Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/UJuYnz8PkiQTDRP3XiLbODa9dmo.roa
File: UJuYnz8PkiQTDRP3XiLbODa9dmo.roa (raw, json)
Hash identifier: bOo9fn9KtS/foYF+93ZP9Asvbf5SDmCm4Kr61cy9DnY=
Subject key identifier: 50:9B:98:9F:3F:0F:92:24:13:0D:13:F7:5E:22:DB:38:36:BD:76:6A
Certificate issuer: /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Certificate serial: 018A3BF1D6F36AD79CF1F2789FFD543A6E4F
Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/UJuYnz8PkiQTDRP3XiLbODa9dmo.roa
Signing time: Mon 28 Aug 2023 11:40:19 +0000
ROA not before: Mon 28 Aug 2023 11:40:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61155
IP address blocks: 94.142.160.0/22 maxlen: 22
2a04:d3c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:f1:d6:f3:6a:d7:9c:f1:f2:78:9f:fd:54:3a:6e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Validity
Not Before: Aug 28 11:40:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=509b989f3f0f9224130d13f75e22db3836bd766a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:dc:c9:57:5c:20:dc:28:1e:b2:c7:de:53:
95:db:a4:87:8e:78:27:ea:31:90:ac:f9:38:0e:e6:
df:87:ca:d8:de:9a:c5:1e:d8:11:b3:e4:11:89:71:
8d:57:eb:05:f2:ff:d4:01:14:26:ad:1c:ec:38:6f:
10:65:86:e6:0f:11:da:d5:b8:49:48:7c:89:af:65:
ad:88:88:d7:7e:08:e3:a8:24:03:e2:90:03:a7:a4:
e4:95:f5:84:94:aa:32:5b:4c:fc:21:fd:f6:0c:ed:
c2:05:7d:c9:7d:fc:21:e4:35:f2:47:a2:6d:25:bc:
93:dc:b8:64:e5:83:f8:7c:58:03:3e:e4:b7:68:57:
e1:7b:c7:86:cc:9b:0d:81:d9:dc:b2:22:f5:d8:57:
11:a8:f6:f8:e4:ce:43:1f:6e:19:b3:4c:0c:fc:c0:
61:52:05:ef:54:0e:1b:90:39:f2:09:24:67:f8:f0:
97:6a:ac:4f:f6:96:36:a2:e7:fb:df:22:4d:79:d8:
76:bc:b7:16:7b:ce:59:95:b0:0e:9e:11:8d:1b:bb:
dd:db:f2:41:55:7b:25:11:1c:6c:4f:03:f6:24:1f:
39:b7:55:de:ab:10:f0:8c:80:1c:ef:1f:3f:4b:1d:
df:9f:7b:6a:71:d8:70:fa:f6:68:08:cd:d6:93:c2:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9B:98:9F:3F:0F:92:24:13:0D:13:F7:5E:22:DB:38:36:BD:76:6A
X509v3 Authority Key Identifier:
keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/UJuYnz8PkiQTDRP3XiLbODa9dmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.160.0/22
IPv6:
2a04:d3c0::/29
Signature Algorithm: sha256WithRSAEncryption
29:06:c1:06:8a:b4:fd:13:47:cd:0d:90:64:a6:02:29:ae:24:
5a:50:3c:88:c5:a6:83:20:f8:1a:90:15:87:19:91:9e:35:f4:
6d:80:9f:f1:a4:55:02:a3:6c:fc:52:25:4c:c1:4c:9d:df:30:
52:5d:35:e6:25:27:63:aa:57:6e:79:93:40:6e:c7:5c:6c:24:
f5:ec:1d:fa:3a:d2:46:99:b9:94:42:02:cd:20:5e:82:d3:48:
9a:b6:dc:8a:90:e6:5c:a1:ae:26:e2:d3:6b:6c:ee:00:a1:c7:
3d:cb:6e:b0:07:6c:a5:a3:da:1d:15:b7:c7:c3:58:58:27:30:
1f:fa:d1:43:75:c1:37:b0:b7:8a:a7:c7:cd:5e:b9:68:45:8b:
75:25:b0:32:00:2b:8c:68:bf:25:44:84:fb:80:07:c3:e4:78:
50:37:bf:b6:b5:e6:0f:e6:9a:66:f9:1b:29:97:b4:f2:16:14:
c9:ab:8b:2a:21:42:e7:ef:56:9f:5c:18:61:c4:8f:25:75:35:
66:f8:f2:8d:3e:d1:91:0b:d0:44:40:6c:42:f9:e5:13:4a:9c:
be:bf:2f:a1:2e:89:1e:5b:e9:6b:ee:cf:e3:e5:3f:1c:8a:53:
0c:81:12:74:f4:87:b8:ee:e9:b5:08:45:38:09:70:08:79:6c:
8b:e3:d1:ba
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYo78dbzatec8fJ4n/1UOm5PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTVmNjgyYmM2ZDU3N2RmYzNjMTBlY2VlMjcxODM4MWZl
ZTNiMjMwHhcNMjMwODI4MTE0MDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDliOTg5ZjNmMGY5MjI0MTMwZDEzZjc1ZTIyZGIzODM2YmQ3NjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2brcyVdcINwoHrLH3lOV26SHjngn
6jGQrPk4Dubfh8rY3prFHtgRs+QRiXGNV+sF8v/UARQmrRzsOG8QZYbmDxHa1bhJ
SHyJr2WtiIjXfgjjqCQD4pADp6TklfWElKoyW0z8If32DO3CBX3Jffwh5DXyR6Jt
JbyT3Lhk5YP4fFgDPuS3aFfhe8eGzJsNgdncsiL12FcRqPb45M5DH24Zs0wM/MBh
UgXvVA4bkDnyCSRn+PCXaqxP9pY2ouf73yJNedh2vLcWe85ZlbAOnhGNG7vd2/JB
VXslERxsTwP2JB85t1XeqxDwjIAc7x8/Sx3fn3tqcdhw+vZoCM3Wk8LVnwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFCbmJ8/D5IkEw0T914i2zg2vXZqMB8GA1UdIwQY
MBaAFCuV9oK8bVd9/DwQ7O4nGDgf7jsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMt
ZTAxYTU2ZjU4ZDM3LzEvVUp1WW56OFBraVFURFJQM1hpTGJPRGE5ZG1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMtZTAxYTU2ZjU4ZDM3
LzEvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCXo6gMA0E
AgACMAcDBQMqBNPAMA0GCSqGSIb3DQEBCwUAA4IBAQApBsEGirT9E0fNDZBkpgIp
riRaUDyIxaaDIPgakBWHGZGeNfRtgJ/xpFUCo2z8UiVMwUyd3zBSXTXmJSdjqldu
eZNAbsdcbCT17B36OtJGmbmUQgLNIF6C00iattyKkOZcoa4m4tNrbO4Aocc9y26w
B2ylo9odFbfHw1hYJzAf+tFDdcE3sLeKp8fNXrloRYt1JbAyACuMaL8lRIT7gAfD
5HhQN7+2teYP5ppm+Rspl7TyFhTJq4sqIULn71afXBhhxI8ldTVm+PKNPtGRC9BE
QGxC+eUTSpy+vy+hLokeW+lr7s/j5T8cilMMgRJ09Ie47um1CEU4CXAIeWyL49G6
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:38 2024 by rpki-client on console-fra.rpki-client.org