a02:cb47::/32 maxlen: 32
2a02:cb45:103::/48 maxlen: 48
2a02:cb43:4009::/48 maxlen: 48
2a02:cb43:e::/48 maxlen: 48
2a02:cb46:0:2::/64 maxlen: 64
2a02:cb46:0:203::/64 maxlen: 64
2a02:cb45:102::/48 maxlen: 48
2a02:cb45::/32 maxlen: 32
2a02:cb45:105::/48 maxlen: 48
2a02:cb46:0:4::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:b1:ce:e9:50:cc:2c:8c:cb:8f:83:33:69:0b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Validity
Not Before: Jan 1 23:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=516956f97da2332ddb3305936040cd635d834f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c9:3b:41:91:ca:8a:35:d0:2b:95:ee:45:7d:
0f:0c:5f:49:6d:b1:ca:d2:cd:d4:85:61:96:db:22:
ce:68:83:38:3f:95:49:3a:67:04:d2:cf:e2:20:27:
c4:b2:e1:57:e0:82:d6:30:69:81:0a:6f:38:80:8c:
38:1f:de:2f:2e:65:53:d5:07:b2:5c:28:4e:d8:97:
25:66:f6:35:3b:63:4c:c0:7e:83:59:e8:a3:68:59:
cd:3d:79:6f:39:d9:8f:ed:3f:1e:8b:7e:77:70:b1:
27:13:75:93:0e:b4:ea:81:94:e6:bf:1f:76:81:47:
85:70:37:65:66:8f:20:30:36:e7:bb:95:1c:d9:20:
da:9f:75:66:74:39:89:fa:73:c6:b0:85:94:25:a9:
8b:c7:24:85:0b:bb:90:bc:b6:5c:2a:23:2b:f0:87:
21:65:45:67:07:b9:eb:f8:bc:8f:8f:83:3f:ea:1c:
aa:17:41:05:53:5b:b5:d5:7b:86:f9:6e:93:51:c9:
48:43:ea:20:36:61:ed:ec:6c:ac:1a:74:d1:3a:2d:
19:b8:69:01:7b:97:0f:49:66:26:d8:aa:31:8b:03:
41:b1:bf:a0:96:d9:a7:72:10:70:b5:71:08:30:75:
fe:db:64:44:f3:65:69:a8:bc:41:a5:66:b1:d2:c9:
1b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:69:56:F9:7D:A2:33:2D:DB:33:05:93:60:40:CD:63:5D:83:4F:35
X509v3 Authority Key Identifier:
keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/UWlW-X2iMy3bMwWTYEDNY12DTzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.0.0/19
91.236.122.0/24
185.5.80.0/22
IPv6:
2a02:cb40::/29
Signature Algorithm: sha256WithRSAEncryption
8e:ad:9e:fb:47:28:b3:8f:7a:48:c0:da:51:4b:ec:93:68:69:
df:f5:e3:7e:9c:33:4c:f0:ad:94:a6:05:ec:d7:c5:5d:6b:ca:
37:99:aa:20:30:37:1b:52:5c:38:9d:6b:59:96:90:7a:f3:90:
f4:15:29:b9:ee:56:2e:87:af:21:13:dd:e8:d6:25:e4:f2:eb:
4f:e1:f6:e3:f1:8c:9b:65:0c:2c:10:6f:74:37:cf:05:b5:e5:
9c:a4:f7:71:6c:44:e5:2e:01:ff:a3:5a:ad:78:bc:5f:f6:97:
ce:ff:7d:fc:fb:7c:c1:a4:51:8e:f2:47:ba:eb:c5:de:bd:0f:
ea:38:06:bf:d6:23:9c:1e:1e:68:2e:0e:15:64:11:e0:e7:33:
45:a3:68:e2:b2:54:0e:81:d0:d4:bc:7c:7b:72:34:17:1f:01:
b8:d8:3e:00:69:88:98:37:57:34:72:e2:12:01:c0:e0:14:d8:
db:99:08:79:2d:99:84:ff:14:10:a4:78:3f:8f:69:da:60:cb:
38:f5:ac:4f:f9:f4:9a:92:02:5a:5d:fe:35:dd:90:8b:d9:cb:
e7:60:da:09:b6:f5:1b:22:bd:49:ee:45:1b:8b:68:bb:76:54:
e1:8f:9e:00:e9:f6:6b:73:3b:28:07:e8:2f:7b:9e:31:36:d3:
36:51:6b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:48 2024 by rpki-client on console-ams.rpki-client.org