Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ux-GJ8d4sAzw3Ino88TjzQAbO4k.roa
File: ux-GJ8d4sAzw3Ino88TjzQAbO4k.roa (raw, json)
Hash identifier: nf6CSyMEzmWlkaXjIUz89Wmx8YO8WYYvIwUEKLCNvW8=
Subject key identifier: BB:1F:86:27:C7:78:B0:0C:F0:DC:89:E8:F3:C4:E3:CD:00:1B:3B:89
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018572BA4AF65863AC5B24141E96CCEAFD55
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ux-GJ8d4sAzw3Ino88TjzQAbO4k.roa
Signing time: Mon 02 Jan 2023 13:44:49 +0000
ROA not before: Mon 02 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30738
IP address blocks: 195.211.53.0/24 maxlen: 24
188.130.254.0/24 maxlen: 24
188.130.182.0/24 maxlen: 24
2001:1468:8000::/36 maxlen: 36
2001:1468::/32 maxlen: 33
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:4a:f6:58:63:ac:5b:24:14:1e:96:cc:ea:fd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb1f8627c778b00cf0dc89e8f3c4e3cd001b3b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:f5:8d:e8:8e:38:8a:b0:97:09:cc:12:d6:
55:3b:a3:51:0a:f2:dc:d0:85:85:d8:05:e8:83:c8:
fe:ef:f3:77:2e:37:07:8a:57:b2:43:b6:43:c9:0a:
3a:9d:98:8a:95:dc:a0:16:99:1f:7e:a2:50:1e:32:
0d:f6:72:5f:5a:c4:4d:01:47:5b:4b:19:e2:99:68:
f6:18:1b:a7:39:b7:e4:92:d6:23:ff:68:c6:b2:f3:
ad:3e:fc:ef:2a:d9:01:4e:83:4b:fc:9c:88:69:f0:
d8:23:3f:e8:f2:7c:4f:5f:d6:e9:0d:30:84:bb:be:
5a:47:f2:20:41:19:1d:69:a6:84:7b:cd:24:cc:1c:
e7:53:f5:00:b3:8b:ec:89:3f:c6:58:9c:db:54:b8:
86:50:ea:7c:4e:f3:44:92:2d:12:9d:8b:74:3d:72:
b9:69:5d:bd:37:b5:d0:5a:0c:3f:ab:ac:43:4e:3b:
ec:8d:32:19:3b:ab:34:2d:de:ae:51:40:28:dc:20:
af:e9:5d:2e:f7:6c:d3:eb:89:19:3b:76:c8:52:c5:
98:a3:cb:d0:c7:64:52:88:7e:88:ba:6f:77:d0:c3:
6e:c9:6d:e1:01:b5:92:db:4d:d1:e8:be:6d:00:fc:
43:7a:47:b5:cf:86:42:17:50:26:23:1f:26:86:3a:
bb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1F:86:27:C7:78:B0:0C:F0:DC:89:E8:F3:C4:E3:CD:00:1B:3B:89
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ux-GJ8d4sAzw3Ino88TjzQAbO4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.182.0/24
188.130.254.0/24
195.211.53.0/24
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
a1:58:3e:46:8d:f4:f2:ce:3c:7b:4a:76:c0:97:18:59:7a:84:
b7:fd:53:06:7d:46:3d:06:cb:2b:7b:aa:97:d7:87:65:4a:de:
fd:78:c7:ba:44:f5:dd:a8:b2:79:0e:41:80:03:bb:10:91:a5:
4e:2a:94:fe:a1:83:36:20:81:c9:c3:09:4b:30:dd:84:e5:09:
31:a9:98:2c:d6:8f:0e:02:62:8c:c4:64:ac:90:a6:30:88:31:
17:70:9c:17:4f:75:0e:38:c5:9d:95:02:81:16:3c:40:99:5c:
74:42:74:59:67:6c:50:7a:18:fb:97:6c:1b:ef:36:5d:25:6d:
55:ac:56:dd:ff:f3:f5:22:21:6a:09:1f:77:77:d0:ce:24:e8:
61:aa:21:db:53:01:80:bd:34:93:57:32:00:2d:11:c3:ea:46:
16:93:d9:cb:06:db:e1:19:3d:2f:af:7a:51:aa:8c:fb:ae:ae:
1c:ae:76:68:ff:f6:9e:91:e6:3d:74:69:3c:20:5a:62:e5:e5:
c5:c7:df:6c:b2:c5:b9:b1:64:8c:36:5c:2a:de:67:2c:35:d2:
7c:8a:0e:f0:f9:8e:94:53:76:e5:fa:55:5e:5c:e1:4a:75:78:
8b:5a:4f:97:6a:0f:fc:a4:16:73:b2:1e:38:20:4c:c6:12:8a:
ca:82:bb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:10 2023 by rpki-client on console-fra.rpki-client.org