Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/UtYJXFX6RKxyoDwIUfZeN3BupXg.roa
File: UtYJXFX6RKxyoDwIUfZeN3BupXg.roa (raw, json)
Hash identifier: MRqk+QDLub7Y6Md9nkpg6hhU2F858FcvnOV6cqo/nz4=
Subject key identifier: 52:D6:09:5C:55:FA:44:AC:72:A0:3C:08:51:F6:5E:37:70:6E:A5:78
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0187767F871466EB079B16492151BE35743E
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/UtYJXFX6RKxyoDwIUfZeN3BupXg.roa
Signing time: Wed 12 Apr 2023 17:24:41 +0000
ROA not before: Wed 12 Apr 2023 17:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 178.253.40.0/22 maxlen: 24
83.147.244.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:76:7f:87:14:66:eb:07:9b:16:49:21:51:be:35:74:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 12 17:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52d6095c55fa44ac72a03c0851f65e37706ea578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:16:89:e2:ec:d5:64:4c:3b:b9:b0:c3:2e:13:
9c:36:df:5f:df:e1:7d:df:ac:fe:37:7a:23:64:a8:
5c:32:c8:f9:14:83:cb:16:ff:9c:af:3d:70:a4:36:
1f:23:43:16:0f:7d:b9:26:50:db:7b:43:70:76:97:
0e:8b:fa:e3:8f:d8:05:c4:37:ad:b1:c9:f9:58:f1:
cf:fc:98:86:9c:53:03:bb:88:16:fe:95:ae:f1:d6:
9d:b2:37:f2:f2:18:26:30:f4:20:2d:9a:9a:17:ad:
0e:73:e5:52:68:c6:bf:af:28:65:63:05:2c:35:30:
c0:1f:3c:9a:c3:ef:6c:da:a6:7d:c3:8b:e6:85:1e:
5e:28:f7:ae:ff:c3:f0:a4:c2:34:2d:61:51:1d:70:
1f:66:40:44:c0:e2:65:0e:71:61:36:65:f4:07:b6:
d1:8c:4f:0f:88:25:04:a4:fb:4f:33:f0:15:8d:35:
b5:2b:61:b6:12:60:0b:9c:45:83:99:58:78:79:3a:
b6:6e:bd:d3:7e:6a:b9:e7:6d:bd:07:dd:5c:b2:35:
fc:ed:d9:dd:a2:db:cb:48:56:16:28:c0:03:d8:70:
be:e1:39:ef:9f:1e:8b:9c:98:7f:a7:36:f8:f0:4b:
87:ce:74:1e:1c:03:73:33:89:16:73:a0:a4:7c:66:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D6:09:5C:55:FA:44:AC:72:A0:3C:08:51:F6:5E:37:70:6E:A5:78
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/UtYJXFX6RKxyoDwIUfZeN3BupXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0/22
178.253.40.0/22
Signature Algorithm: sha256WithRSAEncryption
32:a0:23:6a:59:59:dd:5a:b0:ca:10:38:59:9a:82:2c:73:00:
c7:27:c1:e2:b4:77:d6:25:4a:83:e4:b3:a6:87:80:8d:83:64:
91:c8:cb:fd:a0:fb:52:51:79:78:3b:3a:31:9d:e8:63:72:ef:
ae:74:c1:87:f6:40:30:f6:d8:a3:cf:24:e2:7e:08:a3:57:39:
d1:67:b0:9a:b0:d9:a6:1d:0e:37:1a:95:51:de:8e:83:24:ff:
48:9f:c7:b7:84:1e:07:0b:e8:7d:80:10:ef:cf:64:e0:a9:95:
38:06:c7:85:20:0a:6c:8c:f3:4c:90:e1:81:b0:ab:73:09:04:
47:c3:e4:76:e2:d0:f2:90:7a:5a:3a:1d:fa:26:cc:8e:84:86:
13:98:97:ed:7f:37:a9:1f:26:07:04:6e:69:f3:b0:40:09:19:
35:e0:c3:e2:56:5c:04:c1:83:06:65:38:61:37:88:c3:10:cb:
49:76:43:83:12:ee:cb:53:ae:c0:49:58:03:5b:70:aa:fd:12:
9c:79:90:11:34:4e:b4:26:4a:0c:36:48:d8:c9:7d:41:0b:c0:
83:11:b4:ea:cb:4d:23:98:96:ba:94:e5:da:6e:a0:0e:ba:2a:
75:8a:5e:4a:68:01:de:a0:d3:81:75:68:a5:32:a3:b9:4e:9c:
f0:21:0e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org