Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/UGS-J9-gZ3KOjUQAt4ncDgcUYio.roa
File: UGS-J9-gZ3KOjUQAt4ncDgcUYio.roa (raw, json)
Hash identifier: yAFhDF5rYx9NaGLSUhIr1VAcs4cs7HU0Z2KwQrfyNk8=
Subject key identifier: 50:64:BE:27:DF:A0:67:72:8E:8D:44:00:B7:89:DC:0E:07:14:62:2A
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0185A25FC8F89DE137B5B74D4315F421354D
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/UGS-J9-gZ3KOjUQAt4ncDgcUYio.roa
Signing time: Wed 11 Jan 2023 19:47:44 +0000
ROA not before: Wed 11 Jan 2023 19:47:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 185.96.80.0/24 maxlen: 24
185.96.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a2:5f:c8:f8:9d:e1:37:b5:b7:4d:43:15:f4:21:35:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 11 19:47:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5064be27dfa067728e8d4400b789dc0e0714622a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:80:bc:74:b6:db:34:6a:3a:4c:a9:8a:fa:fe:
3f:e4:4b:ec:e2:ce:5f:9d:20:05:22:c5:97:ec:d5:
d2:57:7b:89:d9:79:46:f6:80:85:e1:a3:3b:82:bc:
8a:bb:84:d6:e5:e9:c9:3e:37:ef:d1:c2:0a:4d:06:
63:e8:f6:56:05:06:d7:01:1c:99:6f:ef:4d:50:b5:
85:d4:13:7e:f3:eb:20:ff:18:bd:c6:bb:05:82:7e:
e3:46:c9:9e:0d:7c:97:a0:a3:f5:f6:b4:b0:d8:7a:
95:09:ad:a8:6a:66:56:86:78:e8:db:3e:e2:cd:9b:
80:c1:3f:f5:0a:e4:c5:ad:84:c1:fc:6a:fb:71:6c:
24:96:c2:df:0a:98:d1:e1:12:d6:b4:bb:40:db:e1:
d0:21:cf:f4:29:30:d9:e5:03:21:ae:5a:0a:ae:b0:
5c:dc:4a:e9:cd:cc:60:05:79:e9:5b:93:a5:50:f1:
48:46:43:ca:9b:b5:d4:14:ab:d6:35:f9:7a:7e:74:
bf:1e:c7:cf:6d:60:af:fd:56:23:72:50:71:cb:85:
04:8b:ef:7b:66:2e:ba:d6:ba:c1:6d:5c:ab:33:71:
50:0b:02:54:03:5e:5e:1a:0e:67:d9:e8:2e:c2:2d:
52:a3:07:7d:db:02:25:a2:0a:aa:eb:51:fc:5c:24:
12:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:64:BE:27:DF:A0:67:72:8E:8D:44:00:B7:89:DC:0E:07:14:62:2A
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/UGS-J9-gZ3KOjUQAt4ncDgcUYio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.38.0/24
185.96.80.0/24
Signature Algorithm: sha256WithRSAEncryption
17:f7:e6:ef:70:00:3c:4a:d1:f4:65:5a:29:58:91:cf:47:7f:
e3:f1:0f:8a:2c:ab:f7:76:63:7d:e2:5a:ba:9b:f4:e2:97:eb:
89:b5:a3:1f:bf:8a:1c:f4:43:f3:eb:6c:5c:27:77:79:ef:84:
df:c5:30:1b:b5:92:0f:f3:28:dc:fa:16:b4:80:e1:65:4e:75:
8f:56:4e:fe:82:e2:b0:9f:da:46:04:d9:fd:ec:f3:ea:3e:f7:
72:8e:f6:bd:76:ea:03:de:75:17:f4:7d:cc:7a:46:dc:01:5f:
9f:ec:75:b7:b4:e3:fa:3d:8d:f4:b4:12:3c:af:9a:b1:84:77:
1e:aa:21:eb:33:22:2c:51:fe:62:f7:f6:5f:52:bb:c3:80:89:
a7:84:ad:a0:dd:91:60:a6:8e:d4:65:4b:4a:26:f2:13:1b:bf:
ce:43:52:5c:c8:70:87:c0:59:77:cb:8d:4e:89:1d:79:f2:23:
af:b1:ca:40:a5:ea:ad:c4:c2:aa:33:93:35:b5:96:62:b6:9b:
e8:cc:2e:3b:d8:e5:e2:90:50:1d:ef:a5:6f:5b:d2:14:2a:68:
c7:ae:63:aa:be:06:4c:59:f6:6b:89:a4:c1:b1:4f:b8:01:3f:
42:2f:06:5d:f7:3a:f0:f1:f6:f5:7f:c3:af:fb:41:5e:35:76:
ce:b9:76:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:17 2023 by rpki-client on console-fra.rpki-client.org