Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UAy56zXdVqdS1jWxtX4OoewK0mY.roa
File: UAy56zXdVqdS1jWxtX4OoewK0mY.roa (raw, json)
Hash identifier: qp/VELClrZd3JM2/a5zseaUYE716GQsDnjqnFRdHNlE=
Subject key identifier: 50:0C:B9:EB:35:DD:56:A7:52:D6:35:B1:B5:7E:0E:A1:EC:0A:D2:66
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01875181813D0D33A3D52DC6690F0473447A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UAy56zXdVqdS1jWxtX4OoewK0mY.roa
Signing time: Wed 05 Apr 2023 13:00:54 +0000
ROA not before: Wed 05 Apr 2023 13:00:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 188.212.121.0/24 maxlen: 24
92.114.93.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
176.223.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Apr 2023 07:36:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:81:81:3d:0d:33:a3:d5:2d:c6:69:0f:04:73:44:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 5 13:00:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=500cb9eb35dd56a752d635b1b57e0ea1ec0ad266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:61:bc:fa:3f:e4:35:2b:75:65:37:b4:09:92:
61:a5:cd:1d:c7:2e:20:76:29:1b:59:40:47:e0:07:
b8:3b:23:bb:00:90:f8:98:0b:fc:93:31:d4:22:16:
db:65:f9:99:9b:19:92:c3:af:c8:80:94:4b:71:b0:
99:b9:ea:1f:8a:67:49:0f:0e:a5:e9:fc:cf:59:09:
7e:a1:ac:fd:68:03:2a:d0:b8:6e:70:f3:f2:3c:13:
d4:d4:bd:98:6b:63:c4:2c:1e:19:3a:6c:c0:d8:64:
7e:72:a4:8b:a1:0f:f9:38:4c:d4:66:4e:6d:29:fc:
0c:8c:b5:e7:3d:cb:64:38:3f:8e:f5:ab:20:76:84:
6f:b6:11:7c:68:07:e4:6e:a5:7a:6f:4e:39:12:16:
05:ad:2a:b8:5b:64:71:78:7b:70:57:a7:de:e5:fe:
1f:ca:ec:e0:f1:3c:2d:3f:b3:c8:23:11:c8:b1:3d:
41:ff:35:47:00:6d:70:5a:ff:90:d1:95:13:e0:9a:
16:63:3f:e0:e1:02:b1:ae:15:d6:24:81:e2:b9:54:
2c:9d:1c:57:30:fb:4e:59:03:04:a3:36:72:e9:a0:
5e:35:05:4c:ef:b7:96:b2:b2:48:25:f1:e5:6b:fb:
7b:f1:4d:94:66:97:d9:ee:d5:aa:f9:7e:7c:90:c5:
7a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0C:B9:EB:35:DD:56:A7:52:D6:35:B1:B5:7E:0E:A1:EC:0A:D2:66
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UAy56zXdVqdS1jWxtX4OoewK0mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.36.0/24
92.114.93.0/24
176.223.66.0/24
188.212.121.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c2:92:63:6d:1c:16:85:93:62:1a:8d:f5:1f:69:e6:e7:3d:
58:04:8d:1e:08:d3:21:cc:46:6a:88:2b:b7:18:9d:89:28:89:
f7:16:e6:48:ff:cf:ab:a9:9d:69:95:d7:73:ca:cb:bb:04:1c:
4c:7d:29:1d:c7:c2:2c:51:e6:e9:8b:dd:d1:1a:8d:56:e8:63:
68:16:ab:20:39:19:20:c2:07:b3:ee:33:fb:eb:38:d1:4c:3e:
f3:9b:b9:77:54:ec:fd:d3:ff:a4:5f:81:e3:fe:07:4a:4c:e5:
78:1c:dc:18:21:23:52:c7:cc:dc:7f:cb:d9:e9:ab:83:77:79:
87:2a:44:61:7a:b0:a9:37:54:01:1b:88:fe:af:93:fc:9a:31:
d3:ac:15:66:1d:94:95:d7:34:a7:6b:41:dc:da:4d:92:a6:d1:
81:1e:ed:bc:1c:c5:b4:7e:b8:60:5a:4e:05:06:18:b1:e1:ed:
8a:9c:99:16:90:78:1b:a9:c1:66:31:ea:c0:55:d0:6b:d0:2c:
2a:8d:86:1a:83:c8:56:f2:d2:82:d6:19:75:1a:75:31:f2:ca:
c0:d9:cd:0d:5e:49:1c:c2:49:1a:38:65:88:e0:44:66:3c:89:
f3:4c:60:10:69:e8:94:f5:74:53:c7:b6:59:0e:d4:26:da:1f:
93:76:ec:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org