Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/UbVGrd2iHpB-HPyTXKIDjcoVOIc.roa
File: UbVGrd2iHpB-HPyTXKIDjcoVOIc.roa (raw, json)
Hash identifier: JZ21lwGOjoYrfNp50zgxpWTXQ2RoO40JHBfdYnmKeWQ=
Subject key identifier: 51:B5:46:AD:DD:A2:1E:90:7E:1C:FC:93:5C:A2:03:8D:CA:15:38:87
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0187C256340D8D1FB2169385C8F4CAE84BCC
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/UbVGrd2iHpB-HPyTXKIDjcoVOIc.roa
Signing time: Thu 27 Apr 2023 10:50:41 +0000
ROA not before: Thu 27 Apr 2023 10:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6233
IP address blocks: 80.66.196.0/24 maxlen: 24
141.98.196.0/22 maxlen: 24
45.11.45.0/24 maxlen: 24
94.124.116.0/22 maxlen: 24
185.200.64.0/22 maxlen: 24
94.124.119.0/24 maxlen: 24
194.36.242.0/24 maxlen: 24
195.245.219.0/24 maxlen: 24
45.139.193.0/24 maxlen: 24
185.184.222.0/24 maxlen: 24
45.13.197.0/24 maxlen: 24
45.13.196.0/22 maxlen: 24
45.13.196.0/24 maxlen: 24
45.130.20.0/22 maxlen: 24
79.143.140.0/22 maxlen: 24
45.87.164.0/22 maxlen: 24
195.245.242.0/24 maxlen: 24
45.87.164.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
194.104.152.0/22 maxlen: 24
45.153.244.0/22 maxlen: 24
194.36.24.0/24 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.233.0/24 maxlen: 24
185.248.87.0/24 maxlen: 24
45.143.235.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
194.169.54.0/24 maxlen: 24
194.169.54.0/23 maxlen: 24
185.194.52.0/22 maxlen: 24
185.222.216.0/21 maxlen: 24
2a09::/29 maxlen: 48
2a0d:c7c0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:56:34:0d:8d:1f:b2:16:93:85:c8:f4:ca:e8:4b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Apr 27 10:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51b546addda21e907e1cfc935ca2038dca153887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:cc:9a:f5:ce:3f:fe:3a:63:b0:87:33:e4:
c2:c4:0b:44:4c:85:01:f2:dd:0f:7f:5e:24:60:f0:
4d:3e:02:58:d0:c7:8c:66:ea:33:39:36:ed:28:c7:
af:9e:e5:09:6d:72:d8:d6:d8:f9:19:f6:c8:2d:59:
80:94:7d:b3:51:d0:0f:28:5d:ae:b6:db:45:f2:6c:
85:ec:fa:f3:0f:96:fd:09:7a:d4:b2:e5:f1:72:79:
de:98:68:cd:02:3b:87:66:61:58:1f:75:d1:94:7e:
e9:56:59:21:3d:7d:75:f2:fd:f6:9c:e9:77:9e:1e:
dc:35:bb:79:00:e8:ea:ee:63:ab:a7:6c:e4:59:0a:
65:2a:d2:4a:da:f2:17:cc:b5:a3:31:e7:1d:25:13:
19:68:d9:a4:42:34:38:75:d2:56:b1:3b:f6:d4:7a:
d8:8c:91:51:39:b9:46:c4:e5:8a:06:ab:73:e3:d3:
d8:d9:4f:d3:54:ff:10:ea:82:37:50:f4:79:b7:ef:
70:40:c4:51:4f:81:89:f4:4e:35:01:01:af:5f:85:
83:53:8c:c7:12:7f:56:67:c8:42:9e:d1:66:40:c7:
88:ec:ce:d4:07:b4:d5:78:0f:c0:b2:b4:59:4f:17:
c4:14:4e:36:89:e2:eb:47:ce:29:67:8b:58:69:7a:
c5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B5:46:AD:DD:A2:1E:90:7E:1C:FC:93:5C:A2:03:8D:CA:15:38:87
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/UbVGrd2iHpB-HPyTXKIDjcoVOIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.45.0/24
45.13.196.0/22
45.87.164.0/22
45.130.20.0/22
45.139.193.0/24
45.143.232.0/22
45.153.244.0/22
79.143.140.0/22
80.66.196.0/24
94.124.116.0/22
141.98.196.0/22
185.184.222.0/24
185.194.52.0/22
185.200.64.0/22
185.222.216.0/21
185.248.87.0/24
194.36.24.0/24
194.36.242.0/24
194.104.152.0/22
194.169.54.0/23
195.245.219.0/24
195.245.241.0-195.245.242.255
IPv6:
2a09::/29
2a0d:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
4c:03:93:4a:25:aa:95:27:3c:70:86:87:91:b9:44:6c:2a:52:
21:02:a3:c2:84:ac:7c:af:e5:7e:61:96:8f:c3:2e:a3:29:d9:
a3:b5:54:5e:80:f3:26:66:21:25:88:c9:8c:35:53:90:ae:0d:
22:cb:33:59:62:cb:aa:e3:73:72:a2:9b:2d:17:00:e3:d7:f4:
34:d7:e2:9b:2f:c6:39:38:5c:dd:3d:a9:7b:33:a0:a1:23:5c:
94:a9:da:03:a4:7e:f0:1e:91:42:71:97:c1:ac:96:35:e3:a7:
c6:38:77:af:2e:a0:7f:5a:1e:aa:3b:1e:5f:ad:e9:4c:8a:77:
25:86:b0:40:fb:67:09:ba:6e:4b:50:24:71:d8:6b:04:e8:91:
e7:b9:4a:29:6e:cb:90:30:af:66:e2:92:fc:eb:c1:f3:cd:cd:
23:5a:f9:10:01:36:46:df:ab:4c:94:c3:d3:93:8c:a7:62:bf:
42:38:69:91:0c:3a:5b:96:2b:bd:f4:fe:cc:07:27:09:1f:c8:
f1:df:0e:cb:6b:98:f2:fe:28:0c:c1:f5:12:53:b2:e7:90:35:
03:4c:e6:db:10:29:b6:e0:7e:cb:e4:ba:13:df:a0:16:12:ba:
5f:22:a4:45:8f:41:b0:b4:84:31:b5:25:1d:6f:a2:3c:38:1a:
d7:11:71:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 16:42:52 2023 by rpki-client on console-fra.rpki-client.org