Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/UYFIEMOE8JguPddJaSDZbEni3MM.roa
File: UYFIEMOE8JguPddJaSDZbEni3MM.roa (raw, json)
Hash identifier: JdwpDuIbWBPoknYbnQMCESuPWuVI1xuRAqZMOB0g8LA=
Subject key identifier: 51:81:48:10:C3:84:F0:98:2E:3D:D7:49:69:20:D9:6C:49:E2:DC:C3
Certificate issuer: /CN=e314905c56633e9fde791b3005d9a4af7d31a7a0
Certificate serial: 0186655D97F7FEEFD0FCDA98A7E6ED449A92
Authority key identifier: E3:14:90:5C:56:63:3E:9F:DE:79:1B:30:05:D9:A4:AF:7D:31:A7:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xSQXFZjPp_eeRswBdmkr30xp6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/UYFIEMOE8JguPddJaSDZbEni3MM.roa
Signing time: Sat 18 Feb 2023 16:31:17 +0000
ROA not before: Sat 18 Feb 2023 16:31:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41033
IP address blocks: 185.235.186.0/24 maxlen: 24
185.235.184.0/24 maxlen: 24
185.235.185.0/24 maxlen: 24
185.235.187.0/24 maxlen: 24
2a0d:7100:1::/48 maxlen: 48
2a0d:7100:4::/48 maxlen: 48
2a0d:7100:2::/48 maxlen: 48
2a0d:7100:5::/48 maxlen: 48
2a0d:7100::/48 maxlen: 48
2a0d:7100:3::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:65:5d:97:f7:fe:ef:d0:fc:da:98:a7:e6:ed:44:9a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e314905c56633e9fde791b3005d9a4af7d31a7a0
Validity
Not Before: Feb 18 16:31:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51814810c384f0982e3dd7496920d96c49e2dcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d5:e3:28:e9:d9:ad:c6:5e:b3:14:39:d0:e3:
c5:49:bd:98:1d:c3:e1:d1:47:62:bf:a2:61:a0:bf:
78:2b:82:b9:05:de:b7:3d:bf:33:76:9a:85:96:31:
0f:37:2a:7e:e7:42:fc:17:ba:54:9f:63:27:8e:2b:
0d:5d:80:73:a3:a1:a1:79:ea:4d:bd:64:1c:e5:0c:
4b:fa:56:07:c7:bd:c1:a2:a1:0b:2e:04:aa:fc:8d:
ce:08:c8:ab:33:6a:ff:8f:3e:20:83:f5:18:2a:db:
de:2e:df:e5:c7:9b:20:e4:d2:06:2d:bb:1a:b5:b3:
f9:48:ac:2b:b3:18:8b:fa:d8:f4:f0:fc:88:30:26:
70:35:5c:54:08:42:ea:05:34:42:fc:ee:df:0d:54:
df:32:70:72:04:c5:82:47:e5:7a:7a:a8:26:20:82:
45:6a:9a:00:69:b7:a9:e5:d4:3c:02:91:60:5f:5b:
b8:2a:bb:3f:de:3b:75:e9:46:ca:c3:0c:92:c5:68:
db:54:6c:2b:cf:6d:f9:21:7e:5c:a8:1f:24:4b:0b:
84:01:6c:24:bb:2c:e2:b3:57:48:20:3f:18:86:b3:
92:ab:4e:bc:8d:de:84:30:b5:9f:d4:49:2e:46:d4:
b3:5b:37:98:60:cd:b7:ef:61:33:2a:af:eb:2e:98:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:81:48:10:C3:84:F0:98:2E:3D:D7:49:69:20:D9:6C:49:E2:DC:C3
X509v3 Authority Key Identifier:
keyid:E3:14:90:5C:56:63:3E:9F:DE:79:1B:30:05:D9:A4:AF:7D:31:A7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xSQXFZjPp_eeRswBdmkr30xp6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/UYFIEMOE8JguPddJaSDZbEni3MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/4xSQXFZjPp_eeRswBdmkr30xp6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.184.0/22
IPv6:
2a0d:7100::-2a0d:7100:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0a:d4:4f:e9:66:5d:3f:78:8f:43:bf:5c:3d:1b:67:32:21:38:
00:bb:e6:39:2b:83:a4:77:6e:34:96:f8:11:fa:b6:3d:4f:19:
51:96:9f:ed:61:df:73:71:5c:e2:72:f6:b3:bc:d4:f7:db:39:
5c:35:db:b9:10:80:fa:78:57:e4:e6:ba:26:cd:e3:2f:08:99:
31:14:30:06:9a:4f:0a:3e:78:46:51:5f:3d:b4:3c:97:06:ee:
5f:ec:a5:88:d9:15:fc:af:b6:0a:a3:4f:8e:45:6d:ed:45:fc:
d3:8f:6d:51:6f:f3:61:6d:26:ba:94:a1:bc:30:e1:dd:94:64:
48:f3:fe:a0:3a:b8:ed:b8:b5:e8:b5:68:03:a4:6a:83:97:a0:
68:af:df:01:d6:61:0b:d7:ad:73:1a:34:06:66:84:f1:32:3d:
d1:47:ea:13:06:1b:3e:3f:29:ed:9a:81:26:18:84:6a:60:0e:
6a:95:4e:09:52:e7:71:af:b1:6b:fb:e3:34:65:e9:f9:ce:72:
fb:4f:0e:c8:1d:70:e2:e5:b7:c4:f5:5e:ba:89:05:e6:d6:be:
c9:2b:8e:54:91:39:5a:48:b7:72:ef:91:09:50:46:cb:fa:ca:
f5:f7:01:a3:21:9e:6e:63:62:26:c9:ce:3a:29:b9:ca:f4:83:
80:d5:56:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:34 2023 by rpki-client on console-ams.rpki-client.org