Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UFbiEWM5Lpew2fIHqP9umRKfCYg.roa
File: UFbiEWM5Lpew2fIHqP9umRKfCYg.roa (raw, json)
Hash identifier: x7LZwsSIU5/GDnlL5MewYoO0Xr09a64WAbMis86sDvs=
Subject key identifier: 50:56:E2:11:63:39:2E:97:B0:D9:F2:07:A8:FF:6E:99:12:9F:09:88
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01915AC542CFE29AEA1889B0C597B3B50327
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UFbiEWM5Lpew2fIHqP9umRKfCYg.roa
Signing time: Fri 16 Aug 2024 10:39:22 +0000
ROA not before: Fri 16 Aug 2024 10:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 80.242.56.0/24 maxlen: 24
80.242.57.0/24 maxlen: 24
80.242.58.0/24 maxlen: 24
92.63.176.0/22 maxlen: 22
92.63.176.0/24 maxlen: 24
92.63.177.0/24 maxlen: 24
92.63.178.0/24 maxlen: 24
92.63.179.0/24 maxlen: 24
194.32.98.0/24 maxlen: 24
217.78.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 10:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5a:c5:42:cf:e2:9a:ea:18:89:b0:c5:97:b3:b5:03:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Aug 16 10:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5056e21163392e97b0d9f207a8ff6e99129f0988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:81:2b:7f:89:95:88:4e:b5:3d:ba:24:db:
56:e3:c5:73:7f:c7:43:30:fb:95:d0:0c:b9:95:ba:
98:21:50:12:c3:d9:42:15:39:61:40:18:a6:b4:1d:
d2:35:07:a2:f5:e2:8f:e8:dc:8a:65:23:83:06:b3:
c7:c4:b2:4c:af:45:30:c8:c0:8e:ae:20:c6:b3:c4:
6d:49:22:e1:8b:45:fb:29:5f:5e:e8:18:36:21:0f:
c5:73:5f:e6:67:bb:a6:cd:2f:30:e7:73:95:c5:c3:
65:65:1c:74:fc:bd:80:06:24:90:40:dc:58:48:7d:
f0:dd:01:85:83:02:fd:20:8c:6b:a5:ec:85:a0:f0:
01:e1:f2:89:4f:96:27:af:83:7b:e5:83:9a:71:71:
7a:f2:e5:31:a6:8f:a6:ce:e2:9e:5e:90:70:92:6d:
be:86:77:f7:5a:0e:be:5c:d7:ee:ea:bd:ec:12:60:
52:f3:6d:00:66:67:5e:ec:6f:41:b4:19:e7:d3:f0:
67:7d:80:a0:e7:4f:cc:0e:e2:69:89:91:e4:a6:26:
98:e5:d5:c0:a3:55:0c:aa:c2:4b:b9:10:8c:0a:0c:
14:93:ad:3c:e9:bd:eb:be:f6:85:9e:cf:a9:44:85:
62:03:d5:99:da:b9:fb:07:f8:43:22:48:89:b8:bc:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:56:E2:11:63:39:2E:97:B0:D9:F2:07:A8:FF:6E:99:12:9F:09:88
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UFbiEWM5Lpew2fIHqP9umRKfCYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.56.0-80.242.58.255
92.63.176.0/22
194.32.98.0/24
217.78.234.0/24
Signature Algorithm: sha256WithRSAEncryption
74:35:35:c3:54:2e:72:26:84:ff:7b:2d:c4:4f:4b:f2:83:9b:
e4:c0:ee:6d:ca:98:e9:0c:51:1f:1a:ac:12:fe:f7:32:e2:d1:
40:0c:07:35:f7:b9:36:96:9d:25:a4:a1:2e:1b:88:b4:c0:b3:
e1:c1:b4:d7:4a:58:3a:09:af:7d:e4:81:c5:a5:7d:82:d6:c6:
7b:14:4d:23:29:4b:22:83:d3:df:8b:98:bf:f2:0e:8a:56:fa:
c5:6c:55:9a:80:25:98:ef:71:20:51:5a:2d:ac:4b:5f:3b:1e:
7a:5f:bd:6a:b0:d6:98:60:0e:15:0c:f7:e1:38:6a:61:e5:31:
d6:2f:2f:b0:2b:93:01:3d:64:2c:3e:d7:8c:88:f0:f1:99:32:
dd:2f:87:48:ad:26:ea:f5:b1:8f:11:11:79:ec:39:b9:13:70:
3c:3d:1b:c6:18:14:21:56:98:ee:1e:a6:5a:e5:a3:1d:2d:d5:
d0:b7:87:82:f1:0b:6b:80:41:c3:0c:5d:f1:6c:31:f0:e2:b3:
e4:72:79:78:16:e8:f9:c7:8a:90:9f:55:e4:43:d8:7e:3d:1f:
b4:3d:31:33:bb:53:4e:0b:11:42:f7:5c:8d:10:ec:a2:6c:8d:
a5:70:35:08:49:52:33:86:d1:f4:ec:48:ed:9e:e5:fe:39:a9:
e5:96:47:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 14:42:40 2024 by rpki-client on console-ams.rpki-client.org