Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/UATY5OR-supwnH_DVDVVQj2P0-g.roa
File: UATY5OR-supwnH_DVDVVQj2P0-g.roa (raw, json)
Hash identifier: IMuQ4uqrnSnBJG6tyL3EkwLDL+5Z/GZ2RpQrGKT1kgA=
Subject key identifier: 50:04:D8:E4:E4:7E:B2:EA:70:9C:7F:C3:54:35:55:42:3D:8F:D3:E8
Certificate issuer: /CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Certificate serial: 01856F948DA311DA7055A460474CABDE381B
Authority key identifier: F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/UATY5OR-supwnH_DVDVVQj2P0-g.roa
Signing time: Sun 01 Jan 2023 23:04:44 +0000
ROA not before: Sun 01 Jan 2023 23:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202330
IP address blocks: 185.255.21.0/24 maxlen: 24
185.255.20.0/22 maxlen: 22
185.255.22.0/24 maxlen: 24
185.255.23.0/24 maxlen: 24
185.255.20.0/24 maxlen: 24
185.25.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:8d:a3:11:da:70:55:a4:60:47:4c:ab:de:38:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Validity
Not Before: Jan 1 23:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5004d8e4e47eb2ea709c7fc3543555423d8fd3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:62:3b:57:ac:b1:88:f5:d9:a5:9c:70:a2:
05:7c:9a:2e:1a:7f:79:2e:20:d9:38:0c:28:28:d9:
d6:87:4a:6a:88:de:e4:34:39:bf:b6:dd:c0:cd:4a:
ec:5a:2c:63:53:50:fa:e8:c9:d9:cd:04:bc:5c:80:
19:87:e5:e5:2d:d7:b2:28:90:85:3b:19:8e:ac:b0:
94:44:49:97:3f:c9:3f:19:33:f0:4f:73:09:d6:b9:
cd:c4:ad:c9:8f:c2:31:52:4a:8f:e0:5d:a8:15:a5:
30:7b:91:b6:34:00:4b:3b:12:79:e6:81:37:8c:38:
f9:a2:53:72:a7:e0:bb:0d:7f:0b:d4:55:2f:56:8a:
b6:d1:ef:ce:13:b8:03:12:64:a8:05:fd:c7:a7:d4:
9b:33:37:02:2c:a6:e5:eb:82:c8:cc:34:48:d8:6b:
e0:2d:f3:63:df:fa:05:b1:bc:0c:35:71:49:5e:87:
9d:6d:0c:77:9f:f6:30:f9:38:26:66:16:9c:7e:3f:
fe:a7:3c:db:3e:23:34:cd:a3:d8:85:72:89:ec:06:
fd:d0:6d:eb:7c:67:ff:61:2c:4a:ec:50:f4:c3:6c:
32:ce:dc:8a:53:d5:26:af:22:a0:a3:34:1a:dc:47:
79:bf:97:20:fa:85:51:e4:3b:32:14:98:88:73:50:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:04:D8:E4:E4:7E:B2:EA:70:9C:7F:C3:54:35:55:42:3D:8F:D3:E8
X509v3 Authority Key Identifier:
keyid:F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/UATY5OR-supwnH_DVDVVQj2P0-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.105.0/24
185.255.20.0/22
Signature Algorithm: sha256WithRSAEncryption
13:bb:f5:77:76:67:c3:a8:b6:3d:a6:fb:3d:98:31:17:a1:48:
ab:f7:15:fa:15:97:ee:d7:d4:3c:22:bd:40:5c:f0:d2:fb:06:
1e:e1:b8:bb:73:df:f0:09:04:21:d2:3a:d0:52:0c:25:b5:0b:
e6:9a:9e:89:00:1a:ee:e6:ec:a3:1c:06:a1:39:75:36:de:c0:
48:37:ee:ca:70:5c:f1:13:50:9d:7b:f1:fc:4b:cb:6c:e1:f7:
1f:36:9d:60:95:f2:5f:d9:dd:79:b0:ca:42:c0:0e:ef:8f:ee:
b8:4d:2f:9b:96:0b:4a:ed:5e:96:7c:de:04:73:b7:c4:47:17:
94:bb:a6:05:c2:ca:10:6d:3a:b2:47:35:a3:d9:79:b0:fd:86:
eb:4d:73:f3:43:33:05:3c:ad:87:70:b1:98:00:56:7e:f0:4c:
a1:91:91:c3:e1:e2:4a:c0:61:d5:df:01:f6:47:fe:d9:4a:57:
c2:47:c6:62:99:2a:9d:39:92:6e:98:5e:21:ce:e5:34:53:4e:
bd:87:6c:81:d0:ff:4d:41:f2:f7:ec:d1:aa:2f:45:ce:12:91:
53:9d:be:fa:dc:5c:a1:95:23:28:74:33:05:29:6f:5f:e8:60:
d6:79:d1:c8:9a:bf:a8:de:2e:a6:35:f1:2b:55:f9:26:bf:af:
a8:7a:31:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:26 2023 by rpki-client on console-ams.rpki-client.org