Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/UGDZQyRZV7s53Gj-hPEvFq-OjNw.roa
File: UGDZQyRZV7s53Gj-hPEvFq-OjNw.roa (raw, json)
Hash identifier: 11Dud+q/4sZKjpp5jyGBaTWFkIqPwFC6F5ETPhf0OHA=
Subject key identifier: 50:60:D9:43:24:59:57:BB:39:DC:68:FE:84:F1:2F:16:AF:8E:8C:DC
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 018CC4924DC5FB52798D28ABDDBE0C88DA26
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/UGDZQyRZV7s53Gj-hPEvFq-OjNw.roa
Signing time: Mon 01 Jan 2024 10:29:31 +0000
ROA not before: Mon 01 Jan 2024 10:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41313
IP address blocks: 185.40.164.0/22 maxlen: 24
46.35.160.0/19 maxlen: 24
185.18.228.0/22 maxlen: 24
151.252.192.0/20 maxlen: 24
79.110.120.0/21 maxlen: 24
95.158.128.0/18 maxlen: 24
80.95.16.0/21 maxlen: 24
80.95.22.0/24 maxlen: 24
93.175.244.0/23 maxlen: 24
212.21.128.0/19 maxlen: 24
93.152.234.0/23 maxlen: 24
2a00:e200::/32 maxlen: 48
2a0d:3b40::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 Feb 2024 18:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:4d:c5:fb:52:79:8d:28:ab:dd:be:0c:88:da:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 10:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5060d943245957bb39dc68fe84f12f16af8e8cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:56:02:ca:35:c2:c5:24:e5:22:be:04:23:d3:
ea:b6:6e:13:84:a0:6c:aa:3d:37:2b:d1:af:2d:0c:
a2:ed:b3:97:11:27:ec:a8:23:93:4d:17:ae:5a:3e:
b1:35:13:60:6f:05:f5:a9:cc:93:55:e9:44:a1:1d:
c1:90:c0:a8:c8:93:e7:1e:99:46:3d:8e:f2:a6:ac:
66:d5:e9:4b:0f:21:38:ff:56:4d:13:c5:a1:55:fb:
fe:61:3a:11:7b:c1:e1:aa:16:99:9e:19:61:6a:3e:
9f:49:e5:8a:42:a1:8f:c8:de:bc:da:dd:09:b7:e3:
9a:6c:38:08:6f:80:14:0f:68:29:e6:7f:be:4b:88:
4e:44:6b:62:45:f6:3f:a1:45:ef:06:b1:3a:25:39:
a8:e4:27:eb:9a:df:cd:58:14:08:ff:de:bc:da:4a:
b6:9d:a3:62:ec:dc:65:5c:fb:9e:bd:61:81:c5:ee:
a3:ae:38:66:1e:02:3a:85:75:7d:b6:69:5f:1f:1b:
88:22:a4:62:5c:a7:fc:0b:6e:9c:0b:77:da:01:b9:
8d:25:55:d9:1a:95:1a:4a:0d:7c:fc:ad:d5:f4:2b:
ab:61:2d:72:de:81:86:d1:a9:ca:79:f4:c1:07:db:
bd:d3:c4:09:5b:12:b5:10:61:f0:f7:24:55:7b:c7:
1b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:60:D9:43:24:59:57:BB:39:DC:68:FE:84:F1:2F:16:AF:8E:8C:DC
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/UGDZQyRZV7s53Gj-hPEvFq-OjNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.160.0/19
79.110.120.0/21
80.95.16.0/21
93.152.234.0/23
93.175.244.0/23
95.158.128.0/18
151.252.192.0/20
185.18.228.0/22
185.40.164.0/22
212.21.128.0/19
IPv6:
2a00:e200::/32
2a0d:3b40::/29
Signature Algorithm: sha256WithRSAEncryption
b6:68:c8:9a:aa:bd:75:0a:8d:d6:4b:e7:07:81:81:d5:96:e0:
59:24:03:93:69:25:c7:bf:5b:f5:aa:ab:93:1a:96:25:11:8a:
1c:d4:83:7f:6d:ea:0f:7f:c6:2b:f8:d5:b1:92:46:41:b8:77:
3c:09:c3:be:4f:bb:b7:a1:9e:74:c9:6f:eb:9c:19:a4:2c:e0:
22:27:6d:12:fb:de:95:4b:af:ac:ad:5b:76:10:50:75:2e:18:
b4:42:11:36:76:91:8c:18:43:e1:96:fe:c2:b9:4f:c1:92:87:
da:ad:b3:2b:cd:7a:6f:d4:72:22:4d:00:d1:0f:7b:21:82:6b:
d6:65:0f:67:ed:bd:6d:5f:d8:01:6d:7f:f8:9e:fc:1c:ca:1e:
e9:3e:d2:07:b5:87:b7:d9:1a:9d:80:c3:66:39:1e:20:5c:5c:
c1:d6:e4:b5:7b:0d:91:c0:86:46:4a:75:0b:26:f9:20:25:89:
83:95:b5:f2:85:3e:b1:a1:18:b1:01:05:fc:36:d5:68:40:21:
69:05:2c:c7:3b:16:c2:e5:54:37:50:1b:cf:67:f5:fc:7b:03:
96:ae:8b:81:ac:f3:52:27:3a:b6:89:48:8e:a2:49:33:0b:5a:
92:d7:61:92:a7:ab:f9:11:08:e3:10:32:e4:8d:7c:1d:2b:04:
ac:fe:dc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 23:09:28 2024 by rpki-client on console-fra.rpki-client.org