Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/UpyOZleFuq516EIZ9G702E2V0MQ.roa
File: UpyOZleFuq516EIZ9G702E2V0MQ.roa (raw, json)
Hash identifier: lpoiI1J35ywp+Qoo1Br5wlrf1x5iZevntEMOCW267ic=
Subject key identifier: 52:9C:8E:66:57:85:BA:AE:75:E8:42:19:F4:6E:F4:D8:4D:95:D0:C4
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01856FF96F733A388A7EE3155D9837D81D79
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/UpyOZleFuq516EIZ9G702E2V0MQ.roa
Signing time: Mon 02 Jan 2023 00:54:56 +0000
ROA not before: Mon 02 Jan 2023 00:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48282
IP address blocks: 185.197.74.0/24 maxlen: 24
185.230.143.0/24 maxlen: 24
193.188.21.0/24 maxlen: 24
193.188.22.0/24 maxlen: 24
193.188.20.0/24 maxlen: 24
194.113.106.0/24 maxlen: 24
193.38.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:6f:73:3a:38:8a:7e:e3:15:5d:98:37:d8:1d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 2 00:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=529c8e665785baae75e84219f46ef4d84d95d0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:32:e8:6f:44:dc:c4:7c:43:64:f5:47:63:
35:90:76:54:7b:61:ae:43:dd:99:86:42:8b:b0:c5:
67:06:4f:7f:db:02:9c:c7:7e:40:f6:d3:59:38:69:
ee:de:24:63:ae:09:10:77:b7:17:ce:86:cc:9c:e6:
cf:cf:4a:d9:5b:b7:fd:95:a7:bd:a2:d7:51:de:37:
da:f2:84:d4:58:06:74:7d:e2:a2:07:64:9d:33:d0:
22:98:98:b1:5d:ec:02:14:7e:18:56:97:40:50:94:
60:da:5c:da:93:3a:f5:8f:9c:54:f5:8b:00:d1:e0:
a6:7a:05:81:a8:d7:ec:28:3a:c4:d2:61:03:60:95:
46:33:48:83:49:43:53:fa:4b:9e:a5:09:83:b2:09:
d8:2f:af:7d:0c:41:e1:bd:0f:d4:e6:0f:0a:23:2c:
0f:4d:18:23:bf:2c:8e:45:56:7c:88:2f:94:16:d8:
4a:8e:58:0b:d5:ce:8b:26:21:15:7b:65:e4:8d:83:
2e:26:23:62:f6:37:ba:05:12:92:df:95:8d:8a:69:
22:cf:f2:0c:7b:4b:2d:68:89:a1:a0:8b:55:65:9f:
46:73:af:a0:01:8a:0b:aa:e9:44:60:ca:eb:38:17:
d8:3b:0e:3b:38:22:7b:e8:e6:c3:df:d5:69:d1:ec:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9C:8E:66:57:85:BA:AE:75:E8:42:19:F4:6E:F4:D8:4D:95:D0:C4
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/UpyOZleFuq516EIZ9G702E2V0MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.74.0/24
185.230.143.0/24
193.38.235.0/24
193.188.20.0-193.188.22.255
194.113.106.0/24
Signature Algorithm: sha256WithRSAEncryption
80:39:03:a1:c2:85:ff:11:00:ac:e7:7a:6a:9f:7a:66:75:54:
40:24:a6:02:55:93:bf:10:a8:0c:8e:35:94:bb:8c:0a:56:7c:
ae:53:0a:64:a7:5e:94:6a:2e:39:30:cb:6f:90:a5:ce:3c:b3:
72:c3:f1:c0:8b:13:96:3b:3e:45:54:a3:15:38:2a:c4:d3:99:
84:b2:4d:5c:fa:34:2c:93:2b:a4:05:7e:3d:c8:87:a2:e8:a6:
b4:80:41:aa:9f:fe:50:7d:31:eb:1b:16:a5:ed:8e:c7:73:94:
7f:7c:20:32:ca:19:1f:6a:4a:81:d6:dc:35:84:bf:be:97:e8:
47:af:da:51:02:42:f4:1b:b7:83:55:4c:9d:8d:24:69:a6:86:
84:ea:82:ca:76:d9:2d:fc:b0:36:bb:bb:13:ff:a7:4e:30:05:
e4:1a:50:df:6c:2e:cb:fa:5b:74:53:5d:dd:16:6d:1f:8c:4c:
03:db:51:41:6d:93:b4:04:b6:3c:aa:5a:b5:6f:73:1f:29:19:
4c:51:27:8a:52:27:60:03:1e:6a:4c:9e:b9:98:30:01:17:aa:
62:37:b3:74:95:6c:15:bd:ab:cf:ff:6a:21:25:b8:04:7c:91:
9a:9e:d6:df:57:17:b9:84:7d:20:43:cf:36:6a:0c:82:ee:43:
6f:4a:2f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org