Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ugOIEEzozhzikJeh2mN4m2dlykw.roa
File: ugOIEEzozhzikJeh2mN4m2dlykw.roa (raw, json)
Hash identifier: 3KMMn2r9r2ejWNpDG2pPpXIwAWv/m32TqRQp1DG0ck4=
Subject key identifier: BA:03:88:10:4C:E8:CE:1C:E2:90:97:A1:DA:63:78:9B:67:65:CA:4C
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01892A2FEA383AAE3C9A200DBDA6B6ACA49C
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ugOIEEzozhzikJeh2mN4m2dlykw.roa
Signing time: Thu 06 Jul 2023 07:52:10 +0000
ROA not before: Thu 06 Jul 2023 07:52:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 45.92.229.0/24 maxlen: 24
45.86.202.0/24 maxlen: 24
45.86.200.0/24 maxlen: 24
136.144.17.0/24 maxlen: 24
193.37.33.0/24 maxlen: 24
193.37.32.0/24 maxlen: 24
136.144.19.0/24 maxlen: 24
194.5.48.0/24 maxlen: 24
136.144.33.0/24 maxlen: 24
194.5.53.0/24 maxlen: 24
136.144.42.0/24 maxlen: 24
194.34.173.0/24 maxlen: 24
45.84.216.0/24 maxlen: 24
193.36.224.0/24 maxlen: 24
193.36.225.0/24 maxlen: 24
45.95.243.0/24 maxlen: 24
193.176.211.0/24 maxlen: 24
45.154.138.0/24 maxlen: 24
45.146.54.0/24 maxlen: 24
2a0f:e387::/32 maxlen: 32
2a0f:e386::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:2f:ea:38:3a:ae:3c:9a:20:0d:bd:a6:b6:ac:a4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 6 07:52:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba0388104ce8ce1ce29097a1da63789b6765ca4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:64:2b:d0:4e:48:72:09:72:0b:18:b4:40:
58:86:24:b5:1b:de:9c:22:1a:7e:af:3a:d0:69:b9:
3d:91:9c:3c:1a:60:5a:45:e1:92:dc:d0:6e:46:38:
79:03:4f:77:1e:24:22:e8:15:ff:2a:e0:18:b9:eb:
86:62:9d:eb:23:d9:8a:22:5b:a1:98:b7:96:5b:97:
c3:bb:06:b4:ea:af:68:b3:47:10:bf:76:c0:0c:17:
4d:fe:a9:7d:53:7d:23:d4:34:09:1c:c8:37:99:75:
5c:c0:25:a3:91:b6:23:9a:4f:71:c2:4a:be:06:83:
68:dc:6e:17:f8:9c:86:e6:93:dc:e2:c7:a5:cf:9e:
52:e6:54:48:06:e9:ae:57:ba:a1:15:3c:31:a1:c5:
8d:86:3f:37:cd:1a:eb:1b:c5:6e:13:ff:b1:ef:05:
0b:ee:2c:07:2e:d6:20:a3:59:6f:38:10:e0:aa:84:
9b:82:b4:cf:b9:94:4c:39:51:a8:de:05:fe:0c:eb:
da:93:b7:3f:a7:88:6d:86:8e:52:6f:11:d3:c2:4d:
bb:4e:3f:e7:29:e1:90:56:11:5f:94:70:04:19:4f:
13:5a:40:c2:9f:8e:3f:08:26:46:93:33:cf:81:38:
db:b0:66:a1:8e:2a:2b:07:dd:f3:36:10:f8:08:7d:
f4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:03:88:10:4C:E8:CE:1C:E2:90:97:A1:DA:63:78:9B:67:65:CA:4C
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ugOIEEzozhzikJeh2mN4m2dlykw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.216.0/24
45.86.200.0/24
45.86.202.0/24
45.92.229.0/24
45.95.243.0/24
45.146.54.0/24
45.154.138.0/24
136.144.17.0/24
136.144.19.0/24
136.144.33.0/24
136.144.42.0/24
193.36.224.0/23
193.37.32.0/23
193.176.211.0/24
194.5.48.0/24
194.5.53.0/24
194.34.173.0/24
IPv6:
2a0f:e386::/31
Signature Algorithm: sha256WithRSAEncryption
6b:3d:6b:b9:e5:b6:91:9c:7d:4d:77:6b:2a:8d:18:ad:46:2f:
d6:8b:a1:70:bc:99:b7:62:5d:d4:82:c2:a1:0b:0d:46:2e:49:
20:60:73:e6:07:50:8c:fa:79:bc:04:43:9d:d6:9a:e2:4d:93:
50:3c:d7:ce:c1:b1:61:c3:40:0f:e8:17:a7:3a:a9:f7:b0:40:
5f:6c:db:82:36:55:df:12:c7:79:0e:6c:84:25:e7:14:01:de:
6d:63:01:42:4b:f5:df:5b:9a:0c:2f:bd:2c:c9:d9:df:f2:97:
92:d1:b1:76:3a:c7:f5:a2:82:a7:1f:66:0e:13:65:85:8b:5b:
4e:53:84:c7:1f:23:63:11:67:37:65:e9:a2:c4:4a:d6:3c:78:
cd:9c:07:35:1e:1e:48:c8:77:7b:7b:dc:2f:fa:a9:24:38:52:
48:84:c1:c8:30:38:4f:a0:35:19:1b:8f:f0:87:43:fa:ba:07:
57:d4:0a:99:2d:e9:08:9d:e3:77:ca:53:24:03:87:03:c6:e3:
46:e3:48:f5:01:af:f2:87:da:36:af:5c:65:55:bc:bf:c7:b7:
18:64:9d:d8:fe:e5:59:60:95:90:b3:62:ea:d1:79:c6:03:11:
8b:6d:9f:cb:94:b8:22:87:3a:d1:e0:cb:8e:8b:c2:25:04:cf:
9d:5a:0e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 09:49:20 2023 by rpki-client on console-ams.rpki-client.org