Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/UwElzm2b_zoWpGx0-t4iITA-1rk.roa
File: UwElzm2b_zoWpGx0-t4iITA-1rk.roa (raw, json)
Hash identifier: prVvBpDtzr/AVrAlmAsW68VEj9kiq9uD1nzg5My8Ql8=
Subject key identifier: 53:01:25:CE:6D:9B:FF:3A:16:A4:6C:74:FA:DE:22:21:30:3E:D6:B9
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 018570027D34A947F620994F835DCBF87E7C
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/UwElzm2b_zoWpGx0-t4iITA-1rk.roa
Signing time: Mon 02 Jan 2023 01:04:49 +0000
ROA not before: Mon 02 Jan 2023 01:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49683
IP address blocks: 185.122.164.0/24 maxlen: 24
185.122.165.0/24 maxlen: 24
185.122.166.0/24 maxlen: 24
185.122.167.0/24 maxlen: 24
185.168.192.0/24 maxlen: 24
185.168.193.0/24 maxlen: 24
185.168.194.0/24 maxlen: 24
185.168.195.0/24 maxlen: 24
185.85.240.0/24 maxlen: 24
185.85.243.0/24 maxlen: 24
185.85.241.0/24 maxlen: 24
185.85.242.0/24 maxlen: 24
185.184.68.0/24 maxlen: 24
185.184.69.0/24 maxlen: 24
185.184.70.0/24 maxlen: 24
185.184.71.0/24 maxlen: 24
185.116.236.0/24 maxlen: 24
185.116.237.0/24 maxlen: 24
185.116.239.0/24 maxlen: 24
185.44.64.0/24 maxlen: 24
185.44.65.0/24 maxlen: 24
185.44.66.0/24 maxlen: 24
185.44.67.0/24 maxlen: 24
185.189.58.0/24 maxlen: 24
185.189.56.0/24 maxlen: 24
185.189.57.0/24 maxlen: 24
185.189.59.0/24 maxlen: 24
2a0a:2f00:1::/48 maxlen: 48
2a0a:2f00:3::/48 maxlen: 48
2a0a:2f00:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 27 Mar 2023 08:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:7d:34:a9:47:f6:20:99:4f:83:5d:cb:f8:7e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Jan 2 01:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=530125ce6d9bff3a16a46c74fade2221303ed6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1d:e2:9a:ca:55:83:80:b1:92:2a:6a:01:d8:
70:d0:1c:2b:48:61:c8:26:be:7c:56:d7:11:5b:58:
62:f7:86:3b:5a:d3:2a:fd:d2:b7:fd:f3:f3:de:15:
6e:f2:4e:d8:51:7b:98:15:7f:54:a8:35:06:0e:55:
8a:50:cd:e2:31:ac:b2:e5:75:5f:a1:2d:4e:ab:51:
3c:39:50:81:57:43:14:c2:62:e6:cc:5f:df:36:b6:
8a:1d:8a:4c:ec:f8:44:a0:ae:dc:e4:48:bb:56:ce:
40:61:9f:98:b3:2a:ea:46:a1:cb:c6:9d:3a:c6:2e:
44:b7:9a:78:d2:ae:9b:5a:46:b0:66:94:7c:3c:1d:
2a:59:4f:4b:a5:21:20:92:21:7e:85:74:2c:b7:ab:
e2:f8:75:b1:8d:24:d7:2c:60:70:2b:d6:13:5c:ab:
c5:6f:a5:e3:f6:ba:07:db:a3:d6:9f:6b:e1:a7:cc:
f8:13:83:fa:4c:a5:56:b7:ec:e7:78:80:fe:ba:f6:
75:ac:53:f3:15:8d:73:61:4e:a2:99:07:dd:6a:d6:
b4:5d:73:74:f9:35:4d:08:2e:5a:1f:da:8d:68:a4:
7b:a1:74:9d:47:34:ce:7a:4a:48:6d:78:b0:28:7d:
47:61:d3:09:af:64:cd:fb:ea:ee:6e:9d:a4:a3:c5:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:01:25:CE:6D:9B:FF:3A:16:A4:6C:74:FA:DE:22:21:30:3E:D6:B9
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/UwElzm2b_zoWpGx0-t4iITA-1rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.64.0/22
185.85.240.0/22
185.116.236.0/23
185.116.239.0/24
185.122.164.0/22
185.168.192.0/22
185.184.68.0/22
185.189.56.0/22
IPv6:
2a0a:2f00:1::-2a0a:2f00:3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
03:32:ff:19:5d:53:fd:d9:a3:8a:56:46:bd:66:ae:b2:8a:c0:
eb:a7:2b:79:47:20:fb:60:f9:a2:74:ee:69:21:67:fc:73:80:
cb:6e:7c:8e:10:cd:10:72:8b:57:dc:91:b7:f8:0d:a1:d4:ec:
e0:37:20:87:81:06:ea:f4:77:97:a5:00:d7:21:93:4c:00:87:
9a:e9:f7:ce:4c:b2:19:9b:09:7a:27:70:e4:f8:4c:ea:ba:c0:
1f:52:82:00:fb:66:91:dc:fe:11:1a:ce:89:9b:3b:64:ee:af:
c1:cc:0a:e1:04:f3:b1:78:7b:cc:43:ac:cf:52:44:62:3a:35:
74:33:58:c9:54:b0:f4:0a:f7:17:f9:38:99:f0:ca:28:fe:1d:
f4:52:dc:6d:db:34:61:d2:f2:c7:04:3b:04:3a:44:c3:c0:42:
9e:f6:ee:6d:63:ac:79:0e:3a:90:7c:22:b6:85:25:aa:1a:9d:
60:a5:16:d2:9d:d7:13:19:ae:d7:34:2b:85:c6:45:c6:38:f5:
7e:b9:78:52:41:3b:ba:7c:94:a3:81:7c:ae:f6:70:7b:af:d3:
d1:c3:bc:7d:0f:16:04:d7:f0:9c:a4:3a:55:f1:5b:19:b4:25:
cc:11:42:5e:1d:f0:d9:d4:53:14:0a:7f:04:74:3b:cc:94:b8:
61:65:1f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:51 2024 by rpki-client on console-ams.rpki-client.org