Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UcpNbhyoc_wr9HCnKEvqeOijsIQ.roa
File: UcpNbhyoc_wr9HCnKEvqeOijsIQ.roa (raw, json)
Hash identifier: 6j1A+hhkI/2k+PkQ6cLWyLAya+W0hwJcFEWrq9kjPWk=
Subject key identifier: 51:CA:4D:6E:1C:A8:73:FC:2B:F4:70:A7:28:4B:EA:78:E8:A3:B0:84
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018B1B9426D723F5D04B4E89ED17C27CC382
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UcpNbhyoc_wr9HCnKEvqeOijsIQ.roa
Signing time: Tue 10 Oct 2023 21:52:55 +0000
ROA not before: Tue 10 Oct 2023 21:52:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.238.135.0/24 maxlen: 24
193.238.134.0/24 maxlen: 24
193.33.48.0/24 maxlen: 24
45.147.194.0/24 maxlen: 24
91.224.22.0/24 maxlen: 24
91.224.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1b:94:26:d7:23:f5:d0:4b:4e:89:ed:17:c2:7c:c3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Oct 10 21:52:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51ca4d6e1ca873fc2bf470a7284bea78e8a3b084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:24:15:02:18:77:3e:c0:75:2f:08:0c:4c:
7c:73:aa:bf:50:60:1c:3a:3a:ce:18:fa:3f:bc:1d:
5e:e1:b6:fa:a9:90:8c:21:38:3f:5c:52:f1:5e:77:
f6:b7:08:2f:02:28:da:ae:33:95:09:3b:ef:6f:df:
6b:15:26:85:3a:0f:86:9e:8e:59:3d:5f:57:d3:64:
eb:a8:14:d2:5c:07:69:b2:e5:40:aa:4e:58:d5:f4:
2f:fb:b0:52:19:d6:97:9b:3a:79:a1:c9:96:c7:b8:
da:d5:6e:14:b5:24:b6:57:f2:30:33:69:07:a5:6b:
21:d6:b7:aa:c0:68:ef:ae:8f:28:74:a9:1f:16:ac:
6d:e0:83:0a:77:39:66:bd:4b:9d:ff:5d:6c:57:f3:
0a:6b:4d:45:63:aa:91:84:11:36:ba:e8:6d:f7:26:
21:14:7f:6f:2b:10:13:7c:10:a7:38:3f:3c:75:f4:
7c:2a:f9:a0:0f:b3:24:82:ba:ef:7c:9a:2e:86:58:
9c:59:30:f7:29:4d:f5:f0:8b:d6:a2:66:7a:64:e2:
2c:7c:9e:63:cc:4b:e8:2d:7a:4d:25:ac:cc:53:9f:
c6:8e:46:e1:ed:bd:9b:c0:d2:56:bf:ba:27:00:48:
90:93:e4:1a:7e:d6:dc:dd:6d:8e:ce:4f:c6:7a:5e:
d2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CA:4D:6E:1C:A8:73:FC:2B:F4:70:A7:28:4B:EA:78:E8:A3:B0:84
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UcpNbhyoc_wr9HCnKEvqeOijsIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.194.0/24
91.224.22.0/23
193.33.48.0/24
193.238.134.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:b6:f6:7a:e7:57:4b:e5:aa:21:46:fc:71:03:f4:41:bb:be:
9a:d3:33:49:d8:58:13:b8:99:31:97:0d:cf:2b:e7:a7:c7:57:
c0:c9:6b:f8:e3:c2:49:b5:16:3b:38:44:c8:2a:b2:2a:da:92:
ae:03:ae:50:2e:99:80:21:3f:12:0e:6e:7e:6a:aa:0f:a9:1d:
be:da:0f:11:e5:17:c7:b1:8a:6b:8f:cf:45:06:02:4c:6e:53:
24:a5:81:15:b1:13:22:0c:4c:40:c3:2a:ee:a6:9c:20:38:51:
21:4a:68:5d:61:49:5b:be:e9:e2:79:a5:0c:76:bb:9c:5b:32:
0e:dc:83:5e:48:67:6a:c8:ad:9d:06:44:d8:e0:fd:fb:ec:3e:
f2:28:31:d4:18:68:3a:b8:fd:d7:b0:c4:6c:fb:b3:81:68:dd:
a0:95:b4:ab:46:b6:3f:d9:51:8f:0a:06:f5:98:a5:8a:9f:11:
9e:25:70:05:47:7e:05:a8:ba:1d:16:3f:38:af:69:8b:96:e0:
4d:e8:1c:ff:09:ce:53:ab:b9:41:ed:7c:1c:8f:bd:38:79:23:
a9:bb:f0:26:3f:87:00:b7:7d:60:6d:be:b9:9a:c7:bb:0f:f3:
f8:b5:f1:14:dc:3d:4a:69:04:ae:06:46:bb:cb:16:78:74:3d:
c5:d4:44:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:49 2024 by rpki-client on console-ams.rpki-client.org