Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Uoieo64r5EOX9UB8MtuhrRuEwq0.roa
File: Uoieo64r5EOX9UB8MtuhrRuEwq0.roa (raw, json)
Hash identifier: vT/eZj2TJ1mUUTWPSm97bqI/0ot3jf/x859srmuclCo=
Subject key identifier: 52:88:9E:A3:AE:2B:E4:43:97:F5:40:7C:32:DB:A1:AD:1B:84:C2:AD
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 018921A10EE5E0A3C187CF39256CD24EBC5D
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Uoieo64r5EOX9UB8MtuhrRuEwq0.roa
Signing time: Tue 04 Jul 2023 15:59:10 +0000
ROA not before: Tue 04 Jul 2023 15:59:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62455
IP address blocks: 185.182.72.0/22 maxlen: 24
185.233.176.0/22 maxlen: 24
185.205.229.0/24 maxlen: 24
185.205.228.0/22 maxlen: 24
185.205.228.0/24 maxlen: 24
185.205.230.0/24 maxlen: 24
2a0b:bc0::/29 maxlen: 29
2a0a:e780::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:a1:0e:e5:e0:a3:c1:87:cf:39:25:6c:d2:4e:bc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Jul 4 15:59:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52889ea3ae2be44397f5407c32dba1ad1b84c2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:6a:25:40:a0:13:46:ab:35:08:9d:e7:a0:
58:3e:42:61:de:3e:97:d8:55:f5:39:41:32:fb:c0:
94:4c:a3:1d:23:82:30:38:af:d7:2b:a8:83:eb:bc:
50:ee:2c:98:4a:5f:69:fe:27:a7:bd:7e:0f:cc:82:
44:31:c7:9d:4d:3e:01:5f:25:b7:52:37:e5:9a:84:
01:38:c3:f9:d8:4b:e0:f7:c2:ab:db:30:aa:36:aa:
37:0a:9f:8d:84:30:20:0f:ee:bd:89:37:bf:96:40:
a2:1c:7a:dd:2d:e9:c0:69:f3:e8:08:b5:55:b0:c4:
90:b3:8b:25:bc:79:23:9f:1c:a7:2e:fd:5f:56:8d:
0b:f9:5f:9c:97:69:59:5b:24:1b:d7:a8:fc:ed:5c:
61:dd:d1:20:05:a0:a7:0e:55:e2:e8:ac:b3:4a:6c:
d9:b2:48:65:3f:1b:ee:f9:8a:c5:f2:4c:56:cb:22:
35:24:f5:7d:41:24:2b:91:04:96:5e:45:84:a0:a1:
ae:3b:26:63:ce:62:45:c4:f9:5f:29:21:ee:09:cd:
93:bd:96:45:b2:bb:96:dc:cb:f2:18:b4:bb:91:f2:
0f:4b:b4:b1:84:2e:29:50:ea:24:23:1d:ef:d5:e8:
1f:4e:c2:75:3f:ea:7f:f5:76:74:b7:1b:74:90:98:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:88:9E:A3:AE:2B:E4:43:97:F5:40:7C:32:DB:A1:AD:1B:84:C2:AD
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Uoieo64r5EOX9UB8MtuhrRuEwq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.72.0/22
185.205.228.0/22
185.233.176.0/22
IPv6:
2a0a:e780::/29
2a0b:bc0::/29
Signature Algorithm: sha256WithRSAEncryption
20:5b:cf:fb:b1:36:a6:e7:17:53:86:d5:23:4b:2e:f0:8b:ac:
28:9f:ef:08:72:ac:0d:a1:53:ff:1d:82:51:ad:9b:d9:05:a0:
6e:82:96:63:29:6a:dd:fe:72:29:7f:f5:9a:a2:50:fe:d7:c7:
f3:dd:f9:71:be:9f:8c:1b:0c:13:f7:60:f6:d5:9c:80:86:70:
50:b6:3e:c2:b9:24:b5:9b:cf:0a:ca:35:a1:86:27:51:e9:ec:
cb:c5:a9:dd:9f:d7:8b:8b:0f:fb:ee:03:0b:fe:0f:7a:84:fa:
0c:f3:c6:6c:21:af:08:d7:6d:ef:89:62:be:a5:09:fc:9c:cc:
14:c9:d1:c9:d0:83:f4:85:05:f7:54:9e:f1:57:3d:a2:11:08:
31:0f:5c:b0:f6:1a:30:ec:f8:e2:2a:03:2b:8b:de:ff:dd:f2:
1e:e4:ab:f3:55:63:a8:fb:a4:88:5b:58:22:74:1a:66:be:a5:
c1:98:ca:3d:2d:8e:1f:87:cf:15:63:33:85:a0:da:65:e9:12:
ec:bd:6e:6d:51:4a:eb:d0:43:74:b9:c1:30:5a:e6:28:46:fa:
7e:be:2a:25:02:df:5d:21:82:f2:fc:5e:89:ea:62:00:21:99:
77:d7:8e:4b:32:60:8d:d0:b5:a6:58:cb:42:ef:75:cd:69:16:
7f:da:08:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:56 2023 by rpki-client on console-fra.rpki-client.org