Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/Uycx8Wi7vDz8k43zUINadlUyzRE.roa
File: Uycx8Wi7vDz8k43zUINadlUyzRE.roa (raw, json)
Hash identifier: 2y7bzO4mli/FA8LEKk0axXHvlOEt0kWU6FNML9S3fFM=
Subject key identifier: 53:27:31:F1:68:BB:BC:3C:FC:93:8D:F3:50:83:5A:76:55:32:CD:11
Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial: 0191D5F499F0ABE1B6CF523230BBE8000196
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/Uycx8Wi7vDz8k43zUINadlUyzRE.roa
Signing time: Mon 09 Sep 2024 08:44:22 +0000
ROA not before: Mon 09 Sep 2024 08:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48348
IP address blocks: 89.248.96.0/20 maxlen: 20
89.248.97.0/24 maxlen: 24
93.174.0.0/21 maxlen: 21
93.174.4.0/24 maxlen: 24
185.15.76.0/22 maxlen: 22
185.80.4.0/22 maxlen: 22
2a05:7900::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 10 Sep 2024 15:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d5:f4:99:f0:ab:e1:b6:cf:52:32:30:bb:e8:00:01:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Validity
Not Before: Sep 9 08:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=532731f168bbbc3cfc938df350835a765532cd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d4:81:9b:9a:64:db:50:e3:a8:82:76:f5:e5:
eb:cf:86:55:4a:d2:21:fc:2f:f2:1c:41:01:b4:8e:
ed:a2:bc:d0:de:ea:66:2d:ec:b9:9a:52:f8:9f:5a:
a9:c8:74:4f:32:a4:5b:c0:bc:af:ef:fe:9b:70:f8:
c7:ca:e3:27:10:3c:b0:e7:7f:8f:f8:77:b6:fa:f5:
e3:93:dc:3e:69:19:0d:7d:59:6e:51:28:27:cf:93:
07:1a:e1:4d:09:2b:18:83:a2:c5:f6:8c:a2:e4:72:
a7:32:0a:65:8b:26:e9:19:2d:aa:4f:bc:81:dd:c4:
fd:40:5a:4d:fc:67:79:0a:25:12:47:80:78:00:88:
9c:49:27:42:53:1f:43:9a:db:ac:10:5d:8b:40:1e:
b4:1a:cb:ed:79:87:c9:d0:2a:54:6c:56:78:73:45:
65:9a:61:bd:89:58:eb:4c:9e:af:9f:c1:ed:88:3d:
db:57:8b:65:14:b1:d1:cd:91:0e:f6:63:87:e7:f6:
8f:a6:28:c1:57:27:fa:24:4a:8b:05:c7:06:de:7c:
1c:bc:d4:a6:e6:54:99:2b:69:fd:45:bf:b0:73:c4:
57:00:3c:95:c3:c9:a3:a7:06:4d:ea:08:d1:46:c2:
2e:51:b0:c4:03:ff:2c:3f:47:6e:93:05:21:98:40:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:27:31:F1:68:BB:BC:3C:FC:93:8D:F3:50:83:5A:76:55:32:CD:11
X509v3 Authority Key Identifier:
keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/Uycx8Wi7vDz8k43zUINadlUyzRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.96.0/20
93.174.0.0/21
185.15.76.0/22
185.80.4.0/22
IPv6:
2a05:7900::/29
Signature Algorithm: sha256WithRSAEncryption
a9:79:93:8f:5c:2f:9f:61:29:4a:92:3f:92:40:7c:ce:bc:f0:
bf:2e:2d:d2:43:c6:0a:e1:7f:97:e8:1d:50:d9:78:f0:dd:99:
29:e0:23:77:ca:82:a0:3e:ea:17:c6:f0:b0:c7:a2:94:4b:5b:
15:f2:b0:45:ba:f2:ff:9d:51:68:9a:ce:2c:2b:83:23:9c:d7:
0c:aa:d4:cd:f7:9b:cd:7e:52:f2:11:97:80:39:52:55:cf:2f:
62:9e:30:26:ed:20:c1:a8:d2:7f:41:f4:55:f9:52:e4:6b:99:
27:cd:86:6e:8b:1f:4b:1e:c3:ee:8b:5f:a5:87:c6:61:4b:79:
f8:f3:9a:8a:dc:c5:59:ba:8a:39:89:9b:57:66:a5:64:f8:34:
91:20:91:d8:1c:e9:a9:02:8f:f1:e9:56:a1:24:21:2c:f4:56:
27:7d:1d:81:40:bf:71:8f:fc:70:26:4f:40:bb:31:1a:35:8f:
78:cd:54:bc:98:b6:5e:61:93:75:e8:58:bc:df:17:63:c3:55:
45:01:0f:2a:e0:55:93:ad:c9:cf:4b:46:5a:01:41:c4:f1:a6:
f8:2e:10:4c:6b:20:b5:f3:f9:b7:42:d4:c0:3a:c9:5f:c8:c6:
6b:f4:b7:f5:68:c1:ea:f2:8f:c6:c8:33:ef:35:27:a5:67:08:
13:85:ba:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 17:30:57 2024 by rpki-client on console-fra.rpki-client.org