Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/uBlmdAU8ypuEOIiuixscRpMkiVE.roa
File: uBlmdAU8ypuEOIiuixscRpMkiVE.roa (raw, json)
Hash identifier: iWAaIHc8R6ZF8aGDCadfHerIOEZhvZwmGCUa0+WlHw4=
Subject key identifier: B8:19:66:74:05:3C:CA:9B:84:38:88:AE:8B:1B:1C:46:93:24:89:51
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: 01856C00FF435462AC4C1FFDB18BCB3A5008
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/uBlmdAU8ypuEOIiuixscRpMkiVE.roa
Signing time: Sun 01 Jan 2023 06:24:42 +0000
ROA not before: Sun 01 Jan 2023 06:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205201
IP address blocks: 194.28.130.0/24 maxlen: 24
188.120.122.0/23 maxlen: 23
188.120.123.0/24 maxlen: 24
188.120.121.0/24 maxlen: 24
188.120.122.0/24 maxlen: 24
188.120.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:00:ff:43:54:62:ac:4c:1f:fd:b1:8b:cb:3a:50:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Jan 1 06:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8196674053cca9b843888ae8b1b1c4693248951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:05:57:2a:ae:2f:38:6c:9c:24:83:6c:fc:
27:04:62:c2:39:86:1b:01:ff:e3:fb:41:3e:f6:16:
5f:da:6c:38:8d:dd:b9:55:35:9e:19:e7:87:8f:9f:
b0:0c:b9:43:94:26:23:5a:9d:b7:6b:68:e1:14:d6:
d4:20:a1:46:41:b4:8c:74:7d:77:0a:1f:ef:df:91:
27:64:e0:9c:af:62:35:8b:55:32:05:ed:96:98:44:
c1:9f:71:89:d2:c6:21:0d:12:bf:31:46:07:cb:9f:
2d:64:6c:85:f5:86:a3:30:1a:39:53:24:f0:e2:e5:
a1:9a:83:b6:df:2b:c2:66:4e:8f:e2:4e:f3:18:aa:
3e:4f:5f:e6:8a:5f:74:d4:c4:e2:2a:11:18:e0:7c:
00:c2:5c:5b:bc:b0:4b:6a:70:25:7d:10:e4:00:12:
0e:63:8a:3f:8c:ea:f6:ce:bc:64:1c:9b:5a:b4:69:
6a:76:62:dc:10:90:d0:be:17:a3:15:fd:a7:9e:2a:
e6:1a:f5:dc:53:2c:1b:b0:8a:77:9e:69:ef:52:86:
b8:15:24:a8:de:5a:85:bd:90:9d:a4:a1:7a:98:d8:
4e:d9:5c:ec:92:5f:bf:91:d4:f0:b9:76:47:2d:97:
ef:2c:1d:11:eb:de:41:d0:62:fe:54:7d:2b:0d:60:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:19:66:74:05:3C:CA:9B:84:38:88:AE:8B:1B:1C:46:93:24:89:51
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/uBlmdAU8ypuEOIiuixscRpMkiVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.120.121.0-188.120.123.255
188.120.126.0/24
194.28.130.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c6:07:bb:ba:cb:0e:e7:75:cd:b6:3c:1b:91:54:d5:b6:d7:
34:d2:73:20:60:97:e1:a1:81:bb:e7:38:b6:16:52:98:8f:4b:
73:06:13:de:10:9b:42:6a:a8:a8:0b:d2:e5:9c:9a:5a:f7:4b:
e8:87:0f:80:68:69:29:bb:5b:f3:21:cc:60:5c:2a:5e:78:45:
51:9b:49:29:ae:18:53:33:e0:54:a0:a1:5c:68:c6:65:42:3f:
85:e8:50:c6:89:5a:d1:97:e5:ab:a2:c1:ae:60:51:b0:8e:7d:
4e:ed:f7:f1:a9:c3:aa:ea:9f:cf:c2:b1:cc:6a:0e:e8:d5:ff:
c6:c7:27:a0:a7:80:58:94:f6:7b:60:59:72:9b:36:bb:e8:6b:
c1:ff:2d:19:64:82:a2:76:01:6b:27:a3:1e:6d:a5:1f:02:1d:
d6:06:7f:fe:6b:46:7c:9f:98:a4:c7:5f:32:33:80:a9:26:14:
a5:2d:17:2e:a8:a2:1d:7d:7b:80:4e:f4:0b:f0:b2:74:b5:bd:
41:bc:02:34:c0:31:49:28:eb:8b:92:13:32:2b:64:9d:34:73:
13:29:0c:1e:6f:0d:63:05:93:51:58:2b:6a:33:d2:07:44:22:
bd:89:c1:6a:d8:6a:d1:30:3c:fa:74:cd:9c:5a:95:12:b3:b9:
86:d1:9a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:29 2024 by rpki-client on console-ams.rpki-client.org