Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uhPlhY4A1CCOPoBc-nbFwVwirTU.roa
File: uhPlhY4A1CCOPoBc-nbFwVwirTU.roa (raw, json)
Hash identifier: FbCVHLcsyI9CsoMlCcu+iC3iu5LMOJzd4JnOawmsGDU=
Subject key identifier: BA:13:E5:85:8E:00:D4:20:8E:3E:80:5C:FA:76:C5:C1:5C:22:AD:35
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A0E7BFC54CFA94EBD8FBA01D3579F183B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uhPlhY4A1CCOPoBc-nbFwVwirTU.roa
Signing time: Sat 19 Aug 2023 15:48:41 +0000
ROA not before: Sat 19 Aug 2023 15:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 93.115.203.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
45.88.12.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 14:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0e:7b:fc:54:cf:a9:4e:bd:8f:ba:01:d3:57:9f:18:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 19 15:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba13e5858e00d4208e3e805cfa76c5c15c22ad35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:5e:d6:ad:91:4e:22:68:43:e9:04:6f:bb:
be:e6:65:ff:34:eb:95:76:9a:08:09:4d:66:3e:d5:
c2:2f:ac:35:d7:2e:7d:46:d6:31:2d:f5:b3:a2:15:
bf:b6:64:82:cc:37:2a:74:65:be:89:e8:6d:16:76:
bc:be:47:75:24:9d:7e:75:63:69:e7:a7:aa:4e:4d:
d0:87:77:51:24:97:0f:b8:8c:7d:3b:ff:2b:65:29:
5e:1f:a1:c5:e1:a5:ac:f6:96:de:f4:37:86:fc:4d:
67:c2:85:6c:4b:36:68:2a:8e:25:c7:e1:98:80:92:
fd:95:18:72:61:6f:11:8e:f0:f3:03:d9:0d:6b:1f:
47:8c:48:40:70:14:92:bc:00:90:5b:c8:4f:43:75:
ff:e1:20:34:33:a2:b9:db:14:1a:3a:b6:95:3a:a4:
c4:8b:4a:bc:56:1b:09:66:40:6c:0b:8e:cb:c0:5f:
64:a4:59:0a:49:9f:5f:f3:59:85:f5:7a:04:02:e1:
42:84:79:ea:6b:41:5a:9a:4c:8e:ea:8e:c5:90:9a:
93:05:c7:64:05:75:77:2c:ca:e4:58:c8:67:df:7e:
67:53:c4:e9:41:12:1b:47:6b:de:44:28:f7:ee:53:
62:66:db:a2:bb:d4:9c:0e:69:90:3e:96:6c:5e:c2:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:13:E5:85:8E:00:D4:20:8E:3E:80:5C:FA:76:C5:C1:5C:22:AD:35
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uhPlhY4A1CCOPoBc-nbFwVwirTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.12.0/24
86.107.100.0/24
93.115.203.0/24
94.177.106.0/24
Signature Algorithm: sha256WithRSAEncryption
46:af:8b:2d:30:b7:6b:f1:b6:d7:3c:52:1f:ae:dc:de:f3:1e:
7d:b0:a3:23:51:d1:b6:5f:f0:59:ae:59:b4:00:c9:ae:10:d9:
ab:1e:a7:65:75:3e:b9:c1:66:5d:0c:2f:a7:77:30:6b:73:8f:
6c:85:02:a7:a5:ba:9f:c1:3d:ef:ac:61:9e:71:47:31:92:5c:
35:05:4e:56:b7:83:7e:dc:64:1c:bf:96:db:5c:ca:7c:a0:a6:
21:15:52:fd:4d:67:fb:3f:c7:f1:a8:ef:a1:bf:02:00:cb:28:
4a:7a:66:71:ed:1d:d8:67:3c:cb:e4:a0:a4:74:40:7c:98:88:
2e:0a:6c:3d:d8:19:b9:21:87:0c:e9:0e:b4:22:c4:eb:c0:99:
a7:4c:73:c9:ed:40:e7:61:f0:25:bc:26:35:86:44:15:c7:d6:
29:5f:b0:ba:e8:72:4a:e4:24:dd:ca:9d:14:5c:3d:08:d7:24:
f7:8e:8d:3f:a1:a6:7e:a3:fd:98:5f:59:92:ac:aa:c9:85:b4:
be:c7:46:3f:03:83:d0:20:a6:fb:4c:9d:a1:d5:f3:36:2e:cf:
09:70:8f:9d:b2:cb:d3:1c:92:6e:b4:d6:22:3a:11:87:57:2d:
43:65:2f:13:50:06:ae:81:b1:87:73:9a:cd:8c:b0:e1:76:73:
05:17:8e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org