Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/UJSGlAiP76BihnNP9p02_tM2evU.roa
File: UJSGlAiP76BihnNP9p02_tM2evU.roa (raw, json)
Hash identifier: vwd8MrtnCYRXG1kC6UMYlZAGLstWIFCAaPehAku70bI=
Subject key identifier: 50:94:86:94:08:8F:EF:A0:62:86:73:4F:F6:9D:36:FE:D3:36:7A:F5
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018572BA556B606329D1CD310F3EAEC38150
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/UJSGlAiP76BihnNP9p02_tM2evU.roa
Signing time: Mon 02 Jan 2023 13:44:52 +0000
ROA not before: Mon 02 Jan 2023 13:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204846
IP address blocks: 188.130.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:55:6b:60:63:29:d1:cd:31:0f:3e:ae:c3:81:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50948694088fefa06286734ff69d36fed3367af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9d:77:25:42:42:ed:ca:b5:fc:1e:51:69:b9:
ca:c9:7f:9a:e2:60:fd:f7:5b:07:dc:8d:c7:2f:63:
5d:54:f8:6e:e9:b0:23:73:1c:13:ce:90:a0:d9:f2:
68:51:49:de:bc:67:ac:d5:1a:75:bb:90:7a:4a:65:
64:72:46:4c:f2:69:06:07:85:f1:b3:7e:77:53:3b:
35:ab:6e:85:dc:ab:32:14:05:da:e9:ff:0f:c6:9d:
0a:2b:3d:aa:fb:36:eb:af:ff:33:e3:4c:c4:d7:ec:
0b:95:df:fd:06:9b:78:87:22:24:27:2a:ee:55:fe:
a9:ec:d7:1b:95:e1:f7:ad:8f:79:98:8f:b9:c6:be:
6d:01:34:26:66:f8:07:c2:ee:49:2d:cb:1f:4b:0d:
30:bb:d1:97:3a:cf:d3:c1:4b:0a:46:f3:c2:34:9a:
66:ea:72:a7:63:95:74:60:65:95:96:56:d4:66:e0:
73:c4:aa:33:7d:99:98:f5:83:3c:50:ed:86:aa:fb:
5a:77:2a:26:80:2d:b2:79:53:97:f4:70:60:e0:d8:
b4:4f:12:23:f8:13:29:06:54:5d:38:bf:ef:6f:f1:
98:6c:ca:3d:31:86:4b:0b:0e:83:bb:a2:b7:f9:70:
dc:6d:b4:95:43:04:9f:f8:ed:ce:58:a8:11:b1:05:
62:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:94:86:94:08:8F:EF:A0:62:86:73:4F:F6:9D:36:FE:D3:36:7A:F5
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/UJSGlAiP76BihnNP9p02_tM2evU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.153.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ed:c0:a2:d8:65:20:65:1b:31:38:05:dc:f0:83:d5:e6:85:
2c:79:3d:d2:a3:20:18:2f:3e:eb:da:ae:05:cc:f5:ac:c8:1d:
f2:c1:83:7d:15:17:38:b7:8c:a8:29:a4:05:29:4d:d9:4b:73:
23:db:68:73:25:df:49:8f:79:a9:37:14:ad:c4:5a:d5:c1:f8:
7e:b3:7d:b3:3a:30:25:72:8c:b3:f1:c2:9b:5f:a0:f8:02:d8:
6c:38:29:97:53:cf:0b:fc:6e:0a:fd:f9:d9:4f:1d:6e:54:4d:
7f:ac:a5:0f:e2:f7:87:07:e1:89:9c:7e:9e:4c:98:2a:40:de:
0b:be:a7:8d:51:85:d7:66:41:65:60:d0:44:8c:08:5d:65:d8:
5a:56:45:8e:16:54:94:2d:c9:c4:2b:d0:db:4f:27:21:e9:5f:
79:79:f0:69:cd:fa:1b:98:a5:8b:20:af:a6:b2:cb:8d:91:de:
f3:64:31:0f:df:91:9c:05:c3:bc:11:2f:c9:f8:4d:d2:83:f7:
06:c7:27:7e:2d:4a:0b:4e:b3:a2:cc:dd:9f:c6:58:34:1c:ba:
44:81:1b:c9:8c:f1:c4:2e:dd:55:e6:af:a4:e0:cd:41:33:ec:
41:58:cb:c2:92:b0:52:2b:fa:d8:da:50:fd:a0:6c:be:20:f6:
de:e6:c6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:45 2024 by rpki-client on console-fra.rpki-client.org