Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/UxqYk7rWAIOyRNoStKP-oV1X1xM.roa
File: UxqYk7rWAIOyRNoStKP-oV1X1xM.roa (raw, json)
Hash identifier: FI5kCMZhBZaAZlCdpoTQgyDOc+mnw2cODwWTSoUr22s=
Subject key identifier: 53:1A:98:93:BA:D6:00:83:B2:44:DA:12:B4:A3:FE:A1:5D:57:D7:13
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 0186FEB4CE0AA94D19B11EA04ADA023FA8D0
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/UxqYk7rWAIOyRNoStKP-oV1X1xM.roa
Signing time: Mon 20 Mar 2023 11:08:27 +0000
ROA not before: Mon 20 Mar 2023 11:08:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31435
IP address blocks: 185.240.180.0/23 maxlen: 23
82.146.22.0/24 maxlen: 24
82.146.20.0/23 maxlen: 23
82.146.26.0/23 maxlen: 23
84.238.208.0/21 maxlen: 21
84.238.220.0/23 maxlen: 23
84.238.220.0/22 maxlen: 22
84.238.224.0/22 maxlen: 22
84.238.222.0/24 maxlen: 24
185.240.152.0/23 maxlen: 23
185.240.154.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:b4:ce:0a:a9:4d:19:b1:1e:a0:4a:da:02:3f:a8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Mar 20 11:08:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=531a9893bad60083b244da12b4a3fea15d57d713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:20:01:99:bb:38:cf:95:08:f3:4d:54:55:
6d:b6:58:db:55:ac:53:5a:df:6d:20:de:97:77:89:
22:20:68:55:94:c4:d9:4c:f5:1a:46:ee:af:f6:0f:
65:b8:ef:57:36:2d:95:ef:17:97:c5:61:aa:ae:34:
ea:b5:15:1c:92:47:44:44:99:84:ef:0f:15:7d:e1:
6c:53:10:b7:be:ca:f3:bf:dd:db:c0:b2:44:9e:10:
99:3d:c5:44:1c:7f:7a:64:8c:16:d5:65:dc:24:e6:
23:69:57:dc:a7:0f:fd:d9:35:03:0d:45:44:93:f7:
5b:cb:1a:40:7e:87:ba:6c:93:0e:14:a6:0f:4b:18:
d5:ef:15:39:36:1e:99:e8:50:c7:74:42:f2:8a:ab:
04:c2:87:2b:1d:a8:db:90:f1:67:5c:9e:51:f7:4a:
a6:01:b3:ba:53:5f:4c:b2:1b:42:14:f3:a9:50:56:
97:f0:5d:2d:15:2f:36:a4:da:8f:f1:2e:0d:62:c6:
1a:54:a9:94:80:d9:b9:a1:da:dc:fe:5c:f1:38:50:
a8:fa:e1:03:a3:be:51:5c:1f:40:75:03:4c:bd:08:
0c:3a:6e:5d:d1:58:cf:8b:46:e2:d2:5e:69:ca:f6:
40:54:6d:21:95:45:45:59:1b:b6:38:6a:63:ab:b6:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1A:98:93:BA:D6:00:83:B2:44:DA:12:B4:A3:FE:A1:5D:57:D7:13
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/UxqYk7rWAIOyRNoStKP-oV1X1xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.20.0-82.146.22.255
82.146.26.0/23
84.238.208.0/21
84.238.220.0-84.238.227.255
185.240.152.0/22
185.240.180.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:df:2c:17:f1:58:dd:72:56:08:f8:f5:79:7d:75:50:8c:04:
f1:f9:68:dc:b4:3f:a4:3e:17:33:14:f1:57:19:a3:bb:fd:4f:
95:26:47:5a:d7:4d:ec:df:1d:b5:23:e9:a8:1c:fd:2a:39:5d:
14:ff:49:0b:13:91:83:50:b6:33:b9:f5:8d:88:5d:08:d7:42:
4d:f0:45:e3:ac:8a:2c:59:92:88:c8:2b:e3:4a:78:ee:be:31:
68:6d:7b:81:29:25:98:5e:db:74:34:ec:1d:cd:f5:69:d4:1b:
a0:8f:20:f5:2d:f1:c7:6d:63:23:71:3d:00:b0:64:aa:12:90:
26:6b:59:cb:9a:18:e3:b0:6e:ec:cc:77:a6:74:32:94:be:22:
55:40:d4:c4:3b:d6:57:76:a8:3c:a8:80:45:34:0c:04:50:82:
15:a9:79:61:db:42:d9:bd:a7:ac:28:b4:f2:c1:81:25:be:b9:
63:a6:79:98:49:d6:cf:5d:c1:b1:62:2e:40:17:24:ba:ea:db:
17:98:b5:b8:fc:ce:d2:3b:57:34:8d:99:d1:89:e0:f9:4e:4f:
93:6f:7a:5d:8e:44:0c:15:3a:1e:92:16:2b:ca:16:9e:56:f1:
bc:4f:41:88:f6:f3:9d:1a:fc:62:dd:fb:00:2f:eb:6b:2d:79:
49:dc:1c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:54 2024 by rpki-client on console-fra.rpki-client.org