Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ubQOozWDAIcYBmSwskLSv9UqTRs.roa
File: ubQOozWDAIcYBmSwskLSv9UqTRs.roa (raw, json)
Hash identifier: eQwjkd33HBPIKt6eLhY8M1EWfRKRIc1Pmylm4FsX5Ts=
Subject key identifier: B9:B4:0E:A3:35:83:00:87:18:06:64:B0:B2:42:D2:BF:D5:2A:4D:1B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01859C23059C10C17EAF56E0D20DD8291621
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ubQOozWDAIcYBmSwskLSv9UqTRs.roa
Signing time: Tue 10 Jan 2023 14:43:38 +0000
ROA not before: Tue 10 Jan 2023 14:43:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 193.218.34.0/24 maxlen: 24
45.83.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9c:23:05:9c:10:c1:7e:af:56:e0:d2:0d:d8:29:16:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 10 14:43:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9b40ea335830087180664b0b242d2bfd52a4d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:71:34:df:f3:b1:44:b9:31:e7:43:a2:11:
63:f1:9c:ea:04:28:10:fb:6b:be:7a:5b:5e:55:bc:
d3:5d:6d:6c:2c:6b:df:a1:0c:e3:13:3d:83:07:20:
45:e1:7f:01:de:64:b5:2f:b7:b9:4e:f1:8d:04:64:
75:29:6b:f6:94:09:dc:dd:52:81:18:fb:7a:0b:72:
7d:f7:6c:a9:92:d7:fd:53:26:c6:37:29:0b:40:4b:
0b:31:f1:56:a3:c3:ce:50:16:db:ff:e8:6f:9f:54:
1b:4f:7c:9f:e1:15:72:05:ab:62:67:f7:4d:bf:f2:
59:2b:46:4c:1a:9a:1b:32:65:d1:f5:be:58:6d:c4:
cb:1d:b9:2a:78:c7:ee:0f:27:4b:0e:c6:4d:6a:52:
13:1c:ad:ca:7e:44:e3:a8:d9:87:c1:c1:35:ea:8a:
95:8f:04:22:24:cb:d8:17:b1:8d:39:4b:e4:46:47:
2a:f3:60:76:5e:18:f8:2e:ed:02:82:c5:2e:0c:75:
65:5f:c4:df:3a:b2:54:31:a4:a9:61:1b:46:11:e5:
d4:95:bc:eb:64:e2:4a:74:0c:0e:8c:ec:b8:e5:bc:
d4:70:15:24:14:f6:bc:10:90:11:8b:2b:d0:a2:05:
c3:db:18:5b:d8:06:ed:dc:9b:b8:ac:62:ac:b8:92:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B4:0E:A3:35:83:00:87:18:06:64:B0:B2:42:D2:BF:D5:2A:4D:1B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ubQOozWDAIcYBmSwskLSv9UqTRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.28.0/24
193.218.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b1:1b:b1:31:70:86:86:e3:9f:4e:15:68:be:df:97:17:fd:
5a:f6:36:67:5f:96:2a:87:a7:e9:dd:26:73:3b:42:4b:19:2b:
f1:7d:5d:ff:fb:1c:18:68:58:fd:d8:3c:04:cf:de:6b:e0:87:
26:a6:b4:7d:a8:d7:ea:a7:26:6f:fb:79:05:84:c6:a8:f6:53:
83:46:11:7e:aa:59:94:24:c4:a8:c8:86:bf:b2:58:1a:15:04:
e5:b0:ff:71:db:6c:91:05:52:7a:6a:fc:82:3f:5d:40:6f:c4:
6d:25:18:57:55:d9:17:12:3c:ba:64:e3:4b:13:2b:68:6b:5e:
fb:8f:9e:66:a7:60:82:df:0d:cd:df:1d:6a:a3:db:15:29:da:
a9:78:b3:94:64:7b:ad:09:62:27:cb:5a:43:a5:ff:7f:34:77:
5d:84:1d:aa:9c:c4:55:63:f3:03:ad:d3:fa:f5:02:4c:2d:bd:
96:87:c8:b5:a0:b1:0f:6f:21:14:29:e9:cc:9d:ff:1e:03:98:
f6:2a:e4:63:8b:98:c4:b3:13:c9:9d:a4:a8:39:6b:7a:71:72:
fd:d0:2a:4d:8d:e6:75:c8:f3:d7:48:a8:c1:f8:cd:2e:f1:6b:
a1:ad:2f:e8:d0:55:04:08:b1:09:30:1b:23:25:6e:71:9b:23:
ed:1f:59:a6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYWcIwWcEMF+r1bg0g3YKRYhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMTEwMTQ0MzM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWI0MGVhMzM1ODMwMDg3MTgwNjY0YjBiMjQyZDJiZmQ1MmE0ZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5dxNN/zsUS5MedDohFj8ZzqBCgQ
+2u+elteVbzTXW1sLGvfoQzjEz2DByBF4X8B3mS1L7e5TvGNBGR1KWv2lAnc3VKB
GPt6C3J992ypktf9UybGNykLQEsLMfFWo8POUBbb/+hvn1QbT3yf4RVyBatiZ/dN
v/JZK0ZMGpobMmXR9b5YbcTLHbkqeMfuDydLDsZNalITHK3KfkTjqNmHwcE16oqV
jwQiJMvYF7GNOUvkRkcq82B2Xhj4Lu0CgsUuDHVlX8TfOrJUMaSpYRtGEeXUlbzr
ZOJKdAwOjOy45bzUcBUkFPa8EJARiyvQogXD2xhb2Abt3Ju4rGKsuJJWhwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLm0DqM1gwCHGAZksLJC0r/VKk0bMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvdWJRT296V0RBSWNZQm1Td3NrTFN2OVVxVFJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVMcAwQA
wdoiMA0GCSqGSIb3DQEBCwUAA4IBAQA7sRuxMXCGhuOfThVovt+XF/1a9jZnX5Yq
h6fp3SZzO0JLGSvxfV3/+xwYaFj92DwEz95r4IcmprR9qNfqpyZv+3kFhMao9lOD
RhF+qlmUJMSoyIa/slgaFQTlsP9x22yRBVJ6avyCP11Ab8RtJRhXVdkXEjy6ZONL
Eytoa177j55mp2CC3w3N3x1qo9sVKdqpeLOUZHutCWIny1pDpf9/NHddhB2qnMRV
Y/MDrdP69QJMLb2Wh8i1oLEPbyEUKenMnf8eA5j2KuRji5jEsxPJnaSoOWt6cXL9
0CpNjeZ1yPPXSKjB+M0u8WuhrS/o0FUECLEJMBsjJW5xmyPtH1mm
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org