Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/UwhqtWEqJyAnNXwdxp3lNAQtKUM.roa
File: UwhqtWEqJyAnNXwdxp3lNAQtKUM.roa (raw, json)
Hash identifier: RF8drIrGNylAmRySjg8drBAHBbGiVL8fuc0qKrjtKpQ=
Subject key identifier: 53:08:6A:B5:61:2A:27:20:27:35:7C:1D:C6:9D:E5:34:04:2D:29:43
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 018AB80395ABA854D750CE21D80CF952D52E
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/UwhqtWEqJyAnNXwdxp3lNAQtKUM.roa
Signing time: Thu 21 Sep 2023 13:52:37 +0000
ROA not before: Thu 21 Sep 2023 13:52:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16633
IP address blocks: 185.201.17.0/24 maxlen: 24
185.201.18.0/24 maxlen: 24
193.200.214.0/24 maxlen: 24
45.93.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:03:95:ab:a8:54:d7:50:ce:21:d8:0c:f9:52:d5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Sep 21 13:52:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53086ab5612a272027357c1dc69de534042d2943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f0:48:17:fa:ca:4f:83:87:8c:db:3c:5a:c0:
88:92:5d:7f:9a:cc:82:c1:f3:19:bd:3f:7f:d3:f6:
cb:2a:5c:7f:47:d0:75:a8:14:22:77:12:4a:7f:af:
60:93:77:e3:e4:7b:92:d5:6a:2f:3d:7f:08:e2:82:
e0:b5:1b:db:70:9e:91:eb:3f:bf:a4:f6:49:d4:ed:
0d:ed:45:8c:1f:9c:cf:54:bf:b3:ef:2b:90:87:10:
23:d4:69:dd:58:4c:87:89:54:e9:5c:61:78:32:c0:
d9:2c:48:5a:4e:4f:0a:09:08:fb:e9:ca:16:05:a2:
dd:79:64:a2:e9:4a:a5:0a:45:03:d7:26:90:26:7c:
69:1f:a3:0e:8e:54:a1:30:65:d0:d8:14:9c:80:c0:
14:67:d3:d9:61:68:65:31:18:3e:fc:5c:e7:eb:f1:
65:ea:28:cc:04:80:33:64:07:03:b4:d5:f2:c5:29:
e7:4e:77:24:de:e7:97:d5:39:eb:e8:b5:b6:bc:57:
18:68:0f:c0:70:c6:04:bb:13:57:61:b9:5d:dd:d5:
59:9b:45:89:12:75:b8:ad:f9:92:1d:9a:e9:e2:15:
95:cc:d6:c9:8a:b0:08:47:5f:b9:c3:c0:ee:a5:a8:
50:bf:cd:1d:6f:41:ad:94:d4:54:8b:7f:18:99:96:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:08:6A:B5:61:2A:27:20:27:35:7C:1D:C6:9D:E5:34:04:2D:29:43
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/UwhqtWEqJyAnNXwdxp3lNAQtKUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.148.0/24
185.201.17.0-185.201.18.255
193.200.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:5b:c8:78:eb:39:5b:f8:4a:a3:77:75:06:b5:27:66:80:4c:
6f:32:72:a5:b5:7c:8e:4c:bf:ac:05:9e:cd:75:c0:dd:37:b6:
8c:22:e9:9a:81:c1:16:27:26:dc:df:09:ff:e6:f6:75:dd:cd:
01:af:fb:b8:da:70:dd:e8:82:39:a4:ba:99:98:e4:e7:1a:f4:
09:2b:f9:a8:d7:25:44:d2:13:85:02:7a:3c:38:6d:78:ba:67:
b0:33:78:d3:e0:82:84:dc:e9:fd:79:71:ed:98:60:cd:fe:4d:
bd:58:3d:16:96:5c:e0:a4:00:47:b1:e2:57:d7:c3:6d:cc:40:
1f:49:01:73:97:29:be:9f:a0:22:70:2c:dd:23:87:9c:67:47:
fb:6e:2f:19:a1:09:aa:75:ec:a6:ab:be:30:07:00:e4:e2:63:
c6:ac:7a:00:48:31:93:7a:38:6b:df:d2:f0:1d:be:31:6d:60:
dc:58:af:39:50:ee:6a:0a:8c:55:48:21:c0:b3:4b:51:81:16:
ad:a6:a3:d5:7e:5f:0c:03:d1:58:41:03:1e:1f:cf:ac:29:9b:
d2:e8:d9:3d:59:87:00:50:eb:2c:7f:46:e9:a6:36:6d:ee:f4:
dd:32:64:79:4e:1b:15:cf:37:6c:f0:f4:bf:38:46:b7:20:4d:
44:bc:9e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 15:04:13 2023 by rpki-client on console-ams.rpki-client.org