Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UQs_LpRUKNURVu5qukurOkfvK8M.roa
File: UQs_LpRUKNURVu5qukurOkfvK8M.roa (raw, json)
Hash identifier: BjYzjzKXA9UK+qXXh3zvi2xy0rSTbs22WKku1ix5sQI=
Subject key identifier: 51:0B:3F:2E:94:54:28:D5:11:56:EE:6A:BA:4B:AB:3A:47:EF:2B:C3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018AB7B3EF1222A94C6183AB1BED272E26AD
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UQs_LpRUKNURVu5qukurOkfvK8M.roa
Signing time: Thu 21 Sep 2023 12:25:37 +0000
ROA not before: Thu 21 Sep 2023 12:25:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203394
IP address blocks: 85.204.18.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
77.81.88.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:b3:ef:12:22:a9:4c:61:83:ab:1b:ed:27:2e:26:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 21 12:25:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=510b3f2e945428d51156ee6aba4bab3a47ef2bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:2b:1e:c6:c7:a7:ab:1e:5e:f0:49:84:91:
c2:50:e1:f6:ad:2c:93:72:35:45:34:f9:58:d9:50:
84:eb:d2:35:81:51:65:0c:9e:21:0b:c8:60:ae:9b:
b5:34:d2:ce:ad:19:a1:28:d4:4a:99:81:82:e4:11:
12:c3:d2:9a:2a:8b:65:e6:b9:0a:98:3c:1e:0e:17:
ef:7a:ed:04:b0:86:89:37:90:91:2b:f6:11:a9:11:
ce:8c:3b:06:b5:6e:19:6b:ca:72:93:c4:38:29:5c:
1f:26:ae:f6:18:73:e7:62:6e:dd:1a:df:3e:b8:bc:
9d:c7:fc:23:58:3c:91:55:74:23:b7:b4:39:12:3f:
a1:cb:cd:2e:72:b1:77:20:29:19:7a:90:63:e5:dc:
a2:c2:10:85:f2:ad:d2:68:9b:81:df:2a:be:27:b9:
a4:ec:3f:81:37:38:f0:69:a8:05:52:2f:21:92:92:
78:3d:ef:4d:be:6f:f0:19:c7:fb:f1:77:e9:b2:66:
d9:2c:c2:77:c6:e7:a8:2b:f1:98:e9:f4:85:55:39:
66:4e:0c:13:e8:11:13:2d:18:fb:c0:8c:b1:b5:3f:
af:cf:4d:73:59:be:ce:0a:d5:6f:61:bf:f5:88:80:
ec:f7:9e:f5:c8:ce:be:4f:63:6c:cb:4a:46:c0:81:
9e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0B:3F:2E:94:54:28:D5:11:56:EE:6A:BA:4B:AB:3A:47:EF:2B:C3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UQs_LpRUKNURVu5qukurOkfvK8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
77.81.88.0/24
85.204.18.0/24
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
76:39:6a:5d:e2:65:73:15:1d:d6:19:84:1e:43:1d:db:87:95:
84:a0:cc:13:38:ab:e5:e9:a4:2b:b7:24:89:1b:e5:2f:45:49:
a7:97:93:b7:de:60:0c:84:56:bd:f1:b1:13:d2:cb:8a:8a:e7:
48:45:39:20:30:df:96:71:7d:d8:a3:a4:ba:11:14:f8:e5:bb:
6e:ad:a0:55:ee:de:e0:a8:2b:3f:57:16:eb:41:8a:59:d7:25:
e1:a1:4b:e8:39:3b:09:37:9a:e1:a9:b8:2a:5f:e3:51:9e:f8:
0d:24:25:22:91:d6:ef:3d:24:0e:dc:d9:9f:5c:9c:52:e3:ce:
5b:ea:0d:8d:a3:af:69:65:17:50:4a:9e:97:c7:87:9c:ec:dc:
9c:fe:8e:dc:94:6d:c3:ab:bc:70:96:38:bb:1f:d9:e8:f5:eb:
93:4c:cc:c2:79:30:ff:89:70:77:85:e6:86:5d:3f:fe:5a:62:
4d:d6:d6:bc:47:c9:ac:2e:c3:86:d2:5c:53:e7:2f:f4:02:00:
d5:d9:e9:99:fc:07:32:60:95:14:44:6c:25:77:21:cc:bd:07:
28:6c:c8:42:71:ac:1f:00:aa:02:85:81:f4:f7:7a:83:b2:fa:
c2:2e:c2:2d:d0:3f:f2:ad:0c:02:a1:fa:e1:24:4a:43:e5:93:
a1:8c:24:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org