Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/UPVKF8PPJdClp1USpdqafqmIyVs.roa
File: UPVKF8PPJdClp1USpdqafqmIyVs.roa (raw, json)
Hash identifier: s+jWRTsRfZ0zgqdlz9XUt202FQCj/QUrvt9h2ZdeUbw=
Subject key identifier: 50:F5:4A:17:C3:CF:25:D0:A5:A7:55:12:A5:DA:9A:7E:A9:88:C9:5B
Certificate issuer: /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial: 018732A3962098C3C2AF8E1207EE5217C7DD
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/UPVKF8PPJdClp1USpdqafqmIyVs.roa
Signing time: Thu 30 Mar 2023 13:09:54 +0000
ROA not before: Thu 30 Mar 2023 13:09:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.178.165.0/24 maxlen: 24
185.178.164.0/24 maxlen: 24
185.178.166.0/24 maxlen: 24
185.178.167.0/24 maxlen: 24
185.196.98.0/24 maxlen: 24
185.196.97.0/24 maxlen: 24
185.196.96.0/24 maxlen: 24
185.196.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:32:a3:96:20:98:c3:c2:af:8e:12:07:ee:52:17:c7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
Validity
Not Before: Mar 30 13:09:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50f54a17c3cf25d0a5a75512a5da9a7ea988c95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2a:d8:20:34:11:28:e8:14:f2:f5:b9:eb:b6:
6e:b8:bb:c4:c6:38:bd:38:44:08:e0:43:e5:1f:b9:
e0:c5:91:4f:1d:65:2a:c9:41:9d:25:83:a1:b3:1b:
dd:7a:40:8a:fd:1e:2c:2c:68:50:7b:be:92:8d:3e:
14:32:2f:7e:18:4a:cf:0a:8d:99:be:f4:7f:58:f4:
3c:3a:ef:83:82:c2:de:d6:f2:29:78:25:e8:43:bd:
ef:94:09:a6:db:0d:a9:06:0b:2e:74:f3:91:82:12:
76:ac:9b:25:78:5b:2f:b4:47:4c:07:c5:2f:9f:f8:
30:93:37:4c:9c:66:11:ab:2b:19:17:07:4f:16:c1:
5b:ea:9d:a4:13:10:d6:45:b2:bd:dd:75:87:f4:61:
22:08:39:e2:8b:63:45:70:24:93:d1:61:a5:a5:d7:
66:87:13:53:eb:63:77:bc:88:53:a5:99:f7:a1:b7:
a5:0d:86:d1:7e:f9:5e:0f:cf:5a:50:6b:75:38:48:
44:35:a7:a1:df:63:9a:52:52:31:40:7d:8c:af:8a:
ec:11:ea:29:38:d1:30:d0:a0:5f:3e:b2:7b:8b:91:
f9:12:86:3f:e4:61:71:02:90:ed:b6:61:20:64:b9:
8b:6e:8a:2c:8d:95:7f:2d:62:5b:f6:25:2e:d2:32:
c4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F5:4A:17:C3:CF:25:D0:A5:A7:55:12:A5:DA:9A:7E:A9:88:C9:5B
X509v3 Authority Key Identifier:
keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/UPVKF8PPJdClp1USpdqafqmIyVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.164.0/22
185.196.96.0/22
Signature Algorithm: sha256WithRSAEncryption
19:13:be:70:80:66:9a:17:23:31:c9:55:8f:77:a9:bc:e1:95:
00:92:f3:cf:ab:ee:7d:d8:92:ac:49:21:e7:1e:76:9a:12:df:
a5:62:18:9e:d1:49:7d:03:2d:90:56:ed:08:fc:46:c2:f2:31:
43:b1:01:79:8a:63:ca:30:2c:d7:58:82:85:38:ce:05:64:76:
61:8e:dc:bf:53:7d:f0:d4:89:07:bd:74:4e:d5:5d:d8:05:3e:
8e:97:53:38:75:13:21:9c:3b:0d:19:77:0f:75:5d:7f:1f:63:
11:24:1b:83:36:21:61:5b:14:7a:bf:0e:a5:c4:76:6e:9c:08:
31:d4:36:01:6c:a6:fa:71:14:7e:40:ae:16:1a:ee:78:d9:f1:
90:4f:cd:bb:63:d7:96:ad:13:b3:1a:d5:fb:76:bf:dc:63:78:
fc:24:65:6d:69:82:64:83:11:47:57:94:53:f2:97:7d:0e:85:
62:89:4a:53:35:26:dd:f3:bf:18:21:e0:fc:86:66:4f:a1:a3:
8b:b3:57:31:39:62:29:d6:ef:86:12:81:48:7a:54:f2:54:fc:
af:b4:ed:7d:f6:20:64:5d:c7:af:87:bd:dd:2d:c9:54:0c:8f:
6e:8c:04:6e:ae:2c:06:bb:be:1b:b8:1b:e5:cc:67:62:98:cb:
01:58:ce:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:20 2023 by rpki-client on console-fra.rpki-client.org