Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/UFv-nNoPY_QQV-I1d25-pxtqGfw.roa
File: UFv-nNoPY_QQV-I1d25-pxtqGfw.roa (raw, json)
Hash identifier: N9ZGqkJujXBfMMVpHSpnzaoyujcm3JwwEqd4yXd5jCk=
Subject key identifier: 50:5B:FE:9C:DA:0F:63:F4:10:57:E2:35:77:6E:7E:A7:1B:6A:19:FC
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 018703DD00112C8596D810E91BBC6141F365
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/UFv-nNoPY_QQV-I1d25-pxtqGfw.roa
Signing time: Tue 21 Mar 2023 11:10:27 +0000
ROA not before: Tue 21 Mar 2023 11:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 192.144.52.0/22 maxlen: 24
193.9.40.0/22 maxlen: 24
45.83.112.0/22 maxlen: 24
80.254.232.0/22 maxlen: 24
185.181.56.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:dd:00:11:2c:85:96:d8:10:e9:1b:bc:61:41:f3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Mar 21 11:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=505bfe9cda0f63f41057e235776e7ea71b6a19fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f4:6c:16:da:14:d6:7f:6b:14:1c:71:54:a2:
ab:a1:0a:cf:d1:1d:b3:83:2c:a3:83:7a:21:aa:f2:
6a:ae:5d:ee:8e:84:02:62:f1:8b:44:c9:08:cf:df:
13:d5:37:6c:f0:be:dd:0c:f4:fc:4f:40:c6:75:33:
fb:17:4d:c0:f8:d2:54:fb:9f:aa:f5:7a:18:80:5b:
01:fc:53:08:c7:40:84:41:48:b2:c5:13:ba:12:83:
6b:13:c0:18:1c:c7:b1:12:dc:5d:5d:e6:a6:c2:17:
a6:88:cb:91:8f:a2:ff:22:ee:21:9c:51:b4:47:01:
18:0a:7d:49:50:f4:86:ef:db:c6:c5:8b:d5:9d:fa:
2e:64:34:29:52:18:f3:27:df:a7:4b:42:e9:67:6b:
71:0a:5e:a5:41:47:25:d2:20:d1:44:a6:99:69:9f:
7f:06:e7:3d:bf:ae:be:f4:71:d8:1c:ac:0d:e5:78:
be:f2:64:bc:55:f9:66:6b:79:f2:f9:40:c0:1a:f6:
d6:19:e5:4f:14:51:07:12:1c:4e:69:aa:45:34:db:
b2:31:7b:c4:d1:4e:4c:74:1c:b6:91:c8:9d:72:a3:
46:6f:e2:23:9b:15:b3:f1:c1:9f:6e:8e:0c:ba:30:
03:16:07:7a:66:4a:99:13:20:bf:e5:4e:a5:47:18:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5B:FE:9C:DA:0F:63:F4:10:57:E2:35:77:6E:7E:A7:1B:6A:19:FC
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/UFv-nNoPY_QQV-I1d25-pxtqGfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.112.0/22
80.254.232.0/22
185.181.56.0/22
192.144.52.0/22
193.9.40.0/22
Signature Algorithm: sha256WithRSAEncryption
97:b0:31:46:b3:61:b1:20:ed:62:97:ed:73:86:ab:ff:d5:c3:
69:46:ee:06:bc:77:80:e6:18:dd:b0:8b:ba:ba:0e:26:09:2f:
8a:13:5f:f9:4e:c6:f5:23:98:1b:a5:ed:ee:cc:cd:7f:34:68:
d5:05:d4:9f:8c:e5:25:78:df:52:c4:b5:2c:26:94:da:74:9c:
d1:45:76:9d:20:ad:dc:ff:21:45:b2:ab:e9:78:29:95:c3:be:
77:2a:ba:cb:f9:7f:47:47:2c:bc:9c:ab:31:a9:68:ee:fe:37:
49:46:1f:4b:3c:aa:cd:84:81:7f:15:5c:17:92:49:21:13:8e:
70:1c:48:01:b4:64:9c:c2:ab:1d:d8:d6:92:ff:e8:30:8e:2d:
45:bc:e0:fa:a9:dd:ad:2e:bd:6e:d3:43:7f:47:e6:f2:58:76:
f5:a4:62:77:2d:39:c9:6e:20:7a:49:0a:e7:40:90:57:cd:e1:
38:53:76:83:a4:5f:9f:06:d7:72:01:ac:e7:6a:3c:68:0c:e1:
e5:d6:a0:51:23:5c:87:3b:ea:1d:07:3e:21:62:44:69:b5:82:
42:99:03:a6:c4:93:06:d0:38:48:bb:98:e6:0a:d8:53:95:36:
d3:99:06:43:31:40:d6:8f:22:c8:c7:0f:15:9a:32:87:31:af:
3d:3b:97:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:22 2023 by rpki-client on console-fra.rpki-client.org