Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/TupbuclrVLw9mtyeT0A1yLX3YBQ.roa
File: TupbuclrVLw9mtyeT0A1yLX3YBQ.roa (raw, json)
Hash identifier: Pnk3MbswoGA6jd4Pp/cT16yDf/uVqJwyIytCxl3C1Ro=
Subject key identifier: 4E:EA:5B:B9:C9:6B:54:BC:3D:9A:DC:9E:4F:40:35:C8:B5:F7:60:14
Certificate issuer: /CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Certificate serial: 018692AE5BA4D403EF353CD6A9FED3076E5E
Authority key identifier: F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/TupbuclrVLw9mtyeT0A1yLX3YBQ.roa
Signing time: Mon 27 Feb 2023 11:42:25 +0000
ROA not before: Mon 27 Feb 2023 11:42:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51185
IP address blocks: 94.124.64.0/21 maxlen: 21
94.124.67.0/24 maxlen: 24
94.124.65.0/24 maxlen: 24
185.45.208.0/24 maxlen: 24
185.45.210.0/24 maxlen: 24
178.248.52.0/24 maxlen: 24
178.248.53.0/24 maxlen: 24
178.248.54.0/24 maxlen: 24
185.187.156.0/24 maxlen: 24
185.187.159.0/24 maxlen: 24
178.248.48.0/24 maxlen: 24
178.248.49.0/24 maxlen: 24
178.248.50.0/24 maxlen: 24
178.248.51.0/24 maxlen: 24
2a02:2891:13::/48 maxlen: 48
2a02:2891:4::/48 maxlen: 48
2a02:2890::/48 maxlen: 48
2a02:2891:29::/48 maxlen: 48
2a02:2891:ff::/48 maxlen: 48
2a02:2891:10::/48 maxlen: 48
2a02:2890:ffff::/48 maxlen: 48
2a02:2891:15::/48 maxlen: 48
2a02:2891:1::/48 maxlen: 48
2a02:2892:36::/48 maxlen: 48
2a02:2891:12::/48 maxlen: 48
2a02:2892:40::/48 maxlen: 48
2a02:2891::/48 maxlen: 48
2a02:2892:32::/48 maxlen: 48
2a02:2891:16::/48 maxlen: 48
2a02:2891:11::/48 maxlen: 48
2a02:2891:2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:ae:5b:a4:d4:03:ef:35:3c:d6:a9:fe:d3:07:6e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Validity
Not Before: Feb 27 11:42:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eea5bb9c96b54bc3d9adc9e4f4035c8b5f76014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8f:f5:5d:c1:ef:dc:4f:e8:8e:87:86:d3:0a:
00:08:e8:08:0e:49:90:c4:70:97:6e:89:c5:f8:40:
a6:50:98:06:27:25:bf:db:76:35:5a:84:62:e1:71:
92:a2:5b:35:64:70:a6:eb:92:fd:18:97:88:99:58:
4a:84:5f:b5:6a:7f:6a:f5:ff:d2:ff:52:2f:bc:50:
b8:a8:f8:63:ea:4d:11:0e:e7:c6:ea:60:54:23:17:
2b:9e:0a:6d:3d:d3:93:9e:7c:da:14:da:d0:d9:dc:
c9:b9:38:5f:95:b6:a2:13:f0:64:0c:d7:80:0a:4a:
79:10:20:53:5d:a2:3f:9f:72:13:0e:f4:6a:5b:f5:
22:6e:e7:3b:ae:da:cb:48:87:06:a8:a0:5d:d0:92:
9c:0b:35:bd:7f:0e:81:32:dd:63:64:b0:1e:4b:27:
a8:ca:39:ac:dd:dd:00:d3:3a:d1:a1:2d:9d:0b:e9:
b8:6c:b6:39:39:96:88:90:0b:21:3e:6d:12:bb:cf:
55:01:28:1d:ea:21:bf:aa:b1:ea:17:bd:1a:61:06:
31:0a:c7:b2:5d:9a:65:87:21:a5:9e:14:ae:7c:94:
66:be:b3:f9:88:65:e3:94:21:a4:75:24:57:7d:0c:
30:98:30:b9:7e:de:12:53:a6:fe:56:8c:6d:d7:a6:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EA:5B:B9:C9:6B:54:BC:3D:9A:DC:9E:4F:40:35:C8:B5:F7:60:14
X509v3 Authority Key Identifier:
keyid:F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/TupbuclrVLw9mtyeT0A1yLX3YBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.64.0/21
178.248.48.0-178.248.54.255
185.45.208.0/24
185.45.210.0/24
185.187.156.0/24
185.187.159.0/24
IPv6:
2a02:2890::/48
2a02:2890:ffff::-2a02:2891:2:ffff:ffff:ffff:ffff:ffff
2a02:2891:4::/48
2a02:2891:10::/46
2a02:2891:15::-2a02:2891:16:ffff:ffff:ffff:ffff:ffff
2a02:2891:29::/48
2a02:2891:ff::/48
2a02:2892:32::/48
2a02:2892:36::/48
2a02:2892:40::/48
Signature Algorithm: sha256WithRSAEncryption
0b:65:7d:9f:1b:bc:37:fa:36:4e:19:81:52:20:5a:1e:4f:4e:
fe:2a:de:25:87:db:20:4b:58:0e:58:03:c8:27:d5:be:c9:41:
15:1e:4a:b6:1b:1a:2a:1f:7b:81:1a:c1:c3:d3:52:60:d3:44:
3a:a6:7d:b1:8f:c2:77:a1:f6:b0:ea:57:46:4a:67:b7:30:07:
cc:c2:92:11:c7:b6:59:5e:e0:2e:e2:a0:2e:a1:02:29:41:0f:
4d:dd:b4:6e:8d:57:f6:87:1d:7e:8c:ea:e6:7b:66:2d:25:b3:
d0:48:4d:4b:f8:c5:db:53:a7:3e:49:7b:3c:26:31:cc:de:31:
05:1b:b4:9b:67:e5:07:26:46:2a:71:d9:a7:37:a7:2d:3c:5d:
11:81:69:07:59:2f:ac:d3:66:6c:a0:0d:e6:2a:50:5a:8b:bd:
0e:8e:34:d6:d6:c6:94:36:9d:4d:ef:db:91:05:5a:4f:a2:36:
2e:81:69:bb:7b:c7:b9:3d:bd:56:87:e9:13:c4:95:12:15:ef:
67:4d:9c:8b:b8:9e:c7:e8:97:24:ad:f0:d4:33:12:23:ff:99:
a6:01:66:2d:fe:8f:fe:8c:34:c1:09:8f:17:08:46:0f:ac:e5:
ac:71:a8:cd:d0:6e:ed:54:36:69:90:a7:fd:9f:5e:03:16:58:
69:de:0e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:19 2023 by rpki-client on console-ams.rpki-client.org