Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/UzbbvYug7Lv8mGiB9Ij8TfGFlTg.roa
File: UzbbvYug7Lv8mGiB9Ij8TfGFlTg.roa (raw, json)
Hash identifier: aM/BfdweZVu1eOuHf6g/TLrg0Gib738A+2vIuGEScFc=
Subject key identifier: 53:36:DB:BD:8B:A0:EC:BB:FC:98:68:81:F4:88:FC:4D:F1:85:95:38
Certificate issuer: /CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
Certificate serial: 01857169C7A72E92DC444F86B25D29AAE03A
Authority key identifier: D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/UzbbvYug7Lv8mGiB9Ij8TfGFlTg.roa
Signing time: Mon 02 Jan 2023 07:37:15 +0000
ROA not before: Mon 02 Jan 2023 07:37:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210028
IP address blocks: 194.12.56.0/24 maxlen: 24
194.12.57.0/24 maxlen: 24
194.12.58.0/24 maxlen: 24
194.12.59.0/24 maxlen: 24
194.12.60.0/24 maxlen: 24
185.89.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:c7:a7:2e:92:dc:44:4f:86:b2:5d:29:aa:e0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
Validity
Not Before: Jan 2 07:37:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5336dbbd8ba0ecbbfc986881f488fc4df1859538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:ee:6e:2b:24:29:c6:76:78:4f:ac:6d:fe:
7c:a0:94:1c:ee:a5:41:96:aa:c9:99:32:6c:cb:1c:
be:7c:be:e8:0d:43:34:29:24:fd:b7:7e:10:93:a3:
af:9f:1c:85:99:03:d0:f4:45:97:b1:c1:c4:3d:5e:
78:ad:a9:dd:ab:90:0b:b7:30:eb:63:6d:87:88:53:
a1:22:62:18:94:b4:e6:bb:68:08:f9:d8:55:36:84:
ec:b7:e6:ff:ed:6f:4a:21:73:25:96:91:2e:c4:6d:
f9:bd:cd:f8:12:14:d4:aa:e9:d6:d4:43:6f:db:a3:
ee:16:55:b4:bd:9c:e4:86:47:21:4d:41:14:cd:b7:
c2:78:74:44:a0:a2:ce:1f:ba:29:3d:0c:20:06:c5:
db:d4:5f:67:19:9f:72:71:9a:7e:3e:18:6b:71:65:
31:02:f9:52:e1:54:18:a0:00:0e:e6:73:e6:9b:e5:
39:b8:63:33:f3:7c:91:e6:c1:7f:77:ac:28:1b:4f:
c4:cd:45:07:3b:42:7f:15:7d:9b:d1:1b:d7:4e:50:
ec:0a:c9:8a:57:73:dc:59:f1:60:31:3e:d4:f4:d9:
e3:d4:0e:9d:77:2c:a4:3f:57:5e:e2:bd:4b:ef:e3:
9e:d1:5f:1f:e5:8c:2a:e5:11:2e:dc:92:e1:3c:d9:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:DB:BD:8B:A0:EC:BB:FC:98:68:81:F4:88:FC:4D:F1:85:95:38
X509v3 Authority Key Identifier:
keyid:D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/UzbbvYug7Lv8mGiB9Ij8TfGFlTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.99.0/24
194.12.56.0-194.12.60.255
Signature Algorithm: sha256WithRSAEncryption
55:ac:ff:af:7e:74:ed:63:cd:07:65:12:68:95:4b:86:9e:d8:
b6:58:c3:be:5e:84:b4:1e:84:2f:c6:17:7c:c0:c8:1b:ef:b2:
73:8a:8c:ef:1c:99:f1:77:e0:4b:74:50:d3:a9:12:3d:0e:e0:
9f:ef:37:b2:f7:47:ad:b8:a4:c3:d8:7d:d0:4f:74:bc:3c:b6:
fe:05:56:2b:09:f9:4f:30:53:06:aa:93:30:f9:d1:e8:74:cd:
e5:14:4d:94:4a:c5:80:00:31:c4:db:5c:0c:f3:36:16:08:ad:
1c:52:71:29:4b:fa:05:7f:49:1e:cc:7f:7f:58:ff:d3:b0:2d:
15:d1:e9:f8:2f:a5:74:76:cc:e0:17:2d:3a:3e:3e:99:fe:13:
53:5d:a4:c0:e4:eb:80:62:08:8b:29:c4:98:6a:46:b8:34:c0:
20:22:26:04:bb:03:83:fe:d5:53:c7:7a:46:22:90:45:f7:fc:
a1:64:33:74:53:81:c8:32:76:08:b0:11:03:e3:c2:cd:70:13:
ac:b1:07:17:33:69:50:34:d6:0f:9f:56:c1:7e:cb:3d:09:fe:
f6:77:d0:77:15:45:de:35:62:9d:5a:5c:29:2d:e8:71:1d:a1:
2d:4a:e1:c4:65:53:09:d8:43:49:b5:3e:28:7e:04:46:51:7e:
98:9e:3a:78
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVxacenLpLcRE+Gsl0pquA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2M2Q1NTI5YmRhMTc3MTNlYmU2YjRjMjJmN2ZjZTRjYjhm
MWU4YjMwHhcNMjMwMTAyMDczNzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzM2ZGJiZDhiYTBlY2JiZmM5ODY4ODFmNDg4ZmM0ZGYxODU5NTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmPubiskKcZ2eE+sbf58oJQc7qVB
lqrJmTJsyxy+fL7oDUM0KST9t34Qk6OvnxyFmQPQ9EWXscHEPV54randq5ALtzDr
Y22HiFOhImIYlLTmu2gI+dhVNoTst+b/7W9KIXMllpEuxG35vc34EhTUqunW1ENv
26PuFlW0vZzkhkchTUEUzbfCeHREoKLOH7opPQwgBsXb1F9nGZ9ycZp+PhhrcWUx
AvlS4VQYoAAO5nPmm+U5uGMz83yR5sF/d6woG0/EzUUHO0J/FX2b0RvXTlDsCsmK
V3PcWfFgMT7U9Nnj1A6ddyykP1de4r1L7+Oe0V8f5Ywq5REu3JLhPNkrqQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFFM2272LoOy7/JhogfSI/E3xhZU4MB8GA1UdIwQY
MBaAFNY9VSm9oXcT6+a0wi9/zky48eizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWoxVktiMmhkeFByNXJUQ0wzX09UTGp4NkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82MmIzNDItN2MyMC00MWUzLThmMWIt
Y2RjZjVmNmE0YzI3LzEvVXpiYnZZdWc3THY4bUdpQjlJajhUZkdGbFRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi82MmIzNDItN2MyMC00MWUzLThmMWItY2RjZjVmNmE0YzI3
LzEvMWoxVktiMmhkeFByNXJUQ0wzX09UTGp4NkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAuVljMAwD
BAPCDDgDBADCDDwwDQYJKoZIhvcNAQELBQADggEBAFWs/69+dO1jzQdlEmiVS4ae
2LZYw75ehLQehC/GF3zAyBvvsnOKjO8cmfF34Et0UNOpEj0O4J/vN7L3R624pMPY
fdBPdLw8tv4FVisJ+U8wUwaqkzD50eh0zeUUTZRKxYAAMcTbXAzzNhYIrRxScSlL
+gV/SR7Mf39Y/9OwLRXR6fgvpXR2zOAXLTo+Ppn+E1NdpMDk64BiCIspxJhqRrg0
wCAiJgS7A4P+1VPHekYikEX3/KFkM3RTgcgydgiwEQPjws1wE6yxBxczaVA01g+f
VsF+yz0J/vZ30HcVRd41Yp1aXCkt6HEdoS1K4cRlUwnYQ0m1Pih+BEZRfpieOng=
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:11 2024 by rpki-client on console-fra.rpki-client.org