Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/UrVIiRa8TEw3SEQtVQNilEehb1I.roa
File: UrVIiRa8TEw3SEQtVQNilEehb1I.roa (raw, json)
Hash identifier: Puo0FG39t1BdK7U/RwEte+QLzrncbgIeqzMFc+jFiZs=
Subject key identifier: 52:B5:48:89:16:BC:4C:4C:37:48:44:2D:55:03:62:94:47:A1:6F:52
Certificate issuer: /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial: 01856CCAB52BCC93253F81A2F0C464F12050
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/UrVIiRa8TEw3SEQtVQNilEehb1I.roa
Signing time: Sun 01 Jan 2023 10:05:02 +0000
ROA not before: Sun 01 Jan 2023 10:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50903
IP address blocks: 178.23.32.0/21 maxlen: 22
185.118.92.0/22 maxlen: 23
2a00:ab80::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 14 Nov 2023 13:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:b5:2b:cc:93:25:3f:81:a2:f0:c4:64:f1:20:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Validity
Not Before: Jan 1 10:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52b5488916bc4c4c3748442d5503629447a16f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c1:ef:05:53:f1:3b:0b:cc:ea:ec:38:7b:70:
a7:ab:dc:5f:35:11:6d:c3:8d:05:53:4f:11:60:3a:
de:f9:67:c1:86:aa:13:6f:56:98:90:e0:43:7f:f3:
95:04:ec:55:52:a1:90:74:e3:78:b5:0d:0e:64:d0:
6f:77:73:2b:6b:c3:14:e0:9b:4d:95:40:01:f4:76:
fd:ff:6f:1b:9f:8f:08:1a:c5:51:45:0b:2b:c9:38:
61:17:01:cf:14:ea:ed:55:e8:ee:f3:6e:49:e8:b5:
29:75:d2:e3:37:63:fc:63:cb:f9:c6:c8:04:4a:0f:
d3:ff:60:cc:91:4c:01:4f:60:06:5c:bf:ac:65:0b:
2a:1b:50:ea:ef:d6:4d:e6:96:23:6c:d0:cf:e5:20:
b9:ef:84:06:6e:fd:06:3b:c2:a4:9b:83:df:65:b9:
9f:6b:5f:bc:12:74:91:cf:d4:62:c9:c2:34:95:17:
49:81:9d:9e:31:06:80:19:b3:3b:59:03:c4:79:76:
d3:9a:69:1e:96:23:10:49:26:d5:87:5b:7b:d3:95:
e6:18:61:a4:e1:8f:d9:cd:b6:ce:5e:bd:b7:5e:c7:
f5:3f:69:c6:50:14:c5:f4:69:04:1a:53:45:05:64:
d0:93:98:5e:a9:9d:b8:9b:4c:a9:62:30:14:b0:b8:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B5:48:89:16:BC:4C:4C:37:48:44:2D:55:03:62:94:47:A1:6F:52
X509v3 Authority Key Identifier:
keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/UrVIiRa8TEw3SEQtVQNilEehb1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.32.0/21
185.118.92.0/22
IPv6:
2a00:ab80::/32
Signature Algorithm: sha256WithRSAEncryption
79:4e:b2:f6:76:af:fd:6d:81:0a:aa:c2:e4:dc:e4:b9:23:43:
8b:90:3f:9d:cd:87:0a:e4:23:94:4a:40:7b:37:c2:8d:6a:f5:
3a:e3:de:e6:e9:cd:72:a8:96:59:7c:32:8a:64:7f:93:4d:31:
34:10:bd:09:c7:cb:3b:61:98:82:08:cc:2e:a9:14:17:ff:ae:
26:e9:5b:a2:bd:7a:bf:18:7d:cc:7c:ba:b0:f6:f0:87:48:22:
ce:32:2b:81:a4:f1:42:9f:78:28:30:62:23:2f:9e:5a:3a:b2:
f2:1c:e7:e8:fc:e0:f3:ee:e9:98:e7:92:86:26:9d:2e:e0:3b:
ad:e9:b5:d2:e1:df:dd:38:67:01:80:07:d2:64:27:34:55:94:
3e:8c:fe:f2:3f:0d:4c:30:1d:e7:95:32:66:af:e7:9b:2d:74:
18:1a:a4:42:25:0e:7e:92:15:cf:d9:dd:d8:49:3a:4e:e7:35:
e6:0a:a5:c0:83:be:8a:db:a4:83:bb:05:c4:29:e3:ae:fe:06:
38:f1:f7:23:a3:ad:b1:1e:da:e7:65:2e:80:f6:63:4e:4f:3a:
ee:16:24:7b:14:a6:5e:e9:de:b5:06:ee:ef:18:c1:8e:83:61:
d4:74:26:89:01:c9:c1:34:44:1f:2c:b2:c5:50:ad:3e:2b:b1:
df:3f:b2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:33 2024 by rpki-client on console-ams.rpki-client.org