Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/cUNWOgmBfu2iMYMH5HfUUZtatzI.roa
File: cUNWOgmBfu2iMYMH5HfUUZtatzI.roa (raw, json)
Hash identifier: jtLm0MKFv0s4MoZLPXJ4fKo7rf0ZBcv1M/+Ret+6uP4=
Subject key identifier: 71:43:56:3A:09:81:7E:ED:A2:31:83:07:E4:77:D4:51:9B:5A:B7:32
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 018A945765062665665398C46A6FF5E42BBF
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/cUNWOgmBfu2iMYMH5HfUUZtatzI.roa
Signing time: Thu 14 Sep 2023 15:37:50 +0000
ROA not before: Thu 14 Sep 2023 15:37:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.50.0.0/24 maxlen: 24
45.149.61.0/24 maxlen: 24
45.149.62.0/24 maxlen: 24
45.149.62.0/23 maxlen: 23
45.149.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:94:57:65:06:26:65:66:53:98:c4:6a:6f:f5:e4:2b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Sep 14 15:37:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7143563a09817eeda2318307e477d4519b5ab732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f6:ce:c3:c3:59:f7:ba:82:3e:73:28:c9:46:
4e:4c:04:49:62:48:06:01:60:4c:d3:3d:e2:a1:6f:
31:d4:f5:db:4a:4f:46:6c:6c:2f:35:8a:f7:6e:8d:
8e:34:39:0a:3a:f3:b3:3c:91:d4:43:c1:48:bb:fb:
20:8e:ce:e7:ed:cd:ec:e9:fa:58:f2:b5:6c:ef:b5:
b5:4d:38:4b:7e:3a:ce:bf:a9:08:a4:0b:43:74:0c:
24:d5:85:40:75:cf:1d:f7:55:11:bf:bd:8b:80:af:
72:be:ed:89:74:c5:d7:cf:8f:04:12:6a:a8:f3:32:
d9:bc:b8:c4:1a:1d:1d:e6:c8:f0:3a:bb:75:5b:d9:
f2:17:27:46:7b:c6:3e:f9:f4:c5:59:37:c8:9f:4a:
07:fc:22:49:fc:71:a3:9c:91:d8:44:69:7a:04:6b:
06:c2:76:5c:c5:17:48:0f:35:72:33:52:3a:43:04:
1c:77:da:36:7c:88:38:85:c0:74:6b:f8:f4:2e:d8:
77:f3:5b:fc:5e:96:0c:e7:a7:ac:62:55:55:3d:58:
09:11:3b:46:6e:96:4a:1a:c9:d3:fd:e9:ea:79:ec:
19:4e:ff:42:89:fe:ae:62:e1:8b:80:5c:5c:c6:5d:
ee:73:3a:37:da:ba:c8:7b:b5:82:c2:26:0d:57:ee:
02:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:43:56:3A:09:81:7E:ED:A2:31:83:07:E4:77:D4:51:9B:5A:B7:32
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/cUNWOgmBfu2iMYMH5HfUUZtatzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.60.0/22
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c1:b9:53:3c:66:29:62:f7:32:14:57:3a:92:37:62:a0:aa:
b3:8e:e4:d0:0c:3a:b9:f8:6d:42:36:20:47:9a:d2:fa:ef:ce:
8a:15:4b:41:65:03:4f:33:47:e1:10:ad:ce:d8:27:31:19:b3:
c3:02:1c:26:d7:90:e7:4b:3f:f0:1b:b1:30:de:a0:ec:a6:15:
a6:67:e2:e8:63:12:97:69:01:ae:65:3a:04:f3:cd:b2:35:26:
45:60:ba:a3:cb:84:0c:1b:db:19:5d:75:d9:ca:d3:b0:e0:96:
12:5c:21:24:ac:55:da:86:34:a0:5a:b5:1c:36:aa:94:61:a9:
ad:1e:5e:e4:e7:b6:a2:fe:28:39:23:1a:c7:98:83:7e:a6:1b:
f4:bd:80:2b:c3:93:6f:c3:79:e4:9d:95:40:92:97:1e:cb:0a:
9e:2c:b1:05:b4:28:29:cb:1e:41:6e:8d:33:27:42:ae:64:95:
a9:a1:cc:61:88:b2:4e:eb:6e:00:d7:22:68:6d:1f:2e:de:08:
5e:c6:03:e8:e2:87:e6:9e:03:67:b5:3d:29:c2:f4:99:e0:0a:
07:f5:30:7c:e7:fb:bf:16:b5:af:bf:c6:77:10:59:7d:70:fb:
72:15:60:df:2d:36:3f:a6:0a:aa:e9:28:05:e3:ce:fd:6e:ca:
07:d7:88:13
-----BEGIN CERTIFICATE-----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Generated at Sat Sep 23 06:17:52 2023 by rpki-client on console-fra.rpki-client.org