Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/UhglY0Lkd1WSRcBbNTf72WfGG6c.roa
File: UhglY0Lkd1WSRcBbNTf72WfGG6c.roa (raw, json)
Hash identifier: W4JARGft5vKVKyXKkOgD3uBNd3PtfdIRV/g5qy780TE=
Subject key identifier: 52:18:25:63:42:E4:77:55:92:45:C0:5B:35:37:FB:D9:67:C6:1B:A7
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 01856D9D11EF8F3E2889E2CC382ECE0F62F1
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/UhglY0Lkd1WSRcBbNTf72WfGG6c.roa
Signing time: Sun 01 Jan 2023 13:54:48 +0000
ROA not before: Sun 01 Jan 2023 13:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25504
IP address blocks: 185.90.232.0/22 maxlen: 24
151.252.48.0/20 maxlen: 24
158.58.144.0/21 maxlen: 24
94.102.208.0/20 maxlen: 24
2a00:19e0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:11:ef:8f:3e:28:89:e2:cc:38:2e:ce:0f:62:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: Jan 1 13:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5218256342e477559245c05b3537fbd967c61ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f6:c5:67:cf:4c:92:2f:7a:6f:fe:9c:10:6d:
9b:f2:6d:d4:43:42:10:15:cc:a8:52:dc:95:69:b3:
cd:ca:e7:29:fe:1f:19:41:10:a2:aa:73:76:28:f9:
22:92:2a:f5:23:11:ca:3e:37:56:14:f4:ba:ef:d8:
b6:22:b7:2f:5b:53:b8:8d:60:38:af:5c:a0:7b:46:
86:68:f7:67:46:a8:fe:ba:1f:3d:97:b7:44:81:89:
ec:9a:41:98:58:c8:93:f8:88:70:b5:bd:48:00:cb:
6a:9f:f8:b0:ed:a9:81:bd:3f:3d:b8:07:9c:d7:37:
d1:1c:4f:82:a1:d4:d2:e5:54:82:14:29:74:65:96:
79:68:7a:cd:39:53:bd:46:15:d9:7f:9a:5c:fa:12:
cf:1e:f0:38:40:be:6e:60:b6:38:3e:eb:bf:2d:3b:
59:5f:08:80:19:c8:ca:74:dd:cb:3f:fd:9c:66:7e:
b8:e7:d7:54:f4:c0:d2:99:01:16:93:04:3e:90:7e:
c0:0a:6b:27:2b:08:de:a8:6b:1e:46:dc:e8:b1:81:
bd:3d:36:1a:64:96:f9:28:af:75:70:51:7d:da:65:
b2:6a:6f:ec:b3:eb:46:3f:05:4c:97:71:90:65:33:
2f:e6:60:91:5f:af:a0:67:13:df:82:0f:8a:bb:e6:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:18:25:63:42:E4:77:55:92:45:C0:5B:35:37:FB:D9:67:C6:1B:A7
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/UhglY0Lkd1WSRcBbNTf72WfGG6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.102.208.0/20
151.252.48.0/20
158.58.144.0/21
185.90.232.0/22
IPv6:
2a00:19e0::/29
Signature Algorithm: sha256WithRSAEncryption
5a:67:3c:d5:e6:44:23:40:ec:fe:3b:58:68:c3:95:f9:e1:40:
8a:cc:5c:35:fb:bb:3a:bd:89:8a:15:bb:e5:91:22:3c:f7:57:
f1:e6:1c:c7:10:7e:cd:5a:c2:68:cc:f9:5c:78:89:a0:86:0d:
22:de:6f:8e:4a:00:52:18:52:99:95:b4:9d:32:7f:75:96:20:
50:13:e4:9a:90:8d:06:92:aa:ba:18:b7:30:8b:81:b2:ec:82:
94:66:92:89:ea:1d:8e:60:7c:29:c0:43:3a:64:a7:e0:7b:37:
9c:da:87:6b:b9:4c:2a:88:82:1a:d6:8d:7b:84:e9:f8:38:8e:
63:c5:7a:bc:13:7c:fb:35:7a:56:fb:58:a8:6a:de:cc:67:2e:
ff:1f:7a:eb:8f:39:1e:0f:7d:7e:d6:7b:a8:70:82:88:d0:e1:
c3:0a:58:10:4f:b4:2d:c1:50:cb:cc:77:ac:65:74:8f:02:8c:
e6:a9:dc:7a:39:ac:40:d0:1b:3f:72:e8:ad:e3:ee:20:fd:4d:
39:87:f8:44:5a:f2:ca:70:f4:48:51:a7:dc:60:18:92:94:e0:
66:cc:b2:45:22:d2:35:fb:c2:b7:40:0e:f3:fc:b7:e7:61:f6:
7f:c9:ed:21:bc:b7:07:44:f6:6f:4b:53:3e:65:90:24:1b:11:
f6:4f:c2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:34 2024 by rpki-client on console-fra.rpki-client.org